# changelog

author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-10
changelog:
  - Resolves: RHEL-69822 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-8.10.z]
  - Resolves: RHEL-71215 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-11
changelog:
  - Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-12
changelog:
  - Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
  - Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
  - Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
  - Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
  - Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
  - Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
  - Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-13
changelog:
  - Resolves: RHEL-89749 - Nested group does not receive memberOf attribute [rhel-8.10.z]
  - Resolves: RHEL-89758 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-8.10.z]
  - Resolves: RHEL-89765 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-8.10.z]
  - Resolves: RHEL-89778 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-14
changelog:
  - Reverts: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-95442 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-8.10.z]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: José Matos <jamatos[AT]fc.up.pt> - 0.9.6.13.1-3
changelog:
  - Remove remaining --record.
  - Add more documentation (Doc and Tools).
  - Add correct entry for egg-info (F9+).


author: Orion Poplawski <orion@cora.nwra.com> - 0.23.4-1
changelog:
  - Update to 0.23.4
  - Ship cythonize3
  - Modernize and cleanup spec
  - Run tests, one python3 test fails with 3.5


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.1.9-6
changelog:
  - Add explicit requirement on javapackages-tools for script which
    uses java-functions. See RHBZ#1600426.


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Wim Taymans <wtaymans@redhat.com> - 2.0.10-2
changelog:
  - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit
    functions in video/SDL_blit*.c
  - Resolves: rhbz#1756279


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6 [bz#2083465]
  - Adding restart_if implementation for RHEL [bz#2085578]
  - Resolves: bz#2083465
    ([Azure][RHEL-8][8.7] Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2085578
    ([Azure][WALA][8.6] WALA provisions VM failed because of no "ifdown")


author: Camilla Conte <cconte@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2080826]
  - Resolves: bz#2080826
    ([Azure][WALA][RHEL-8] [8.7] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2092002]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2114824]
  - Resolves: bz#2092002
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2114824
    ([Azure][WALA][RHEL-8.7] The description of "Logs.Collect" is incorrect)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-7.el8_8
changelog:
  - wla-redhat-Fix-frh.py-to-not-skip-valid-patches-to-init-.patch [bz#2170104]
  - wla-Use-platform-python-in-waagent.service.patch [bz#2170104]
  - Resolves: bz#2170104
    ([Azure][WALA][RHEL-8] systemd service should not use python3)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.10.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
  - Related: Jira:RHEL-2110


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Mahailiang <mahailiang@openanolis.org> - 2.10.9-24.0.1
changelog:
  - Rebrand to Anolis
  - Modify some strings
  - Add anolis type
  - use extern in header files when declaring global variables for compatible gcc10 build (zhouwt@linux.alibaba.com)
  - remove the libreport package in requires (songnannan@linux.alibaba.com)


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.1
changelog:
  - Fix anolis bootloader
  - Add support for loongarch
  - Add anolis install files
  - Remove subscription and CDN
  - Rebrand to Anolis


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.4
changelog:
  - Fix installer exception with no swap part
    Bugzilla: 1304
  - Fix boot.iso exception with no baseos repo
    Bugzilla: 1325
  - Set the default language to Chinese and default timezone to Shanghai


author: wangkaiyuan <wangkaiyuan@inspur.com> - 33.16.6.7-1.0.7
changelog:
  - Add post-script snippets (Chang Gao <gc-taifu@linux.alibaba.com>)
  - Hide CompatibleKernel in anaconda on Phytium Sever CPU
  - Update kernel selection description (Bo Ren <rb01097748@alibaba-inc.com>)


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066338
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2039990
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-3
changelog:
  - Update mssql commit
    Resolves: rhbz#2066338
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120714
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066338
  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120713
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2129869
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2129872
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-2
changelog:
  - Simplify spec file
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2129106


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    Resolves: rhbz#2129106
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2144820
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2144821
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2144852
  - Support SQL Server version 2022
    Resolves: rhbz#2153427
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2129106
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163696


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 0.1.5-1
changelog:
  - Update to version 0.1.5
    - Support for IPA 4.8.0
    - New user management module
    - New group management module
    - ipaserver: Support external signed CA
    - RHEL-8 specific vars files to be able to install needed modules
      automatically
    - ipareplica: Fixes for certmonger and kra setup
    - New tests folder
    - OTP related updates to README files
  - Updates of version 0.1.4
    - ipatopologysegment: Use commands, not command
  - Updates of version 0.1.3
    - ipaclient_test: Fix Python2 decode use with Python3
    - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
    - ipaclient_get_otp: Remove ansible_python_interpreter handling
    - ipaclient: Use omit (None) for password, keytab, no string length checks
    - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
    - ipaclient: Report error message if ipaclient_get_otp failed
    - Fixes #17 Improve how tasks manage package installation
    - ipareplica: The dm password is not needed for ipareplica_master_password
    - ipareplica: Use ipareplica_server if set
    - ipatopologysegment: Allow domain+ca suffix, new state: checked
    - Documentation updates
    - Cleanups
  - Update of version 0.1.2
    - Now a new Ansible Collection
    - Fix gssapi requirement for OTP: It is only needed if keytab is used with
      OTP now.
    - Fix wrong ansible argument types
    - Do not fail on textwrap for replica deployments with CA
    - Ansible lint and galaxy fixes
    - Disable automatic removal of replication agreements in uninstall
    - Enable freeipa-trust service if adtrust is enabled
    - Add support for hidden replica
    - New topology managament modules
    - Add support for pki_config_override
    - Fix host name setup in server deployment
    - Fix errors when ipaservers variable is not set
    - Fix ipaclient install role length typo
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.5-2
changelog:
  - Update README-user.md: Fixed examples, new example
  - ipauser example playbooks: Fixed actions, new example


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
changelog:
  - Update to version 0.1.6
    - Lots of documentation updates in READMEs and modules
    - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
    - Flake8 and pylint reated fixes
    - Fixed wrong path to CheckedIPAddress class in ipareplica_test
    - Remove unused ipaserver/library/ipaserver.py
    - No not use wildcard imports for modules
    - ipareplica: Add support for pki_config_override
    - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
    - ipareplica_prepare: Properly initialize pin and cert_name variables
    - ipareplica: Fail with proper error messages
    - ipaserver: Properly set settings related to pkcs12 files
    - ipaclient: RawConfigParser is not always provided by six.moves.configparser
    - ipaclient_setup_nss: paths.GETENT is not available before
      freeipa-4.6.90.pre1
    - ipaserver_test: Initialize value from options.zonemgr
    - ipareplica_setup_custodia: create_replica only available in newer releases
    - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
    - ipa[server,replica]: Set _packages_adtrust for Ubuntu
    - New build script for galaxy release
    - New utils script to update module docs


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
changelog:
  - Update to version 0.1.8 with lots of fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.7


author: Thomas Woerner <twoerner@redhat.com> - 0.1.9-1
changelog:
  - Update to version 0.1.8 with lots of fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.9


author: Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
changelog:
  - Update to version 0.1.10 with fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.10


author: Thomas Woerner <twoerner@redhat.com> - 0.2.1-1
changelog:
  - Update to version 0.2.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.2.1
  - Update to version 0.2.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.2.0
  - New tests sub package providing upstream tests
  - Utils in /usr/share/ansible-freeipa/utils


author: Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
changelog:
  - Update to version 0.3.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
  - ipabackup: Fix undefined vars for conditions in shell tasks without else


author: Thomas Woerner <twoerner@redhat.com> - 0.3.4-1
changelog:
  - Update to version 0.3.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1972178
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1940014
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1973167
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1973166
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1973169
  - New management module ipaserver
    Resolves: RHBZ#1973171
  - New management module ipaautomember
    Resolves: RHBZ#1973172


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Resolves: RRBZ#1973173


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.7 and 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1972178
  - automember: Verify condition keys
    Resolves: RHBZ#1981713
  - automember: Fix result["failed"] issues with conditions
    Resolves: RHBZ#1981713
  - automember: Fix action to be automember or member, not service
    Resolves: RHBZ#1981711


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-3
changelog:
  - Add requirement for ansible-core
    Resolves: RHBZ#1993857
  - Remove python3, pip and ansible installation from sanity test
    Related: RHBZ#1993857
  - Replace json_query in tests/user/test_users_absent.yml
    Resolves: RHBZ#1992997


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010622
  - Add ability to run modules remotely
    Resolves: RHBZ#2010633
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010643


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010622
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#2021947
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021952
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#2021954
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021955
  - Not able to update existing automember rule description
    Resolves: RHBZ#1976922


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010622
  - Add module to manage automount maps
    Resolves: RHBZ#2040701
  - Add module to manage automount keys
    Resolves: RHBZ#2040702


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080322
  - New idrange management module.
    Resolves: RHBZ#2069188
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2050179
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069179
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069180
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069183


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086994
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076567


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080322
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103924
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104142


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080322
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110478
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110523
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110538


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Pavel Raiskup <praiskup@redhat.com> - 2.13-34
changelog:
  - don't ship broken (and ancient) autoscan (rhbz#1194568)
  - drop explicit 'Requires: perl' (related rhbz#1194568)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-53
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-55
changelog:
  - Resolves: rhbz#2121827 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.3.4-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.10-3
changelog:
  - Add explicit javapackages-tools requirement for sub-packages using
    jpackage_script-based scripts. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 1.11-1
changelog:
  - Update to latest upstream release
  - Drop ancient obsoletes
  - Drop eclipse-specific hacks that are no longer needed
  - Allow conditional building without scripting engines for smaller dep chain
  - Break out some low-level modules into separate sub-package for smaller install
    size


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Hui Li <lihui@loongson.cn> - 0.25.0-9.0.1
changelog:
  - Add support for loongarch64
  - support bpf rich container (yingyu.dtc@alibaba-inc.com)
  - disable BPF_PROG_TYPE_SYSCALL (Liwei Ge)
  - tools: add customized tools (joseph.qi@linux.alibaba.com)


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Martin Nagy <mnagy@redhat.com> - 0.1.0-0.6.a1.20091210git
changelog:
  - update to the latest git snapshot
  - change upstream URL, project moved to fedorahosted
  - change license to GPL version 2 or later
  - add epoch to versioned requires
  - add krb5-devel to the list of build requires


author: Adam Tkac <atkac redhat com> - 0.2.0-1
changelog:
  - update to 0.2.0
  - patches merged
    - 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch
    - 0004-Bugfix-Fix-loading-of-child-zones-from-LDAP.patch


author: Petr Spacek <pspacek@redhat.com> - 6.0-3
changelog:
  - replace dependency on bind with dependency on bind-pkcs11 >= 32:9.9.6-2
    to help with freeipa-server upgrade


author: Petr Spacek <pspacek@redhat.com> - 10.1-1
changelog:
  - Update to 10.1.
  - Fix deletion of DNS root zone not to break global forwarding.
    https://fedorahosted.org/bind-dyndb-ldap/ticket/167


author: Petr Menšík <pemensik@redhat.com> - 10.1-2
changelog:
  - Patched to alfa 11.0 with support for BIND 9.11
  - Configuration format in named.conf is different
      and incompatible with all previous versions. Please see README.md.
  - Minimal BIND version is now 9.11.0rc1. Please see NEWS.


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - Update to 11.1
  - Bumped required version of BIND to 9.11.0-6.P2
    (required since bind-dyndb-ldap 11.0-1 release)
  - Updated source URL links to pagure


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.17
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 1.66.0-13.0.1
changelog:
  - backport patches to fit with C++20 until upstream chase up:
    * Replace-std::allocate-with-std::allocator_traits.patch
    * Replace-std::allocate-deprecated-in-C++17.patch
    * Implement-empty_value.patch
    * Make-empty_value-trivial-if-T-is-trivial.patch
    * Add-documentation-for-empty_value.patch
    * Name-the-empty_value-template-parameters.patch
    * Improve-C++11-allocator-support.patch
    * Use-boost::allocator_rebind-instead-of-A::template-rebind.patch
    * Implement-allocator-access-utilities.patch


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61835


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/fe85f0d)
  - Resolves: RHEL-61853


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)
  - Resolves: RHEL-67612


author: Dan Walsh <dwalsh@redhat.com> 0.2.0-1.gitac2aad6
changelog:
  -   buildah run: Add support for -- ending options parsing
  -   buildah Add/Copy support for glob syntax
  -   buildah commit: Add flag to remove containers on commit
  -   buildah push: Improve man page and help information
  -   buildah run: add a way to disable PTY allocation
  -   Buildah docs: clarify --runtime-flag of run command
  -   Update to match newer storage and image-spec APIs
  -   Update containers/storage and containers/image versions
  -   buildah export: add support
  -   buildah images: update commands
  -   buildah images: Add JSON output option
  -   buildah rmi: update commands
  -   buildah containers: Add JSON output option
  -   buildah version: add command
  -   buildah run: Handle run without an explicit command correctly
  -   Ensure volume points get created, and with perms
  -   buildah containers: Add a -a/--all option


author: Dan Walsh <dwalsh@redhat.com> 0.4-1.git9cbccf88c
changelog:
  -   Add default transport to push if not provided
  -   Avoid trying to print a nil ImageReference
  -   Add authentication to commit and push
  -   Add information on buildah from man page on transports
  -   Remove --transport flag
  -   Run: do not complain about missing volume locations
  -   Add credentials to buildah from
  -   Remove export command
  -   Run(): create the right working directory
  -   Improve "from" behavior with unnamed references
  -   Avoid parsing image metadata for dates and layers
  -   Read the image's creation date from public API
  -   Bump containers/storage and containers/image
  -   Don't panic if an image's ID can't be parsed
  -   Turn on --enable-gc when running gometalinter
  -   rmi: handle truncated image IDs


author: Dan Walsh <dwalsh@redhat.com> 0.5-1
changelog:
  -  Add secrets patch to buildah
  -  Add proper SELinux labeling to buildah run
  -  Add tls-verify to bud command
  -  Make filtering by date use the image's date
  -  images: don't list unnamed images twice
  -  Fix timeout issue
  -  Add further tty verbiage to buildah run
  -  Make inspect try an image on failure if type not specified
  -  Add support for `buildah run --hostname`
  -  Tons of bug fixes and code cleanup


author: Dan Walsh <dwalsh@redhat.com> 0.7-1
changelog:
  - Ignore errors when trying to read containers buildah.json for loading SELinux reservations
  -     Use credentials from kpod login for buildah
  - Adds support for converting manifest types when using the dir transport
  - Rework how we do UID resolution in images
  - Bump github.com/vbatts/tar-split
  - Set option.terminal appropriately in run


author: Dan Walsh <dwalsh@redhat.com> 0.8-1
changelog:
  - Buildah bud was failing on SELinux machines, this fixes this
  - Block access to certain kernel file systems inside of the container


author: Dan Walsh <dwalsh@redhat.com> 0.10-1
changelog:
  - Display Config and Manifest as strings
  - Bump containers/image
  - Use configured registries to resolve image names
  - Update to work with newer image library
  - Add --chown option to add/copy commands


author: Dan Walsh <dwalsh@redhat.com> 0.11-1
changelog:
  - Add --all to remove containers
  - Add --all functionality to rmi
  - Show ctrid when doing rm -all
  - Ignore sequential duplicate layers when reading v2s1
  - Lots of minor bug fixes
  - Vendor in latest containers/image and containers/storage


author: Dan Walsh <dwalsh@redhat.com> 0.12-1
changelog:
  - Added handing for simpler error message for Unknown Dockerfile instructions.
  - Change default certs directory to /etc/containers/certs.dir
  - Vendor in latest containers/image
  - Vendor in latest containers/storage
  - build-using-dockerfile: set the 'author' field for MAINTAINER
  - Return exit code 1 when buildah-rmi fails
  - Trim the image reference to just its name before calling getImageName
  - Touch up rmi -f usage statement
  - Add --format and --filter to buildah containers
  - Add --prune,-p option to rmi command
  - Add authfile param to commit
  - Fix --runtime-flag for buildah run and bud
  - format should override quiet for images
  - Allow all auth params to work with bud
  - Do not overwrite directory permissions on --chown
  - Unescape HTML characters output into the terminal
  - Fix: setting the container name to the image
  - Prompt for un/pwd if not supplied with --creds
  - Make bud be really quiet
  - Return a better error message when failed to resolve an image
  - Update auth tests and fix bud man page


author: Dan Walsh <dwalsh@redhat.com> 0.14-1
changelog:
  - If commonOpts do not exist, we should return rather then segfault
  - Display full error string instead of just status
  - Implement --volume and --shm-size for bud and from
  - Fix secrets patch for buildah bud
  - Fixes the naming issue of blobs and config for the dir transport by removing the .tar extension


author: Dan Walsh <dwalsh@redhat.com> 0.16-1
changelog:
  -   Add support for shell
  -   Vendor in latest containers/image
  -    	 docker-archive generates docker legacy compatible images
  -	 Do not create $DiffID subdirectories for layers with no configs
  - 	 Ensure the layer IDs in legacy docker/tarfile metadata are unique
  -	 docker-archive: repeated layers are symlinked in the tar file
  -	 sysregistries: remove all trailing slashes
  -	 Improve docker/* error messages
  -	 Fix failure to make auth directory
  -	 Create a new slice in Schema1.UpdateLayerInfos
  -	 Drop unused storageImageDestination.{image,systemContext}
  -	 Load a *storage.Image only once in storageImageSource
  -	 Support gzip for docker-archive files
  -	 Remove .tar extension from blob and config file names
  -	 ostree, src: support copy of compressed layers
  -	 ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
  -	 image: fix docker schema v1 -> OCI conversion
  -	 Add /etc/containers/certs.d as default certs directory
  -  Change image time to locale, add troubleshooting.md, add logo to other mds
  -   Allow --cmd parameter to have commands as values
  -   Document the mounts.conf file
  -   Fix man pages to format correctly
  -   buildah from now supports pulling images using the following transports:
  -   docker-archive, oci-archive, and dir.
  -   If the user overrides the storage driver, the options should be dropped
  -   Show Config/Manifest as JSON string in inspect when format is not set
  -   Adds feature to pull compressed docker-archive files


author: Dan Walsh <dwalsh@redhat.com> 1.0-1
changelog:
  - Remove buildah run cmd and entrypoint execution
  - Add Files section with registries.conf to pertinent man pages
  - Force "localhost" as a default registry
  - Add --compress, --rm, --squash flags as a noop for bud
  - Add FIPS mode secret to buildah run and bud
  - Add config --comment/--domainname/--history-comment/--hostname
  - Add support for --iidfile to bud and commit
  - Add /bin/sh -c to entrypoint in config
  - buildah images and podman images are listing different sizes
  - Remove tarball as an option from buildah push --help
  - Update entrypoint behaviour to match docker
  - Display imageId after commit
  - config: add support for StopSignal
  - Allow referencing stages as index and names
  - Add multi-stage builds support
  - Vendor in latest imagebuilder, to get mixed case AS support
  - Allow umount to have multi-containers
  - Update buildah push doc
  - buildah bud walks symlinks
  - Imagename is required for commit atm, update manpage


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Drop capabilities if running container processes as non root
  - Print Warning message if cmd will not be used based on entrypoint
  - Update 01-intro.md
  - Shouldn't add insecure registries to list of search registries
  - Report errors on bad transports specification when pushing images
  - Move parsing code out of common for namespaces and into pkg/parse.go
  - Add disable-content-trust noop flag to bud
  - Change freenode chan to buildah
  - runCopyStdio(): don't close stdin unless we saw POLLHUP
  - Add registry errors for pull
  - runCollectOutput(): just read until the pipes are closed on us
  - Run(): provide redirection for stdio
  - rmi, rm: add test
  - add mount test
  - Add parameter judgment for commands that do not require parameters
  - Add context dir to bud command in baseline test
  - run.bats: check that we can run with symlinks in the bundle path
  - Give better messages to users when image can not be found
  - use absolute path for bundlePath
  - Add environment variable to buildah --format
  - rm: add validation to args and all option
  - Accept json array input for config entrypoint
  - Run(): process RunOptions.Mounts, and its flags
  - Run(): only collect error output from stdio pipes if we created some
  - Add OnBuild support for Dockerfiles
  - Quick fix on demo readme
  - run: fix validate flags
  - buildah bud should require a context directory or URL
  - Touchup tutorial for run changes
  - Validate common bud and from flags
  - images: Error if the specified imagename does not exist
  - inspect: Increase err judgments to avoid panic
  - add test to inspect
  - buildah bud picks up ENV from base image
  - Extend the amount of time travis_wait should wait
  - Add a make target for Installing CNI plugins
  - Add tests for namespace control flags
  - copy.bats: check ownerships in the container
  - Fix SELinux test errors when SELinux is enabled
  - Add example CNI configurations
  - Run: set supplemental group IDs
  - Run: use a temporary mount namespace
  - Use CNI to configure container networks
  - add/secrets/commit: Use mappings when setting permissions on added content
  - Add CLI options for specifying namespace and cgroup setup
  - Always set mappings when using user namespaces
  - Run(): break out creation of stdio pipe descriptors
  - Read UID/GID mapping information from containers and images
  - Additional bud CI tests
  - Run integration tests under travis_wait in Travis
  - build-using-dockerfile: add --annotation
  - Implement --squash for build-using-dockerfile and commit
  - Vendor in latest container/storage for devicemapper support
  - add test to inspect
  - Vendor github.com/onsi/ginkgo and github.com/onsi/gomega
  - Test with Go 1.10, too
  - Add console syntax highlighting to troubleshooting page
  - bud.bats: print "$output" before checking its contents
  - Manage "Run" containers more closely
  - Break Builder.Run()'s "run runc" bits out
  - util.ResolveName(): handle completion for tagged/digested image names
  - Handle /etc/hosts and /etc/resolv.conf properly in container
  - Documentation fixes
  - Make it easier to parse our temporary directory as an image name
  - Makefile: list new pkg/ subdirectoris as dependencies for buildah
  - containerImageSource: return more-correct errors
  - API cleanup: PullPolicy and TerminalPolicy should be types
  - Make "run --terminal" and "run -t" aliases for "run --tty"
  - Vendor github.com/containernetworking/cni v0.6.0
  - Update github.com/containers/storage
  - Update github.com/projectatomic/libpod
  - Add support for buildah bud --label
  - buildah push/from can push and pull images with no reference
  - Vendor in latest containers/image
  - Update gometalinter to fix install.tools error
  - Update troubleshooting with new run workaround
  - Added a bud demo and tidied up
  - Attempt to download file from url, if fails assume Dockerfile
  - Add buildah bud CI tests for ENV variables
  - Re-enable rpm .spec version check and new commit test
  - Update buildah scratch demo to support el7
  - Added Docker compatibility demo
  - Update to F28 and new run format in baseline test
  - Touchup man page short options across man pages
  - Added demo dir and a demo. chged distrorlease
  - builder-inspect: fix format option
  - Add cpu-shares short flag (-c) and cpu-shares CI tests
  - Minor fixes to formatting in rpm spec changelog
  - Fix rpm .spec changelog formatting
  - CI tests and minor fix for cache related noop flags
  - buildah-from: add effective value to mount propagation


author: Dan Walsh <dwalsh@redhat.com> 1.2-1
changelog:
  - Vendor in latest containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Add registries.conf link to a few man pages


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.4-2
changelog:
  - use the mainline 1.16.4 buildah release as starting point for 8.4.0
    not the content from upstream branch yet
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/06e091b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/af31e45)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.1-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.20.1
  - sync tests with Fedora
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/a0853c3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5119393)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/162fbaf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f30b420)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/c3a3fe8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/f629ded)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/2a83637)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/19d3065)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/df14b1c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d677bf0)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8a6d840)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/4fa566e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/bbbe10a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d08dbe7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/9c7f50b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/8d08247)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/d99221f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/30c07b7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/db16262)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/5181b9c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/802a904)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/6d5d1ae)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3a0b52f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/6bc611d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c7d828f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/3ed5d8e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/30a10f3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/9c83683)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.23.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/a5aba5c)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.23.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/e9bc224)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/69b3e56)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/753716a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f3f3c55)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/fb84638)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/b8757e9)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/a72aad4)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/9a49348)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8548885)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/455f2f1)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/d2ef199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/954c481)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/0cd9445)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/7807a0e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c044ad6)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/211972a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/50869a7)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.24.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/982717a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.28.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.28
    (https://github.com/containers/buildah/commit/7e4d9dd)
  - Resolves: #2136319


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f01e5f9)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175070
  - Resolves: #2179948
  - Resolves: #2187317
  - Resolves: #2187364
  - Resolves: #2203680
  - Resolves: #2207510


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/cf49e7c)
  - fixes "CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]"
  - Resolves: RHEL-89239


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 79-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 80-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 81-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 82-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 83-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: Jira:RHEL-25557


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Richard Hughes <richard@hughsie.com> 1.4.4-1
changelog:
  - New upstream version
  - Actually install the installed tests
  - Port manpages to xsltproc and DocBook 5


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> - 4.8.5-36.1.0.1
changelog:
  - Modify the release information and add the bugzilla address of openanolis
  - Resolve doc build error


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-3
changelog:
  - add back -devel subpackage as a stop-gap measure for software
    that cannot be ported to new API easily


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077418


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <lsm5@redhat.com> - 2:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - remove dependency on policycoreutils-python-utils as it pulls in python
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179944
  - Resolves: #2187342
  - Resolves: #2187360
  - Resolves: #2203693
  - Resolves: #2207506


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.5.2-2
changelog:
  - upstream moved to github.com/containernetworking/plugins
  - built commit dcf7368
  - provides: containernetworking-plugins
  - use vendored deps because they're a lot less of a PITA
  - excludearch: s390x for now (rhbz#1466865)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-19
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Jonathan Lebon <jlebon@redhat.com> - 0.9.1-4
changelog:
  - Add xz-devel BR to ensure we're not bundling
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974453


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Steven Dake <sdake@redhat.com> - 0.91-2
changelog:
  - use /sbin/service instead of calling init script directly.
  - put corosync-objctl man page in the main package.
  - change all initrddir to initddir for fedora 10 guidelines.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-4.svn1707
changelog:
  - Update to svn trunk at revision 1707 from upstream.
  - Update spec file to include new lcrso services and include file.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-5.svn1709
changelog:
  - Update to svn trunk at revision 1709 from upstream.
  - Update spec file to include new include files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-6.svn1750
changelog:
  - Update to svn trunk at revision 1750 from upstream.
  - Include new quorum service in the packaging.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-7.svn1756
changelog:
  - Update to svn trunk at revision 1756 from upstream.
  - Add support pkgconfig to devel package.
  - Tidy up spec files by re-organazing sections according to packages.
  - Split libraries from corosync to corosynclib.
  - Rename corosync-devel to corosynclib-devel.
  - Comply with multiarch requirements (libraries).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-1
changelog:
  - New upstream release.
  - Drop alphatag from spec file.
  - Drop trunk patch.
  - Update Provides for corosynclib-devel.
  - Backport gcc-4.4 build fix from trunk.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-2
changelog:
  - Rename gcc-4.4 patch to match svn commit (r1767).
  - Backport patch from trunk (commit r1774) to fix quorum engine.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-1
changelog:
  - New upstream release.
  - Drop obsolete patches.
  - Add soname bump patch that was missing from upstream.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-2.svn1792
changelog:
  - Import fixes from upstream:
    * Fix uninitialized memory. Spotted by valgrind (1788)
    * Fix logsys_set_format by updating the right bits (1789)
    * logsys: re-add support for timestamp  (1790)
    * Fix cpg crash (1791)
    * Allow logsys_format_set to reset to default (1792)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-3.svn1794
changelog:
  - Import fixes from upstream:
    * Add reserve/release feature to totem message queue space (1793)
    * Fix CG shutdown (1794)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-4.svn1797
changelog:
  - Import fixes from upstream:
    * Cleanup logsys format init around to use default settings (1795)
    * logsys_format_set should use its own internal copy of format_buffer (1796)
    * Add logsys_format_get to logsys API (1797)
  - Cherry pick svn1807 to unbreak CPG.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.95-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop alpha tag
    * Drop local patches (no longer required)
    * Allow to build from svn trunk by supporting rpmbuild --with buildtrunk 
    * BuildRequires autoconf automake if building from trunk
    * Execute autogen.sh if building from trunk and if no configure is available
    * Switch to use rpm configure macro and set standard install paths
    * Build invokation now supports _smp_mflags
    * Remove install section for docs and use proper doc macro instead
    * Add tree fixup bits to drop static libs and html docs (only for now)
    * Add LICENSE file to all subpackages
    * libraries have moved to libdir. Drop ld.so.conf.d corosync file
    * Update BuildRoot usage to preferred versions/names


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.97-1.svn2232
changelog:
  - New upstream release
  - spec file updates:
    * Drop pkgconfig fix that's now upstream
    * Update to svn version 2232
    * Define buildtrunk if we are using svn snapshots
    * BuildRequires: nss-devel to enable nss crypto for network communication
    * Force autogen invokation if buildtrunk is defined
    * Whitespace cleanup
    * Stop shipping corosync.conf in favour of a generic example
    * Update file list


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.98-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop corosync-trunk patch and alpha tag.
    * Fix alphatag vs buildtrunk handling.
    * Drop requirement on ais user/group and stop creating them.
    * New config file locations from upstream: /etc/corosync/corosync.conf.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.0-1
changelog:
  - New upstream release
  - spec file updates:
    * enable IB support
    * explicitly define built-in features at configure time


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.0-1
changelog:
  - New upstream release
  - Use global instead of define
  - Update Source0 url
  - Use more name macro around
  - Cleanup install section. Init script is now installed by upstream
  - Cleanup whitespace
  - Don't deadlock between package upgrade and corosync condrestart
  - Ship service.d config directory
  - Fix Conflicts vs Requires
  - Ship new sam library and man pages


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Add upstream trunk revision 2770 to add cpg_model_initialize api.
  - Fix URL and Source0 entries.
  - Add workaround to broken 1.2.2 Makefile with make -j.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.3.0-1
changelog:
  - New upstream release
  - drop upstream patch revision-2770.patch now included in release
  - update spec file to ship corosync-blackbox


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.99.2-1
changelog:
  - New upstream release
  - Re-enable xmlconfig bits
  - Ship cmap man pages
  - Add workaround to usrmove breakage!!


author: Jan Friesse <jfriesse@redhat.com> 2.3.1-3
changelog:
  - Resolves: rhbz#998362

  - Fix scheduler pause-detection timeout (rhbz#998362)
  - merge upstream commit 2740cfd1eac60714601c74df2137fe588b607866 (rhbz#998362)


author: Jan Pokorný <jpokorny+rpm-corosync@redhat.com> - 2.99.3-3
changelog:
  - Rebuild again, since the previous one was so unfortunate it got affected
    with binutils (2.31.1-3.fc29) producing non-monotonically increasing
    section offsets causing unprepared eu-strip to damage the binary
    (related: rhbz#1609577)
  - Apply patch to prevent redundancy in systemd journal


author: Jan Friesse <jfriesse@redhat.com> - 3.1.0-2
changelog:
  - Add isa version of corosync-devel
  - Add release to corosync-devel version to match autogenerated
    corosynclib-devel provides


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to 2.4 upstream tarball
  - Drop patches: cppcheck-1.83-tinyxml.patch, cppcheck-1.81-translations.patch, cppcheck-1.78-cfgdir.patch.
  - Bump BuildRequires for tinyxml2-devel to 2.6.0 at least.
  - Add BuildRequires pandoc.
  - There is no more bundled tinyxml in this new version of cppcheck.
  - Use the man/build-html.sh script to build the html version of the manual
  - Adjust $datadir/CppCheck to $datadir/Cppcheck.
  - Add $bindir/cppcheck*.qm files to the package.
  - Resolves: rhbz#1959478


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.0.5-1.0.1
changelog:
  - Rebrand for Anolis OS
  - Add doc sub package (wenshu.hx@alibaba-inc.com)
  - Add loongarch64 arch (wb-zh951434@alibaba-inc.com)


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Lianbo Jiang <lijiang@redhat.com> - 1.0.7-2
changelog:
  - Fix for "current buffer not found"
  - Fix for "invalid kernel virtual address: 0  type: struct topa_entry"
  - Fix for "invalid ring_buffer"
    Resolves: rhbz#1838927


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Weitao Zhou <zhouwt@linux.alibaba.com> 1.20.0-34.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(Weisson)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35.0.1
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Weitao Zhou <zhouwt@linux.alibaba.com> 3.0.7-27.0.1
changelog:
  - Move struct open_conversations to the .c file for gcc10 build issue
  - fix test failure for port confict


author: Nikola Forró <nforro@redhat.com> - 0.3.10-5
changelog:
  - make non-critical graphic tools weak dependencies
  - recommend inkscape, which can be used to convert SVG images


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Matej Muzila <mmuzila@redhat.com> 1:1.5.3-3
changelog:
  - Backport upstream patch making dejagnu not to kill wrong process due to
    PID-reuse races
  - Resolves rhbz#1258142


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-3
changelog:
  - Skip an additional test as it's breaking in the CI system.
  - Modify the name of the patch.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Omair Majid <omajid@redhat.com> - 3.1.416-4
changelog:
  - Update to .NET SDK 3.1.416 and Runtime 3.1.22
  - Resolves: RHBZ#2011820
  - Resolves: RHBZ#2003077
  - Resolves: RHBZ#2031428


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 6.0.136-1.0.1
changelog:
  - Fix sdk suffix for Anolis OS
  - Update netstandard-targeting-pack-2.1 acquisition method (Zhao Hang)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.27-2.0.1
changelog:
  - Add patch number and remove LIBBPF_EMBEDDED
  - Add Buildrequires python3 (gc-taifu@linux.alibaba.com)


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Coty Sutherland <csutherl@redhat.com> - 1:4.20-10
changelog:
  - Drop unnecessary javax16.api.jar (again)
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-53009]
  - Resolves: RHEL-53009
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2 [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.4
changelog:
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830]
  - Resolves: RHEL-60830
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])


author: Jiang Xin <jiangxin@hygon.cn> - 20220126gitbb1bba3d77-13.0.1.4
changelog:
  - Support hygon CSV3 feature
  - Support SEV live migration
  - 0047-anolis-OvmfPkg-BaseMemEncryptLib-Save-memory-encrypt.patch
  - Fix the isue that interrupt is enabled in MMIO VC handler
  - 0048-OvmfPkg-AmdSev-SecretDxe-Allocate-secret-location-as.patch (fangbaoshun@hygon.cn)
  - Resolves: bz#8033


author: hanliyang <hanliyang@hygon.cn> - 20220126gitbb1bba3d77-13.0.1.6
changelog:
  - Fix boot failure on OvmfPkg/AmdSev
  - Add a build process that uses AmdSevX64.dsc with neither SB nor SMM enabled


author: Laszlo Ersek <lersek@redhat.com> - 20140723-1.git3facc08.el7
changelog:
  - rebase from upstream a618eaa to 3facc08
  - update to openssl-0.9.8za
  - drop downstream-only split varstore patch, rely on upstream's


author: Laszlo Ersek <lersek@redhat.com> - 20140822-1.git9ece15a.el7
changelog:
  - rebase from upstream 3facc08 to 9ece15a
  - update to openssl-0.9.8zb
  - update to FatPkg SVN r86 (git 2355ea2c)
  - the following patches of Paolo Bonzini have been merged in upstream; drop the
    downstream-only copies:
    7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH
    d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2
            checkout
    1c023eb BuildEnv: remove useless check before setting $WORKSPACE
  - include the following patches that have been pending review on the upstream
    list for a long time:
    [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369
    [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515
  - nasm is a build-time dependency now because upstream BuildTools has started
    to call it directly


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-2.git9ece15a
changelog:
  - ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784]
  - ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784]
  - ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784]
  - ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592]
  - ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592]
  - ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592]
  - ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296]
  - ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296]
  - ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294]
  - ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294]
  - Resolves: bz#1145784
    (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce)
  - Resolves: bz#1147592
    (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary)
  - Resolves: bz#1148294
    (drop OvmfPkg's stale fork of SecureBootConfigDxe)
  - Resolves: bz#1148296
    (provide a non-interactive way to auto-enroll important SecureBoot certificates)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-3.git9ece15a.el7
changelog:
  - ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927]
  - ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927]
  - ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927]
  - Resolves: bz#1153927
    (set NEXTBOOT to uefi setting failed from Windows Recovery console)


author: Laszlo Ersek <lersek@redhat.com> - AAVMF-20141113-1.git77d5dac
changelog:
  - rebased to upstream 77d5dac
    <https://bugzilla.redhat.com/show_bug.cgi?id=1162314#c1>
  - patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION"
    is now upstream (SVN r16219, git edb5073)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-4.git9ece15a.el7
changelog:
  - ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314]
  - ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314]
  - Resolves: bz#1162314
   (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-6.git9ece15a.el7
changelog:
  - ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027]
  - Resolves: bz#1166027
    (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit")


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-7.git9ece15a.el7
changelog:
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971]
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971]
  - Resolves: bz#1166971
    (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20151104-1.gitb9ffeab.el7
changelog:
  - rebase to upstream b9ffeab
  - Resolves: bz#1207554
    ([AAVMF] AArch64: populate SMBIOS)
  - Resolves: bz#1270279
    (AAVMF: output improvements)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160202-1.gitd7c0dfa.el7
changelog:
  - rebase to upstream d7c0dfa
  - update OpenSSL to 1.0.2e (upstream)
  - update FatPkg to SVN r97 (upstream)
  - drive NVMe devices (upstream)
  - resize xterm on serial console mode change, when requested with
    -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y
    (downstream)
  - Resolves: bz#1259395
    (revert / roll back AAVMF fix for BZ 1188054)
  - Resolves: bz#1202819
    (OVMF: secure boot limitations)
  - Resolves: bz#1182495
    (OVMF rejects iPXE oprom when Secure Boot is enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160202-2.gitd7c0dfa.el7
changelog:
  - ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678]
  - ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678]
  - ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678]
  - ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678]
  - ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-3.el8
changelog:
  - edk2-redhat-Provide-and-Obsolete-OVMF-and-AAVMF.patch [bz#1596148]
  - edk2-ArmVirtPkg-unify-HttpLib-resolutions-in-ArmVirt.dsc..patch [bz#1536627]
  - edk2-ArmVirtPkg-ArmVirtQemu-enable-the-IPv6-stack.patch [bz#1536627]
  - edk2-advertise-OpenSSL-due-to-IPv6-enablement-too-RHEL-on.patch [bz#1536627]
  - edk2-redhat-add-D-NETWORK_IP6_ENABLE-to-the-build-flags.patch [bz#1536627]
  - edk2-redhat-update-license-fields-and-files-in-the-spec-f.patch [bz#1536627]
  - Resolves: bz#1536627
    (IPv6 enablement in OVMF)
  - Resolves: bz#1596148
    (restore Provides/Obsoletes macros for OVMF and AAVMF, from RHEL-8 Alpha)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-4.el8
changelog:
  - edk2-redhat-provide-virtual-bundled-OpenSSL-in-edk2-ovmf-.patch [bz#1607801]
  - Resolves: bz#1607801
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-BaseTools-footer.makefile-expand-BUILD_CFLAGS-last-f.patch [bz#1607906]
  - edk2-BaseTools-header.makefile-remove-c-from-BUILD_CFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-split-O2-to-BUILD_OPTFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_OPTFLAGS-from-the-call.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_LDFLAGS-from-the-calle.patch [bz#1607906]
  - edk2-BaseTools-VfrCompile-honor-EXTRA_LDFLAGS.patch [bz#1607906]
  - edk2-redhat-inject-the-RPM-compile-and-link-options-to-th.patch [bz#1607906]
  - Resolves: bz#1607906
    (edk2-tools: Does not use RPM build flags)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1641436]
  - edk2-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1641449 bz#1641453 bz#1641464 bz#1641469]
  - edk2-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1641453 bz#1641464 bz#1641469]
  - edk2-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1641445 bz#1641453 bz#1641464 bz#1641469]
  - Resolves: bz#1641436
    (CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [rhel-8])
  - Resolves: bz#1641445
    (CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [rhel-8])
  - Resolves: bz#1641449
    (CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [rhel-8])
  - Resolves: bz#1641453
    (CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641464
    (CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641469
    (CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-8.el8
changelog:
  - edk2-NetworkPkg-UefiPxeBcDxe-Add-EXCLUSIVE-attribute-when.patch [bz#1643377]
  - Resolves: bz#1643377
    (Exception when grubx64.efi used for UEFI netboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-9.el8
changelog:
  - edk2-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1662184]
  - edk2-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1662184]
  - edk2-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1662184]
  - edk2-git-Use-HTTPS-support.patch []
  - Resolves: bz#1662184
    (backport fix for (theoretical?) regression introduced by earlier CVE fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20190308git89910a39dcfd-2.el8
changelog:
  - edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230]
  - Resolves: bz#1600230
    ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-4.el8
changelog:
  - edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941]
  - edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941]
  - Resolves: bz#1666941
    (UEFI guest cannot boot into os when setting some special memory size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-5.el8
changelog:
  - edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205]
  - Resolves: bz#1693205
    (edk2: Enable TPM2 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-6.el8
changelog:
  - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446]
  - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446]
  - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446]
  - Resolves: bz#1714446
    (edk2-aarch64 silent build is not silent enough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-1.el8
changelog:
  - Rebase to edk2-stable201908 [bz#1748180]
  - Resolves: bz#1748180
    ((edk2-rebase-rhel-8.2) - rebase edk2 to upstream tag edk2-stable201908 for RHEL-8.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-2.el8
changelog:
  - edk2-MdePkg-Include-Protocol-Tls.h-Add-the-data-type-of-E.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-Add-the-new-API-TlsSetVerifyHost-CV.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-turn-strchr-into-a-function-CVE-2019-1.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-satisfy-inet_pton.c-dependencies-CVE-2.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-import-inet_pton.c-CVE-2019-14553.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-TlsSetVerifyHost-parse-IP-address-l.patch [bz#1536624]
  - edk2-NetworkPkg-TlsDxe-Add-the-support-of-host-validation.patch [bz#1536624]
  - edk2-NetworkPkg-HttpDxe-Set-the-HostName-for-the-verifica.patch [bz#1536624]
  - edk2-redhat-enable-HTTPS-Boot.patch [bz#1536624]
  - Resolves: bz#1536624
    (HTTPS enablement in OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-3.el8
changelog:
  - Update used openssl version [bz#1616029]
  - Resolves: bz#1616029
    (rebuild edk2 against the final RHEL-8.2.0 version of OpenSSL-1.1.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-4.el8
changelog:
  - edk2-redhat-set-guest-RAM-size-to-768M-for-SB-varstore-te.patch [bz#1778301]
  - edk2-redhat-re-enable-Secure-Boot-varstore-template-verif.patch [bz#1778301]
  - Resolves: bz#1778301
    (re-enable Secure Boot (varstore template) verification in %check)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-5.el8
changelog:
  - edk2-MdeModulePkg-UefiBootManagerLib-log-reserved-mem-all.patch [bz#1789797]
  - edk2-NetworkPkg-HttpDxe-fix-32-bit-truncation-in-HTTPS-do.patch [bz#1789797]
  - Resolves: bz#1789797
    (Backport upstream patch series: "UefiBootManagerLib, HttpDxe: tweaks for large HTTP(S) downloads" to improve HTTP(S) Boot experience with large (4GiB+) files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-6.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-fix-2M-4K-page-splitting-r.patch [bz#1789335]
  - Resolves: bz#1789335
    (VM with edk2 can't boot when setting memory with '-m 2001')


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-7.el8
changelog:
  - edk2-SecurityPkg-Fix-spelling-errors-PARTIAL-PICK.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-simplify-Ver.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-else-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-keep-PE-COFF.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-narrow-down-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-o.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-super.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-unnest-AddIm.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-eliminate-St.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-f.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-imgexec-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-defer-vs.patch [bz#1751993]
  - Resolves: bz#1751993
    (DxeImageVerificationLib handles "DENY execute on security violation" like "DEFER execute on security violation" [rhel8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-8.el8
changelog:
  - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch [bz#1801274]
  - edk2-MdeModulePkg-PiDxeS3BootScriptLib-Fix-potential-nume.patch [bz#1801274]
  - Resolves: bz#1801274
    (CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-9.el8
changelog:
  - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359]
  - Resolves: bz#1806359
    (bochs-display cannot show graphic wihout driver attach)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2112307]
  - Resolves: bz#2112307
    (Mark SEV launch secret area as reserved)


author: Camilla Conte <cconte@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - Bumping OpenSSL version [bz# 2074834]
  - Resolves: bz# 2074834
    (edk2: sync openssl sources with rhel openssl rpm)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-4
changelog:
  - edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - Resolves: bz#2164531
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
  - Resolves: bz#2164543
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
  - Resolves: bz#2164558
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
  - Resolves: bz#2164581
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-5
changelog:
  - edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
  - Resolves: bz#1861743
    (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-14
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Roland Grunberg <rgrunber@redhat.com> - 1.1.0-6
changelog:
  - Set source/target to 1.8 for Java 11 build.
  - Disable Java API link detection for javadoc generation as this fails.
  - Disable some assertions in TestParser.testPipe() that fail on Java 11.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Chang Gao <gc-taifu@linux.alibaba.com> - 4.10.0-76.0.1.1
changelog:
  - Replace some packages with build env
  - Update CVE-2007-4559 patches
  - Change Jinja2 require python version
  - fix CVE-2024-6345 (gc-taifu@linux.alibaba.com)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.23-1
changelog:
  - new upstream release
  - new package fence-agents-amt-ws
  - new package fence-agents-compute
  - new package fence-agents-drac
  - new package fence-agents-hds-cb
  - new package fence-agents-mpath
  - new package fence-agents-sanbox2
  - new package fence-agents-sbd
  - new package fence-agents-vbox
  - new package fence-agents-vmware
  - new package fence-agents-xenapi


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.24-12
changelog:
  - fence-agents-common: remove fence_scsi_check files
  - fence-scsi: add "fence_scsi_check_hardreboot"


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - new upstream release
  - fence_vmware_soap / fence_ovh: use Python 2 till python3-suds bug
    is fixed


author: Jan Pokorný <jpokorny+rpm-booth@fedoraproject.org> - 4.2.1-4
changelog:
  - mark non-compiled packages properly as noarch, restructure excludes
  - move azure_fence.py and XenAPI.py to respective subpackages from -common
  - sanitize allfenceagents internally defined enumeration
  - sanitize BuildRequires with respect to packaging guidelines
  - bytecompile native Python modules and ship these bytecodes properly
  - only refer to Python binary symbolically, drop buildroot cleanup
  - cleanup package summaries/descriptions, order agent subpackages properly


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Liwei Ge <geliwei@openanolis.org> - 128.10.0-1.0.1
changelog:
  - Add firefox-anolis-default-prefs.js
  - Remove bookmarks and loongarch64
  - Add BuildRequires gcc-toolset-13-gcc-c++


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Fix build failure due to missing include and `reallocarray' prototype
  - Add gettext-devel, automake and libtool to build dependencies, and
    execute `autoreconf -i' to regenerate files after patching configure.ac


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Fabio Alessandro Locati <fale@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.1
  - Update the brand icons list using a new script
  - Add the script to create brand icons list


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: lutw <lutw@ieisystem.com> - 7.5.1-16.0.3
changelog:
  - fix CVE-2023-46752
  - fix CVE-2023-46753
  - fix CVE-2023-31490
  - fix CVE-2023-41909
  - fix CVE-2023-41358
  - fix CVE-2023-47234 because in 7.5.1-16.0.2  CVE-2023-47234 CVE-2023-47235 is not suitable to fix CVE-2023-46752 CVE-2023-46753, so change to use rehl patch


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Sergio Durigan Junior <sergiodj@redhat.com> - 9.1-3
changelog:
  - Fix 'Recursive call to 'missing_rpm_list_print' when pagination is
    on and missing RPM list is big' (RHBZ 1801974, Sergio Durigan
    Junior).


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747213).
  - Include upstream patches that fix issues reported by covscan (#1747530):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790054):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Yara Ahmad <yahmad@redhat.com> - 2.36.1-4
changelog:
  - Fix addr2line from gcc-toolset-11-binutils having errors while compiling code 
    using LTO and Dwarf5  (#2153811)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - fix wstring conversions in filesystem::path (PR libstdc++/95048, #2220896)
  - mark non-exported function always_inline (PR libstdc++/105671, #2221740)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Florian Weimer <fweimer@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160701)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-29952)


author: Haochen Jiang <haochen.jiang@intel.com> 12.2.1-7.8.0.1
changelog:
  - Add attribute hot judgement for INLINE_HINT_known_hot hint
  - Enable small loop unrolling for O2
  - i386: Only enable small loop unrolling in backend [PR 107692]


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 2.0-1
changelog:
  - Fixes for problems reported by the package submission review:
     * Add %license entry to %file section.
     * Update License and BuildRequires tags.
     * Add Requires tag.
     * Remove %clean.
     * Add %check.
     * Clean up the %changelog.
  - Update to use version 2 of the specification and sources.


author: Nick Clifton <nickc@redhat.com> - 2.3-1
changelog:
  - Add annobin-tests subpackage containing some preliminary tests.
  - Remove link-time test for unsupported targets.


author: Nick Clifton <nickc@redhat.com> - 3.4-1
changelog:
  - Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB.  (#1539664)
  - Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository.


author: Nick Clifton <nickc@redhat.com> - 3.6-1
changelog:
  - Add --ignore-gaps option to check-abi.sh script.
  - Use this option in the abi-test check.
  - Tweak hardening test to skip pic and stack protection checks.


author: Nick Clifton <nickc@redhat.com> - 5.0-1
changelog:
  - Bias file start symbols by 2 in order to avoid them confused with function symbols.  (#1554332)
  - Version jump is to sync the version number with the annobin plugins internal version number.


author: Nick Clifton <nickc@redhat.com> - 5.6-1
changelog:
  - Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files.


author: Nick Clifton <nickc@redhat.com> - 7.0-1
changelog:
  - Add -debug-rpm= option to annocheck.
  - Only use a 2 byte offset for the initial symbol on PowerPC.


author: Nick Clifton <nickc@redhat.com> - 7.1-1
changelog:
  - Skip some checks for relocatable object files, and dynamic objects.
  - Stop bogus complaints about stackrealignment not being enabled.


author: Nick Clifton <nickc@redhat.com> - 8.0-1
changelog:
  - Use a prefix for all annobin generated symbols, and make them hidden.
  - Only generate weak symbol definitions for linkonce sections.


author: Nick Clifton <nickc@redhat.com> - 8.11-1
changelog:
  - Handle function sections properly.  Handle .text.startup and .text.unlikely sections.  Improve gap detection and reporting.  (#1601055)


author: Nick Clifton <nickc@redhat.com> - 8.22-1
changelog:
  - Reduce version check to gcc major version number only.  Skip compiler option checks if binary not built with gcc.  (#1603089)


author: Nick Clifton <nickc@redhat.com> - 8.28-1
changelog:
  - Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
  - Merge ranges where one is wholly covered by another.


author: Nick Clifton <nickc@redhat.com> - 8.31-1
changelog:
  - Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
  - Fix bugs in section-size tool.
  - Fix bug in built-by tool.


author: Nick Clifton <nickc@redhat.com> - 8.33-1
changelog:
  - Add timing tool to report on speed of the checks.
  - Add check for conflicting use of the -fshort-enum option.
  - Add check of the GNU Property notes.
  - Skip check for -O2 if compiled with -Og.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.38-1
changelog:
  - Generate notes and groups for .text.hot and .text.unlikely sections.
  - When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
  - Similarly put exit section notes into .text.exit.foo.  (#1630574)
  - Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed.


author: Nick Clifton <nickc@redhat.com> - 8.46-1
changelog:
  - Annobin:   Fix section name selection for startup sections.
  - Annocheck: Improve gap skipping heuristics.   (#1630574)


author: Nick Clifton <nickc@redhat.com> - 8.66-1
changelog:
  - Annocheck: Do not ignore -Og when checking to see if an optimization level has been set.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.67-1
changelog:
  - Annocheck: Only skip specific checks for specific symbols.  (#1666823)
  - Annobin: Record the setting of the -fomit-frame-pointer option.


author: Nick Clifton <nickc@redhat.com> - 8.68-1
changelog:
  - Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary.


author: Nick Clifton <nickc@redhat.com> - 8.69-1
changelog:
  - Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
  - Annocheck: Add a note displaying tool.


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703499)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 8.81-1
changelog:
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 8.83-1
changelog:
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.


author: Nick Clifton <nickc@redhat.com> - 9.06-1
changelog:
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.11-1
changelog:
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.12-1
changelog:
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)


author: Nick Clifton <nickc@redhat.com> - 9.13-1
changelog:
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.


author: Nick Clifton <nickc@redhat.com> - 9.14-1
changelog:
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.


author: Nick Clifton <nickc@redhat.com> - 9.24-1
changelog:
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.28-1
changelog:
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)


author: Nick Clifton <nickc@redhat.com> - 9.31-1
changelog:
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.


author: Nick Clifton <nickc@redhat.com> - 9.36-1
changelog:
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.37-1
changelog:
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.


author: Nick Clifton <nickc@redhat.com> - 9.45-1
changelog:
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.


author: Nick Clifton <nickc@redhat.com> - 9.52-1
changelog:
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)


author: Nick Clifton <nickc@redhat.com> - 9.62-1
changelog:
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)


author: Nick Clifton <nickc@redhat.com> - 9.63-1
changelog:
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)


author: Petr Pisar <ppisar@redhat.com> - 9.66-3
changelog:
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough


author: Nick Clifton <nickc@redhat.com> - 9.68-1
changelog:
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.


author: Nick Clifton <nickc@redhat.com> - 9.74-1
changelog:
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.78-1
changelog:
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.80-1
changelog:
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.


author: Nick Clifton <nickc@redhat.com> - 9.88-1
changelog:
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)


author: Nick Clifton <nickc@redhat.com> - 9.89-1
changelog:
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)


author: Nick Clifton <nickc@redhat.com> - 9.90-1
changelog:
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.


author: Nick Clifton <nickc@redhat.com> - 9.92-1
changelog:
  - Annocheck: Fix memory corruption.  (#1996963)
  - spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.


author: Nick Clifton <nickc@redhat.com> - 9.93-1
changelog:
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - spec file: Add the installation of the annobon sources into /usr/src/annobin.


author: Nick Clifton <nickc@redhat.com> - 9.95-1
changelog:
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.


author: Nick Clifton <nickc@redhat.com> - 10.01-1
changelog:
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.


author: Nick Clifton <nickc@redhat.com> - 10.04-1
changelog:
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.


author: Nick Clifton <nickc@redhat.com> - 10.08-1
changelog:
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.


author: Nick Clifton <nickc@redhat.com> - 10.10-1
changelog:
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.


author: Nick Clifton <nickc@redhat.com> - 10.12-1
changelog:
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.


author: Nick Clifton <nickc@redhat.com> - 10.13-1
changelog:
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)


author: Nick Clifton <nickc@redhat.com> - 10.16-1
changelog:
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.21-1
changelog:
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: Nick Clifton <nickc@redhat.com> - 10.39-1
changelog:
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)


author: Nick Clifton <nickc@redhat.com> - 10.40-1
changelog:
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)


author: Nick Clifton <nickc@redhat.com> - 10.41-1
changelog:
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.


author: Nick Clifton <nickc@redhat.com> - 10.66-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.72-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.74-1
changelog:
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.


author: Nick Clifton <nickc@redhat.com> - 10.76-3
changelog:
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.85-1
changelog:
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.


author: Nick Clifton <nickc@redhat.com> - 10.91-1
changelog:
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.


author: Nick Clifton <nickc@redhat.com> - 10.93-1
changelog:
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)


author: Nick Clifton <nickc@redhat.com> - 11.09-1
changelog:
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.


author: Nick Clifton <nickc@redhat.com> - 12.02-1
changelog:
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.


author: Nick Clifton <nickc@redhat.com> - 12.04-1
changelog:
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217812)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon libiberty.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53572)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79974)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217911)
  - Spec File: Build static libraries with -fno-lto.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22817)
  - [2.40-18: was a failed attempt to fix RHEL-22817]


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Nick Clifton <nickc@redhat.com> - 9.07-1
changelog:
  - Rebase to 9.07 release:
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Rebuild againt latest gcc-10.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.
  - Do not skip positive results.
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
  - Allow compiler used to run tests to be specified on the command line.  (#1723401)


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-17
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1779417)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-9
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes.
  - Fix testing failure due to Perl changes related to expanding paths.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Backport patches fixing abort when working directory is deleted.
    (RHBZ 1869484, Sergio Durigan Junior)


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Jens Petersen <petersen@redhat.com> - 1.3-2
changelog:
  - add pkg git as URL (#1093541)
  - downgrade license tag to GPLv2+ in line with rpm (redhat-rpm-config is GPL+)
  - sync with current ghc-rpm-macros: add ghc_arches for backwards compatibility


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.14-3
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1087071).


author: Tim Waugh <twaugh@redhat.com> 9.15-3
changelog:
  - Avoid shipping ramfs source as its license is unclear. Similarly
    with some documentation and example code (bug #1149617).


author: Tim Waugh <twaugh@redhat.com> 9.15-4
changelog:
  - New ghostscript-x11 package for X11 driver (bug #148939).
  - Ghostscript not requiring X11 is now in ghostscript-core.
  - The 'ghostscript' package requires both of these.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5
changelog:
  - [TEMPORARY] Support for OpenJPEG disabled for builds to pass.
  - Security fix for BZ #1380416 backported.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1
changelog:
  - Rebase to latest ghostscript-9.20. Major changes in this rebase:
    - OpenJPEG support has been re-enabled
    - ijs-config custom tool has been removed (pkg-config is used by default)
    - old irrelevant patches removed (changes are part of upstream release now)
    - remaining patches has been updated & renamed
    - no API/ABI changes according to upstream


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2
changelog:
  - Added security fixes for:
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-7976 (bug #1382294)
    - CVE-2016-7978 (bug #1382300)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4
changelog:
  - complete cleanup in ghostscript specfile according to FPG
  - libgs -- new separate package (Ghostscript library)
  - libgs-devel -- new separate subpackage (devel files for Ghostscript library)
  - libijs -- now shipped as a separate package on Pagure
  - ghostscript-tools-fonts -- new subpackage
  - ghostscript-tools-printing -- new subpackage
  - ghostscript-core -- changed to transitional metapackage
  - package is now completely debundled from already packaged software/resources
  - versioned paths for documentation, resources, etc. are no longer used
  - LPR setup scripts removed (no longer shipped)
  - added symlinks for direct resources location to speedup Ghostscript startup times
  - Ghostscript's search path updated to include only fonts locations as a backup
  - support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)
  - examples/ folder dropped from *-doc subpackage


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8
changelog:
  - Switch to %ldconfig_scriptlets
    >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-3
changelog:
  - ghostscript-9.24-002-icc-PermitReading.patch removed
  - ghostscript-9.24-002-fix-for-Canon-and-Kyocera-printers.patch added (bug #1626818)
  - ghostscript-9.24-003-CVE-2018-16802.patch added (bug #1627960)


author: Martin Osvald <mosvald@redhat.com> - 9.26-1
changelog:
  - rebase to latest upstream version 9.26
  - spec change to remove gsdoc.el due to upstream 8bc783cb586


author: Martin Osvald <mosvald@redhat.com> - 9.27-1
changelog:
  - rebase to latest upstream version 9.27
  - security fixes added for:
    - CVE-2019-14811 (bug #1747908)
    - CVE-2019-14812 (bug #1747907)
    - CVE-2019-14813 (bug #1747906)
    - CVE-2019-14817 (bug #1747909)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-3
changelog:
  - use gutenprint per default for current development/future distribution
    versions (Fedora >= 7, RHEL >= 6)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.14-1
changelog:
  - version 2.2.14
    
    Bugs fixed in GIMP 2.2.14
    =========================
    
    - avoid crashing on newer versions of the winicon format (bug #352899)
    - fixed crash in Postscript plug-in (bug #353381)
    - fixed handling of TABs in the text tool (bug #353132)
    - fixed bug in Depth Merge plug-in (bug #355219)
    - fixed bug in GimpDrawablePreview widget (bug #353639)
    - fixed bug in Line Nove script (bug #357433)
    - fixed bug in Ripple plug-in (bug #357431)
    - save locale independent files from Fractal Explorer plug-in (bug #360095)
    - fixed bug in Super Nova plug-in (bug #340073)
    - be more robust against broken XCF files (bug #357809)
    - fixed drawing issues in Image Map plug-in (bug #311621)
    - fixed smoothing option in Fractal Explorer plug-in (bug #372671)
    - load channels in the proper order when opening an XCF file (bug #378003)
    - deal with floating selections in the Burn-In Animation script (bug #384096)
    - fixed clipping in the GimpPreviewArea widget (bug #392692)
    - fixed a potential crash in gimp-remote (bug #392111)
    - work around a file-chooser problem on Windows (bug #398726)
    - fixed markup of the gimp(1) manual page (bug #401145)
    - fixed the fix for the right-to-left layout in layers dialog (bug #348347)
    - fixed PSD save plug-in on 64bit architectures (bug #335130)
    - added missing dependency in gimpui-2.0.pc file (bug #356394)
    - fixed a crash in the PSD save plug-in (bug #395385)
    - improved robustness of transform tool preview code (bug #420595)
    - improved forward compatibility of XCF loader (bug #316207)
    - don't crash in the Compressor plug-in if files can't be opened (bug #422444)
    - fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

  - don't BuildRequire gimp-print/gutenprint anymore


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.15-1
changelog:
  - version 2.2.15

    Bugs fixed in GIMP 2.2.15
    =========================
    
    - fixed parsing of GFig files with CRLF line endings (bug #346988)
    - guard against a possible stack overflow in the Sunras loader (bug #433902)
    - fixed definition of datarootdir in gimptool-2.0 (bug #436386)
    - fixed Perspective tool crash on Mac OS X (bug #349483)
    - fixed area resizing in the Image Map plug-in (bug #439222)
    - added missing library in gimptool-2.0 --libs output
    - added new localizations: Occitan and Persian

  - remove obsolete sunras-overflow patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.16-1
changelog:
  - version 2.2.16

    Bugs fixed in GIMP 2.2.16
    =========================

    - improved input value validation in several file plug-ins (bug #453973)
    - improved handling of corrupt or invalid XCF files
    - guard against integer overflows in several file plug-ins (bug #451379)
    - fixed handling of background alpha channel in XCF files (bug #443097)
    - improved forward compatibility of the config parser
    - fixed crash when previewing some animated brushes (bug #446005)

  - remove obsolete psd-invalid-dimensions patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.17-1
changelog:
  - version 2.2.17

    Bugs fixed in GIMP 2.2.17
    =========================

    - fixed regression in PSD load plug-in (bug #456042)
    - fixed crash when loading a corrupt PSD file (bug #327444)
    - work around for Pango appending " Not-Rotated" to font names


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-0.rc1.1
changelog:
  - version 2.4.0-rc1
  - change license tags to GPLv2+ (main app), LGPLv2+ (libs and devel)
  - drop libXt-devel build requirement
  - build-require pygobject2-devel directly
  - don't let %postun fail
  - remove obsolete buildroot, gimphelpmissing, icontheme, gifload, gimptool
    patches
  - update htmlview patch
  - use more distinct build root
  - use %buildroot consistently
  - explicitely enable configure options
  - more versionized build requirements
  - don't rebuild autofoo files
  - reformat spec file a bit


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-1
changelog:
  - version 2.4.0
  - use xdg-open instead of htmlview on Fedora 7 and later
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - don't let gtk-update-icon-cache fail scriptlets


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.1-1
changelog:
  - version 2.4.1

    Changes in GIMP 2.4.1
    =====================

    - fixed a minor display rendering problem
    - improved the workaround for broken graphics card drivers (bug #421466)
    - fixed a crash with broken scripts and plug-ins (bug #490055)
    - fixed potential syntax error in configure script (bug #490068)
    - fixed parsing of floating point numbers in Script-Fu (bug #490198)
    - fixed potential crash when converting an indexed image to RGB (bug #490048)
    - update the histogram while doing color corrections (bug #490182)
    - fixed another crash with broken plug-ins (bug #490617).
    - translation updates


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.2-1
changelog:
  - version 2.4.2

    Changes in GIMP 2.4.2
    =====================

    - removed broken and useless HSV Graph script (bug #491311)
    - update the histogram when a color correction tool is cancelled (bug #493639)
    - fixed a crash with certain plug-in or script descriptions (bug #492718)
    - corrected a tooltip (bug #495564)
    - fixed a crash when GIMP is run without any modules (bug #495863)
    - fixed error handling in the TIFF plug-in
    - fixed a problem with Sample points
    - fixed a crash when merging layers in indexed image (bug #495990)
    - update the histogram when painting (bug #494049)
    - fixed another problem with merge operations on indexed images (bug #496437)
    - fixed crash in TIFF plug-in when saving indexed images (bug #497103)
    - changed defaults so that a system monitor profile is only used when the
      user explicitely enabled this feature (bug #496890)
    - fixed endless loop when running equalize on transparent areas (bug #497291)
    - fixed heap corruption in GimpColorScale widget that caused a crash in the
      Compose plug-in (bug #399484)
    - fixed use of background color in Particle Trace script (bug #498282)
    - set the image menu insensitive when there's no image opened (bug #498511)
    - translation updates (ca, et, it, lt, pt, pt_BR, sr, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.3-1
changelog:
  - version 2.4.3

    Changes in GIMP 2.4.3
    =====================

    - avoid filename encoding problems in the WMF import plug-in (bug #499329)
    - fixed horizontal flipping of linked layers (bug #499161)
    - fixed a missing update in the Lighting plug-in UI (bug #500317)
    - fixed a potential crash in the projection code (bug #500178)
    - fixed a minor Makefile issue (bug #500826)
    - removed some pointless warnings from the JPEG and TIFF load plug-ins
    - fixed size calculation for the image size warning dialog (bug #329468)
    - fixed loading of tool options for the rectangle tools (bug #498948)
    - push/pop a context in the Fog filter
    - fixed potential crashes in the Python binding
    - corrected grid drawing with non-integer spacing (bug #502374)
    - fixed grid snapping for coordinates less than the grid offset
    - made the healing brush work properly when dragged (bug #492575)
    - update tool state when a device change happens (bug #493176)
    - improved validation of strings sent over the wire (bug #498207)
    - fixed integer check in Script-Fu (bug #498207)
    - fixed potential out-of-memory problem in Script-Fu
    - translation updates (ca, cs, de, gl, it, ko, lt, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.4-1
changelog:
  - version 2.4.4

    Changes in GIMP 2.4.4
    =====================

    - fixed typo in stock icon name
    - fixed handling of PSD files with empty layer names (bug #504149)
    - merged TinyScheme bug-fixes
    - removed duplicate entry from Tango palette
    - corrected parameter range in Chip Away script (bug #506110)
    - reduced redraw priority and speed of the marching ants (bug #479875)
    - fixed out-of-bounds array access in Convolution Matrix plug-in
    - reduced rounding errors in Convolution Matrix plug-in (bug #508114)
    - fixed potential crash on missing CMYK color profile
    - fixed crash in Bumpmap plug-in when called from some scripts (bug #509608)
    - Equalize should not equalise the alpha channel (bug #510210)
    - increased the number of points the ImageMap plug-in can handle (bug #511072)
    - adjusted the priority of the projection renderer (bug #511214)
    - smooth the brush mask to get a simpler cursor boundary (bug #304798)
    - show the selection even if the image window is invisible (bug #505758)
    - allow to commit a pending rectangular selection using Enter (bug #511599)
    - fixed bug in image dirty state logic (bug #509822)
    - improved GIMPressionist preformance and reduced startup time (bug #512126)
    - fixed a crash in the Convert to Color Profile plug-in (bug #512529)
    - merged some other minor fixes from trunk
    - translation updates (de, it, lt, ru, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.5-1
changelog:
  - version 2.4.5

    Changes in GIMP 2.4.5
    =====================

    - fixed a regression introduced by the brush cursor optimization
      (bug #514309)
    - fixed bug in transform tool preview (bug #340965)
    - fixed PSD export of images with layer masks
    - fixed base64 encoding routine of the Mail plug-in
    - use the correct background color when creating a new image
      (bug #514082)
    - explicitly link libgimpthumb with GLib (bug #515566)
    - improved selection of the font sample string (bug #514021)
    - unified handling of "Enter" and "Space" keysyms (bug #516544)
    - fixed bug in the Glossy script when used with a pattern (bug #517285)
    - correctly record dimensions in Exif data when saving as JPEG
      (bug #517077)
    - fixed sensitivity of plug-in menu items (bug #517683)
    - fixed potential crashes in Wind, Warp, Small Tiles and Apply Canvas
      plug-ins (bug #516369)
    - added default keyboard shortcut for "Paste As New Image"
      (Ctrl-Shift-V)
    - added default keyboard shortcut for "Copy Visible" (Ctrl-Shift-C)
    - fixed missing preview update in Curves tool (bug #518012)
    - fixed a bug in the Frosty Logo script (bug #472316)
    - fixed backward transformations using the PDB (bug #518910)
    - translation fixes and updates (de, eu, eo, fr, he, hu, it, ja, ko)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.6-1
changelog:
  - version 2.4.6

    Changes in GIMP 2.4.6
    =====================

    - fixed handling of the "antialias" tool option (bug #521069)
    - when loading a TIFF image, always set a filename on it (bug #521436)
    - fixed initial state of curve type in Curves tool (bug #523873)
    - fixed potential crash in the Dicom load plug-in
    - respect the brush mask in the Heal tool (bug #521433)
    - plugged some minor memory leaks
    - fixed a glitch in the DND code (bug #317992)
    - gimp-image-convert() must not accept palettes with > 256 colors (bug
        - fixed parameter description in the Map Object plug-in (bug #526679)
    - fixed compilation of unit tests on Mac OS X (bug #528160)
    - fixed handling of "argc-lower-val-y" PDB parameter in Curve Bend plug-in
    - fixed overlap problem in Hue-Saturation tool (bug #527085)
    - fixed asymmetry in Unsharp Mask plug-in (bug #530077)
    - don't show non-existant color profiles in the selector (bug #528958)
    - fixed issues with default aspect ratio in the Crop tool (bug #532057)
    - fixed compilation of the PDF import plug-in with libpoppler 0.8
    - fixed bug in clipboard brush code (bug #532886)
    - corrected layer mask flag in PSD save plug-in (bug #526811)
    - fixed an issue with tablets and newer X.Org releases
    - keep the JPEG save plug-in from writing an empty EXIF tag (bug #529469)
    - fixed crash in Selective Gaussion Blur plug-in (bug #529280)
    - added new translations (Belarusian, Catalan, Norwegian Nynorsk)
    - translation fixes and updates
      (ar, ca, de, el, es, fi, fr, hu, it, ko, pl, pt_BR, ro, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.7-1
changelog:
  - version 2.4.7

    Changes in GIMP 2.4.7
    =====================

    - fixed issue in GIF load plug-in (bug #535888)
    - fixed event handling in MIDI controller (bug #537960)
    - fixed handling of the 'Highlight' tool option in Crop and Rectangle
      Select tools (bug #536582)
    - various fixes to the Python bindings:
      - fixed crash with Python 2.5 on 64 bit systems (bug #540629)
      - added missing validity checks (bug #536403)
      - allow to pass None for PDB_DISPLAY
    - plugged a memory leak in gimp-text-get-extents-fontname PDB call
    - fixed potential timeout issues in org.gimp.GIMP.UI D-Bus service
    - fixed endianness issue in the ICO save plug-in (bug #529629)
    - translation fixes and updates (be, it, lt, nn, vi)


author: Nils Philippsen <nils@redhat.com> - 2:2.4.7-2
changelog:
  - Merge review:
    - convert spec file to UTF-8
    - remove unneeded gimp2, gimp-beta obsoletes
    - quote macros in changelog
    - use only spaces, not tabs
    - make pyconsole.py plug-in executable (upstream bug #552601)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-1
changelog:
  - version 2.6.0
  - remove obsolete htmlview patch
  - remove obsolete distro version dependent defaults
  - don't use custom CFLAGS


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-2
changelog:
  - move gimptool to devel subpackage
  - make gimp-plugin-mgr not require gimptool/pkg-config (#465869)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-3
changelog:
  - split off help browser plugin
  - let gimp and gimp-help-browser obsolete older gimp versions to allow seamless
    upgrades


author: Nils Philippsen <nils@redhat.com> - 2:2.6.1-1
changelog:
  - version 2.6.1

    Overview of Changes from GIMP 2.6.0 to GIMP 2.6.1
    =================================================

    * Bugs fixed:

     555587 - PSD file crashes PSD plug-in
     555222 - PSD Load Plugin: unsupported compression mode
     555362 - gimp-remote is not working properly
     555280 - some gif files will not be open
     554890 - JPEG Save Options Dialog does not remember
     554966 - Gimp crashes creating a new image using a template
     554785 - Compile failure on uri-backend-libcurl
     554646 - Opening Help crashes GIMP with lqr-plugin installed
     553534 - centering issues after image scaling and setting zoom
     554898 - Compile failure on uri-backend-wget.c

    * Updated translations:

     Belarusian (be)
     Catalan (ca)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Macedonian (mk)
     Punjab (pa)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Slovenian (sl)
     Swedish (sv)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.2-1
changelog:
  - version 2.6.2

    Overview of Changes from GIMP 2.6.1 to GIMP 2.6.2
    =================================================

    * Bugs fixed:

     557950 - Scaling in Gimp 2.6 is much slower than in Gimp 2.4
     558215 - unit and zoom entries in Statusbar not visible
     558451 - Cannot build GIMP using Sun CC on Solaris 2.8
     558420 - projection incorrect with alpha-less layers
     556603 - Zoom region always zooms in center of image
     557870 - "Qmask" message popping up here and there
     557705 - compatibility with GEGL > 0.0.20
     556248 - Scaling gives 'jagged' edges
     556804 - Zoom drop down doesn't update
     524615 - Print not to scale
     555246 - gimp crashes when a file is opened while a preview is generating
     556741 - Alpha layer automatically added (in psd format)
     556182 - Could you please explain a few strings [I18N]
     555697 - build fails if configured with --without-libjpeg
     134956 - Curves tool doesn't save free curves

    * Updated translations:

     Czech (cs)
     Danish (da)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Polish (pl)
     Brazilian Portuguese (pt_BR)
     Swedish (sv)
     Simplified Chinese (zh_CN)
  - update xdg-open patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.3-1
changelog:
  - version 2.6.3

    Overview of Changes from GIMP 2.6.2 to GIMP 2.6.3
    =================================================

    * Bugs fixed:

     558454 - Plugin Map Color Range disappears from GIMP
     559239 - Error while loading psd-data
     560903 - Explicit zooming with e.g. '1' should handle
              zoom-focus better
     560245 - Zoom selection always centered in the Navigation tab
     559490 - Wrong lang tags for 'no'
     559292 - SOTA Chrome cannot accept different textures
     560375 - Clearing an already empty document history crashes GIMP
     559580 - Image windows need better default locations
     560283 - "Scale image..." causes distortion around edges
     559716 - Changing crop size in Crop Tool Options can make UI
              unresponsive
     558549 - Stroking a single-point path with a paint tool
              crashes GIMP
     559015 - Move tool gives bad information about px moved
     558660 - help behavior for locales without manual translation

    * Updated translations:

     Belarusian (be)
     Dutch (nl)
     German (de)
     Japanese (ja)
     Lithuanian (lt)
     Norwegian Bokmål (nb)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-1
changelog:
  - version 2.6.4

    Overview of Changes from GIMP 2.6.3 to GIMP 2.6.4
    =================================================
    
    * Bugs fixed:
    
     565223 - Perspective transformation jagged edges / comb effect
     563985 - jpg save dialog: "cancel" is treated like "commit"
              for settings
     564087 - Using clone tool on a layer with a part out of canvas
              causes crashes
     564593 - crash when the drawable is changed while a color tool
              is active
     564869 - GIMP crashes on selecting Tools->GEGL operation
     565138 - python-fu-foggify does not check if image is in rgb mode
     563130 - Hue selection mode does not cross the 0-360 degrees line
     563179 - Scrollbars not resized when we extend the canvas size
     562459 - PF_PALETTE: 'TypeError' when used in a plugin that is
              registered in <Image>
     562427 - Compilation with --as-needed
     562386 - PF_SLIDER and PF_SPINNER 'Step' values do not change
              consistently...
     562366 - Default image dimensions are not correctly
              transferred in the file/new dialog box
     561899 - GIMP can't save to mounted filesystem if file exists
    
    * Updated translations:
    
     Greek (el)
     Hindi (hi)
     Hungarian (hu)
     Italian (it)
     Japanese (ja)
     Korean (ko)
     Slovenian (sl)
     Swedish (sv)
     Tamil (ta)
     Simplified Chinese (zh_CN)
  - add BuildRequires: aalib-devel


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-3
changelog:
  - split off gimptool into new gimp-devel-tools subpackage to avoid multilib
    conflicts (#477789)
  - require poppler-glib-devel for building from F9 on (#478691)
  - fix gimp-devel package group


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-1
changelog:
  - version 2.6.5

    Overview of Changes from GIMP 2.6.4 to GIMP 2.6.5
    =================================================

    * Bugs fixed:

     571628 - Scaling image to 25% turn background from white to grey
     567840 - GIMP's GtkScaleButton conflicts with GTK's
     569043 - GEGL tool - missing Operation Settings for all sub-tools
     568890 - don't rely on GtkAction implementation details
     568909 - wrong RGB values for color names in libgimpcolor/gimprgb-parse.c
     568839 - wrong hex RGB value for the color names slategrey and slategray
     559408 - Brushes dragged to the image window look strange
     563337 - Rectangle Select Tool does not allow 1:1 fixed ratio
     568016 - Black pullout parameter of plug-in-newsprint has no effect
     562818 - First image opened in GIMP offset
     562213 - Align Tool doesn't work properly if it is the active tool
              at startup

    * Updated translations:

     Spanish (es)
     Estonian (et)
     Hindi (hi)
     Italian (it)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Russian (ru)
     Serbian (sr)
     Tamil (ta)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-4
changelog:
  - use correct fix from upstream to avoid crashes (#486122)
  - use -fno-strict-aliasing, PIC/PIE compilation flags


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-1
changelog:
  - version 2.6.6

    Overview of Changes from GIMP 2.6.5 to GIMP 2.6.6
    =================================================

    * Bugs fixed:

     571117 - lcms plug-in crashes on broken profile
     575154 - changing the help browser preference may not work
     573542 - blur plugin: bug in the first line
     572403 - gimp-2.6 crashed with SIGSEGV in IA__g_object_get()
     573695 - 1-bit white background saved as PBM becomes all black
     573488 - Small bug in Filter>Distorts>Ripple
     572156 - top left pixel position/coordinate is not 0,0 but 1,1
     472644 - Rotate with clipping crops the whole layer

    * Updated translations:

     German (de)
     Spanish (es)
     Estonian (et)
     Basque (eu)
     French (fr)
     Italian (it)
     Portuguese (pt)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-2
changelog:
  - minimize dialogs with single image window (#492796, backported from trunk,
    original patch by Sven Neumann)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-1
changelog:
  - version 2.6.7

    Overview of Changes from GIMP 2.6.6 to GIMP 2.6.7
    =================================================

    * Bugs fixed:

     591017 - Tablet pan is not working as fast as it should
     577581 - Crashes when using any colors tool/function on Windows
     589667 - GIMP crashes when clicking GEGL Operation on Windows
     569833 - file-jpeg-save erroneous with small quality values
     590638 - Changing palettes from list to grid view loses "locked to dock"
              status
     589674 - "Send by Email" does not update "Filename"
     589674 - "Send by Email" does not update "Filename"
     586851 - Transparent BMP files fail to load
     589205 - help-browser uses deprecated (and sometimes broken) webkit call
     582821 - 'Sphere Designer' does not reset correctly...
     570353 - first time open of .svg file ignores the requested units
     555777 - Export to MNG animation fails
     577301 - Dithering with transparency is broken for "positioned" method
     493778 - metadata plug-in crashes on some images
     567466 - PNG comment not found if more than 1 tEXt chunks
     585665 - Exporting to PSD with a blank text layer creates a corrupt file
     586316 - Levels tool does not adjust output levels correctly if input
              levels are changed
     569661 - Import from PDF throws errors when entering resolution in
              pixels per millimetre
     567262 - Black pixels appear in "Spread" filter preview
     554658 - Path Dialog: Path preview pics not to see constantly
     167604 - gimp_gradient_get_color_at() may return out-of-bounds values
     567393 - Rectangle select tool size shrinks to 0 if size is larger than
              the image and the up or down arrow is pressed
     587543 - crash when invoking certain actions by keyboard shortcut
     563029 - Closing maximized image doesn't restore document window size
     585488 - Perspective transformation on a layer with a mask causes crash
     586008 - GIMP crashes when right-click canceling a drawing action initiated
              outside layer boundaries
     584345 - when printing, the number of copies should be reset to 1
     557061 - Alpha to Logo
     472644 - Rotate with clipping crops the whole layer
     577575 - transform tool fills underlying extracted area wrongly
     555738 - Image display is wrong after undoing canvas size
     577024 - help-browser plugin crashes when used with webkit 1.1.3
     555025 - Action GEGL box widgets weirdness

    * Updated and new translations:

     Czech (cs)
     Danish (da)
     German (de)
     Spanish (es)
     Basque (eu)
     Finnish (fi)
     Hungarian (hu)
     Italian (it)
     Gujarati (gu)
     Japanese (ja)
     Kannada (kn)
     Marathi (mr)
     Norwegian bokmål (nb)
     Oriya (or)
     Portuguese (pt)
     Romanian (ro)
     Sinhala (si)
     Swedish (sv)
     Simplified Chinese (zh_CN)
     Traditional Chinese - Hong Kong (zh_HK)
     Traditional Chinese - Taiwan (zh_TW)

  - remove obsolete gegl-babl-versions-check, help-browser-webkit patches
  - comment/explain patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-3
changelog:
  - avoid overflow in the BMP image file plugin (#537356)
  - avoid overflow in the PSD image file plugin (#537370)
  - update jpeg-units patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.8-1
changelog:
  - version 2.6.8

    Overview of Changes from GIMP 2.6.7 to GIMP 2.6.8
    =================================================

    * Bugs fixed:

     470698 - MapObject cannot modify highlight
     593848 - FG color changed to black when FG-BG Editor tab created
     594651 - layer.scale() raises RuntimeError
     594998 - Keyboard shortcuts does not work for first image when dock
              is focused
     599765 - F1 key on gimp-tool-align in menu have wrong link and it
              open gimp-tool-move
     600484 - Gimp BMP Integer Overflow Vulnerability
     600741 - "read_channel_data()" Integer Overflow Vulnerability
     601891 - gimp_image_get_selection returns None
     602761 - plug-in-grid: Parameters Horizontal/Vertical Spacing and
              Horizontal/Vertical Offset are reversed.
     603995 - PCX plugin doesn't sanitize input to avoid allocation overflows.
     603998 - PCX: Calculating amount of memory to allocate may overflow.
     604000 - SGI: sanitize input
     604001 - SGI: Calculating amount of memory to allocate may overflow.
     604002 - SGI: RLE encoded input data may write beyond allocated buffers
     604004 - SGI: allocate memory consistently
     604008 - GBR, PAT: sanitize input data
     604078 - Crash when pressing Backspace with Free Select Tool

    * Updated and new translations:

     Basque (eu)
     British English (en_GB)
     Czech (cs)
     French (fr)
     Greek (el)
     Italian (it)
     Japanese (ja)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)
     Russian (ru)
     Simplified Chinese (zh_CN)

  - remove obsolete bmp-hardening, psd-hardening patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Nils Philippsen <nils@redhat.com> - 2:2.6.10-1
changelog:
  - version 2.6.10

    Overview of Changes from GIMP 2.6.9 to GIMP 2.6.10
    ==================================================

    * Bugs fixed:

     613328 - TGA files saved with incorrect header yOrigin data
     623290 - Save As... does not save Windows Bitmap as default in dialog
     621363 - CMYK decompose broken
     595170 - brush - color from gradient works wrong in greyscale
     613838 - Error in gimp-hue-saturation PDB call
     622608 - GIMP crashes when clicking any scroll bar from combo boxes
     565459 - newly opened images are put into the background

    * Updated translations:

     German (de)
     Italian (it)
     Romanian (ro)
     Portuguese (pt)

  - remove obsolete combo-popup patch
  - update script-fu-ipv6 patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-1
changelog:
  - version 2.6.11

    Overview of Changes from GIMP 2.6.10 to GIMP 2.6.11
    ===================================================

    * Bugs fixed:

     631199 - Printing and Print preview broken with cairo 1.10
     572865 - Parasite handling had problems and can cause crashing
     628893 - Error with string-append and gimp-drawable-get-name
     623850 - (Paco) Recursive Gaussian Filter error
     624487 - Fix incorrect "wrap mode" documentation values in Edge plug-in
     557380 - Difference of Gaussians gives blank doc if "Invert" selected
     627009 - Image type filter doesn't include .rgba SGI files
     626020 - Console window opening on file-ps-load
     624698 - Wood 1 and Wood 2 have bad alpha value
     624275 - Image saved from google docs generates a
              'gimp-image-set-resolution' error message

    * Updated translations:

     German (de)
     Spanish (es)
     Italian (it)
     Japanese (ja)
     Romanian (ro)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-10
changelog:
  - don't use poppler/gdk_pixbuf API removed in poppler >= 0.17 (#698157)
  - remove obsolete configure options


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-14
changelog:
  - fix buffer overflows in sphere-designer (CVE-2010-4541),
    gfig (CVE-2010-4542), lighting (CVE-2010-4540) plugins


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-21
changelog:
  - actually apply startup-warning patch
  - fix heap corruption and buffer overflow in file-gif-load plugin
    (CVE-2011-2896)


author: Nils Philippsen <nils@redhat.com> - 2:2.7.3-1
changelog:
  - version 2.7.3 (unstable, see http://developer.gimp.org/NEWS for details)
    - change license to GPLv3+/LGPLv3+
    - update required versions of dependencies
    - build with cairo-pdf, jasper, require jasper-devel for building
    - build without poppler as that currently is GPLv2 only, thus incompatible
      with LGPLv3 gimp libraries (use postscript plugin for PDF import
      meanwhile), future poppler versions will be "GPLv2 or GPLv3", i.e.
      compatible again
    - clean up configure options, compiler/linker flags
    - suppress abrt bug reporting for unstable releases
    - remove all patches (obsolete, woo!)
    - add new files, remove files that are not installed any longer
  - use %global instead of %define
  - replace hal, minorver, microver, interfacever, gimp_lang_ver macros with
    gudev, lib_minor, lib_micro, lib_api_version, gettext_version macros
  - compute more version macros (ugly, but convenient)
  - use gudev from Fedora 15 on
  - use convenience macro for hardening binaries from F-16 on


author: Nils Philippsen <nils@redhat.com> - 2:2.7.4-1
changelog:
  - version 2.7.4 (unstable, see http://developer.gimp.org/NEWS for details)
  - update dependency versions
  - don't suppress abrt reporting, don't redirect bug reports to upstream


author: Nils Philippsen <nils@redhat.com> - 2:2.7.5-1
changelog:
  - version 2.7.5 (unstable, see http://developer.gimp.org/NEWS for details)
  - add BR: atk >= 2.0.1, bzip2-devel, ghostscript-devel, zlib-devel
  - package tool presets


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-0.1.RC1
changelog:
  - version 2.8.0-RC1 (release candidate):
   - Add our own GimpOperationBrightnessContrast because GEGL one is different
   - Fix some GFig rendering issues
   - Depend on Babl 0.1.10, GEGL 0.2.0 and some other new library versions
   - Bug fixes
   - Translation updates


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-3
changelog:
  - fix crash in fits loader (#834627)
  - fix overflow in CEL plug-in (CVE-2012-3403)
  - fix overflow in GIF loader (CVE-2012-3481)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.2-3
changelog:
  - don't trip over too much installed memory, reenable all tests
  - realign selection after "Crop to Selection" (#873212, fix by Michael
    Natterer)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.4-4
changelog:
  - fix upstream commit ids
  - fix double-free crashes when selecting gradients from script-fu (#964470)
  - fix crash in unsharp-mask plug-in (#966987)
  - hardcode python interpreter in python plug-ins (#952227)
  - fix crash when selecting text with multiple colors etc. (#919795, #951815)
  - don't crash upon not applying a color profile to a grayscale image (#922622)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.10-5
changelog:
  - remove BRs contained in the minimal build environment
  - group BRs into libraries and tools
  - remove various old cruft
  - ship RPM macros for packaging plug-ins e.a. (#1063144)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.18-2
changelog:
  - build without help-browser from Fedora 26 on (#1375809)
  - use %license for license text
  - remove some cruft from the spec file


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-3
changelog:
  - Fix for CVE-2017-17784, CVE-2017-17785, CVE-2017-17786,
    CVE-2017-17787, CVE-2017-17788 and CVE-2017-17789 (#1529149)


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-4
changelog:
  - Fix dependencies for F28+ (ghostscript-devel => libgs-devel) #1534656
  - Update spec file for F28+/RHEL purposes


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-7
changelog:
  - add missing dependency for automake and libtool
  - explicitly use python2 as default python interpreter


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Todd Zullinger <tmz@pobox.com> - 1.8.5.3-2
changelog:
  - Drop unused python DESTIR patch
  - Consolidate settings for Fedora 19+ and EL 7+
  - Use new rpm filtering on Fedora 19+ and EL 7+
  - Rebuild with file-5.14-14 (#1026760)


author: Petr Stodulka <pstodulk@redhat.com> - 2.4.2-2
changelog:
  - split create subpackage git-core (perl-less) from git package
  - git package requires git-core and it has same tool set as
    before
  - relevant docs are part of git-core package too
  - removed proved and obsoletes in git for git-core


author: Petr Stodulka <pstodulk@gmail.com> - 2.4.4-2
changelog:
  - git-svn - added requires for perl-Digest-MD5 (#1218176)
  - solve troubles with infinite loop due to broken symlink (probably
    shouldn't be problem here, but it's reproducible manually)
    (#1204193)


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 2.4.5-2
changelog:
  - Comply with modern Emacs packaging guidelines on recent Fedora
    No longer split out emacs-git and emacs-git-el sub-packages on recent Fedora
    Require emacs-filesystem on recent Fedora (#1234552)


author: Konrad Scherer <Konrad.Scherer@windriver.com>
changelog:
  - Workaround missing git subtree documentation in prebuilt docs (bug 1320210)
  - Only add git-cvsserver binary once if the core dir matches the bin dir as it
    does on el5 (bug 1320210)


author: Todd Zullinger <tmz@pobox.com> - 2.8.2-4
changelog:
  - Use perl(MOD::NAME) format for perl-DBD-SQLite and perl-Digest-MD5 deps
  - Define __global_ldflags on EL < 7 (#1337137)


author: Todd Zullinger <tmz@pobox.com> - 2.11.1-3
changelog:
  - Remove unnecessary rsync requirement from git-core
  - Move gnome-keyring credential helper from git-core to git
  - Enable libsecret credential helper
  - Run git test suite
  - Use %{_mandir} in git/git-core file list filters
  - Fix version of emacs-git and emacs-git-el provides
  - Clean up contrib/{credential,subtree} to avoid cruft in git-core-doc
  - Fix a number of macro-in-comment warnings from rpmlint


author: Petr Stodulka <pstodulk@redhat.com> - 2.11.1-3
changelog:
  - remove non-ASCII characters from description and title of packages
  - fix requiremets
  - fix spec to be compatible for other systems
  - remove deprecated credential-gnome-keyring


author: Petr Stodulka <pstodulk@redhat.com> - 2.13.3-2
changelog:
  - Move documentation files from all subpackages into the %{_pkgdocdir}
    directory, so links inside doc and man files are correct
    Resolves: #1357438
  - Quiet a few rpmlint complaints regarding hidden files in contrib dir
  - Remove explicit libcurl requirement from git-core


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.14.0-2
changelog:
  - Add a build-time dependency on python2-devel for p4
    Resolves: #1479713
  - Skip all grep tests on s390x for now because it failes intermittently


author: Todd Zullinger <tmz@pobox.com> - 2.15.0-2
changelog:
  - Fix git-clone memory exhaustion (CVE-2017-15298)
    Resolves: #1510455, #1510457
  - Disable cross-directory hardlinks
  - Drop ancient obsoletes for git and git-arch
  - Update summary/description of numerous subpackages
  - Fix shebang in a few places to silence rpmlint complaints
  - Fix t9020-remote-svn failure when setting PYTHON_PATH
  - Rename %gitcoredir to %gitexecdir; upstream uses the latter
  - Move commands which no longer require perl into git-core
  - Move filter-branch out of core, it needs perl now
  - Improve test suite coverage


author: Todd Zullinger <tmz@pobox.com> - 2.15.1-3
changelog:
  - Include verbose logs in build output for 'make test' failures
  - Use %autosetup macro to unpack and patch source
  - Remove second make invocation for doc build/install
  - Fix builds using '--without docs'
  - Mark git-core-docs sub-package noarch
  - Avoid failures in svnserve tests when run in parallel
  - Run tests in parallel by default on Fedora
  - Skip 'git svn branch' tests which fail intermittently
  - Re-enable grep tests on s390x


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Avoid excluding non-existent .py[co] files in %doc
  - Remove obsolete gnome-keyring credential helper


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Add %{emacs_filesystem} to simplify emacs support
  - Use .in template for git@.service to ensure paths are substituted


author: Todd Zullinger <tmz@pobox.com> - 2.16.0-1
changelog:
  - Update to 2.16.0
  - Use 'prove' as test harness, enable shell tracing
  - Disable t5000-tar-tree.sh on x86 in f28


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-2
changelog:
  - git-svn: avoid segfaults in 'git svn branch', re-enable t9128, t9141, and
    t9167
  - Drop obsolete BuildRoot, Group, %clean, and buildroot cleanup


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-3
changelog:
  - Order %files and %packages sections by name
  - Remove obsolete %defattr
  - Don't package contrib/svn-fe in %doc
  - Split git-subtree into a separate package


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.0.rc0
changelog:
  - Update to 2.17.0-rc0
  - Adjust for simplified perl install
  - Require git-core rather than git for git-daemon
  - Rename gitweb httpd config file
  - Install contrib/diff-highlight (#1550251)


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.1.rc1.1
changelog:
  - Drop .py extension from contrib/hooks/multimail/git_multimail.py
  - Remove unnecessary "chmod +x contrib/hooks/*"


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Allow git-p4 subpackage to be toggled via --with/--without
  - Use %bcond_(with|without) to enable/disable python3
  - Add support for disabling python2


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - daemon: use --log-destination=stderr with systemd
  - daemon: fix condition for redirecting stderr
  - git-svn: avoid uninitialized value warning


author: Pavel Cahyna <pcahyna@redhat.com>
changelog:
  - Use BuildRequires: perl-interpreter per the packaging guidelines
  - Update conditions for future RHEL


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-4
changelog:
  - Fix segfault in rev-parse with invalid input (#1581678)
  - Move TEST_SHELL_PATH setting to config.mak


author: Todd Zullinger <tmz@pobox.com> - 2.17.1-3
changelog:
  - Use %apply_patch for aarch64 zlib patch, return to %autosetup
  - Disable jgit tests on s390x, they're unreliable
  - Use %make_build and %make_install


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
    Problem caused by changes in #1633973 and #1491151.
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
changelog:
  - apply upstream run-command PATH fix (CVE-2018-19486)
  - config: document value 2 for protocol.version (upstream patch)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Weisson <wenshu.hx@alibaba-inc.com> - 3.4.1-4.0.1
changelog:
  - Add doc sub package
  - Disable pie mode for loongarch64 (geliwei@openanolis.org)
  - Support loongarch build (geliwei@openanolis.org)


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1.5.5-1
changelog:
  - Update to latest release
  - Add -devel and -unit-test-devel subpackages
  - Add post/preun scriptlets for global enablement


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Benjamin Berg <bberg@redhat.com> - 3.30.1-3
changelog:
  - Add patch to improve background loading. The patch is not acceptable
    upstream as is, but is also a good improvement on the current situation
    (#1631002)


author: David Herrmann <dh.herrmann@gmail.com> - 3.30.1-4
changelog:
  - Reduce 'dbus-x11' dependency to 'dbus'. The xinit scripts are no longer the
    canonical way to start dbus, but the 'dbus' package is nowadays required to
    provide a user and system bus to its dependents.


author: Kevin Fenzi <kevin@scrye.com> - 3.31.90-2
changelog:
  - Add https://gitlab.gnome.org/GNOME/gnome-control-center/merge_requests/387.patch 
    to fix udisks crash


author: Michael Catanzaro <mcatanzaro@gnome.org> - 3.34.0.1-3
changelog:
  - Add patch to fix editing wired connection settings (rhbz#1750805)
  - Remove broken remote printers patch


author: Michael Catanzaro <mcatanzaro@gnome.org> - 3.34.2-2
changelog:
  - Drop nm-connection-editor requires, per gnome-control-center#512
  - To edit mobile broadband connections, install nm-connection-editor


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Jonas Ådahl <jadahl@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Changed tabs to spaces
  - Added systemd user macros
  - Install to correct systemd user unit directory
  - Compile gsettings schemas after install and uninstall


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 40.0.1-17.0.1
changelog:
  - Add doc sub package
  - Modify systemd buildrequirement to version 239 and rebuild with systemd-239 (<gc-taifu@linux.alibaba.com>)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Milan Crha <mcrha@redhat.com> - 3.28.1-7
changelog:
  - extensions: Incorrectly shows enabled extensions as disabled after enable-all
  - Resolves: #1804123


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Parag Nemade <pnemade AT redhat DOT com> - 20120503-10
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Alejandro Sáez <asm@redhat.com> - 2-17
changelog:
  - Add and update the go-compiler functionality (gobuild macro)
  - Deprecate ix86
  - Update Source0
  - Resolves: rhbz#1905383


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Update to Go 1.21.7
  - Add aarch64 and ppc64le for Delve
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: David Benoit <dbenoit@redhat.com> - 1.22.3-1
changelog:
  - Update to Go 1.22.3
  - Resolves: RHEL-35884
  - Resolves: RHEL-35075
  - Resolves: RHEL-35632
  - Resolves: RHEL-35901


author: David Benoit <dbenoit@redhat.com> - 1.22.7-1
changelog:
  - Update to Go 1.22.7
  - Resolves: RHEL-58223
  - Resolves: RHEL-57961
  - Resolves: RHEL-57847
  - Resolves: RHEL-57860


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - Related: rhbz#1870531
  - Related: rhbz#1872622
  - Related: rhbz#1888673
  - Related: rhbz#1889437
  - Related: rhbz#1891095


author: David Benoit <dbenoit@redhat.com> - 1.16.7-1
changelog:
  - Rebase to Go 1.16.7
  - Resolves: rhbz#1994079
  - Add reject leading zeros patch
  - Resolves: rhbz#1993314


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add vdso_s390x_gettime patch
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144542


author: Archana <aravinda@redhat.com> - 1.22.11-1
changelog:
  - Rebase to Go1.22.11 to pick up fixes for CVEs 2024-45341 and 2024-45336
  - Go rebase addresses test failures with expired certificates
  - Resolves: RHEL-73752


author: Adam Goode <adam@spicenitz.org> - 1.1.1-3
changelog:
  - Use lua for pretrans (http://fedoraproject.org/wiki/Packaging:Guidelines#The_.25pretrans_scriptlet)


author: Adam Goode <adam@spicenitz.org> - 1.1.1-4
changelog:
  - Move src to libdir for now (#973842) (upstream issue https://code.google.com/p/go/issues/detail?id=5830)
  - Eliminate noarch data package to work around RPM bug (#975909)
  - Try to add runtime-gdb.py to the gdb safe-path (#981356)


author: Adam Miller <maxamillion@fedoraproject.org> - 1.1.2-5
changelog:
  - Pull upstream patches for BZ#1010271
  - Add glibc requirement that got dropped because of meta dep fix


author: Vincent Batts <vbatts@redhat.com> - 1.1.2-6
changelog:
  - don't symlink /usr/bin out to ../lib..., move the file
  - seperate out godoc, to accomodate the go.tools godoc


author: Adam Miller <maxamillion@fedoraproject.org> 1.2-7
changelog:
  - Remove  _BSD_SOURCE and _SVID_SOURCE, they are deprecated in recent
    versions of glibc and aren't needed


author: Vincent Batts <vbatts@fedoraproject.org> 1.2.1-3
changelog:
  - including more to macros (%go_arches)
  - set a standard goroot as /usr/lib/golang, regardless of arch
  - include sub-packages for compiler toolchains, for all golang supported architectures


author: Vincent Batts <vbatts@fedoraproject.org> - 1.3-10
changelog:
  - more work to get cgo.a timestamps to line up, due to build-env
  - explicitly list all the files and directories for the source and packages trees
  - touch all the built archives to be the same


author: Vincent Batts <vbatts@fedoraproject.org> - 1.5-3
changelog:
  - bz1256910 only allow the golang zoneinfo.zip to be used in tests
  - bz1166611 add golang.org/x directory
  - bz1256525 include stdlib shared object. This will let other libraries and binaries
    build with `go build -buildmode=shared -linkshared ...` or similar.


author: Vincent Batts <vbatts@fedoraproject.org> - 1.5-6
changelog:
  - starting a shared object subpackage. This will be x86_64 only until upstream supports more arches shared objects.


author: Jakub Čajka <jcajka@redhat.com> - 1.5.2-1
changelog:
  - bz1288263 rebase to 1.5.2
  - spec file clean up
  - added build options
  - scrubbed "Project Gutenberg License"


author: Jakub Čajka <jcajka@redhat.com> - 1.5.3-1
changelog:
  - rebase to 1.5.3
  - resolves bz1293451, CVE-2015-8618
  - apply timezone patch, avoid using bundled data
  - print out rpm build system info


author: Jakub Čajka <jcajka@redhat.com> - 1.6-0.1.rc1
changelog:
  - Resolves bz1292640, rebase to pre-release 1.6
  - bootstrap for PowerPC
  - fix rpmlint errors/warning


author: Jakub Čajka <jcajka@redhat.com> - 1.6-1
changelog:
  - Resolves: bz1304701 - rebase to go1.6 release
  - Resolves: bz1304591 - fix possible stack miss-alignment in callCgoMmap


author: Jakub Čajka <jcajka@redhat.com> - 1.6.1-1
changelog:
  - rebase to 1.6.1
  - Resolves: bz1324344 - CVE-2016-3959
  - Resolves: bz1324951 - prelink is gone, /etc/prelink.conf.d/* is no longer used
  - Resolves: bz1326366 - wrong epoll_event struct for ppc64le/ppc64


author: Jakub Čajka <jcajka@redhat.com> - 1.7-0.0.rc2
changelog:
  - rebase to 1.7rc2
  - added s390x build
  - improved shared lib packaging
  - Resolves: bz1357602 - CVE-2016-5386
  - Resolves: bz1342090, bz1342090


author: Jakub Čajka <jcajka@redhat.com> - 1.7-0.3.rc5
changelog:
  - Obsolete golang-vet and golang-cover from golang-googlecode-tools package
    vet/cover binaries are provided by golang-bin rpm (thanks to jchaloup)
  - clean up exclusive arch after s390x boostrap
  - resolves: #1268206


author: Jakub Čajka <jcajka@redhat.com> - 1.8-0.rc3.2
changelog:
  - make possible to override default traceback level at build time
  - add sub-package race containing std lib built with -race enabled
  - Related: BZ#1411242


author: Derek Parker <deparker@redhat.com> - 1.10.3-15
changelog:
  - Remove usage of redhat hardening flag file, just pass a select few manually
  - Resolves: rhbz#1642798


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
  - Resolves: rhbz#1872622
  - add net/http graceful shutdown patch
  - Resolves: rhbz#1888673
  - add x509warnCN patch
  - Resolves: rhbz#1889437


author: Alejandro Sáez <asm@redhat.com> - 1.16.1-1
changelog:
  - Rebase to go-1.16.1-2-openssl-fips
  - Resolves: rhbz#1938071
  - Adds a workaround for rhbz#1939923
  - Removes Patch224, it's on upstream -> rhbz#1888673
  - Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238
  - Removes old patches for cleaning purposes


author: Alejandro Sáez <asm@redhat.com> - 1.16.5-1
changelog:
  - Rebase to 1.16.5
  - Removes rhbz#1955032 patch, it's already included in this release
  - Removes rhbz#1956891 patch, it's already included in this release
  - Related: rhbz#1979677
  - Related: rhbz#1968738
  - Related: rhbz#1972420


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014088
  - Remove golang-1.15-warnCN.patch
  - Remove reject-leading-zeros.patch
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Remove vdso_s390x_gettime patch
  - Resolves: rhbz#2031112
  - Related: rhbz#2028570


author: Archana Ravindar <aravinda@redhat.com> - 1.21.3-2
changelog:
  - Rebase disable_static_tests_part2.patch to Go 1.21.3
  - Add missing strict fips runtime detection patch
  - Temporarily disable FIPS tests on aarch64 due to builder kernel bugs
  - Remove fix-memory-leak patch as it is fixed upstream
  - Resolves: RHEL-12620


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Add release information
  - Set GOTOOLCHAIN to local
  - Skip TestOverlongMessagePKCS1v15
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: Archana <aravinda@redhat.com> - 1.22.11-1
changelog:
  - Rebase to Go1.22.11 to pick up fixes for CVE 2024-45341 and 2024-45336
  - Fix test failures with expired certificates
  - Resolves: RHEL-73752


author: Parag Nemade <pnemade AT redhat DOT com> - 20120715-8
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-2
changelog:
  - add patch to be standard FHS compliant, remove phantomjs
  - update to v5.4.3 upstream community sources


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-7
changelog:
  - further refinement for spec doc section from Xavier Bachelot
  - disable debug_package to avoid empty debugsourcefiles.list


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-8
changelog:
  - add BuildRequires (and unbundle) vendor sources available in Fedora
  - declare Provides for remaining (bundled) vendor go sources
  - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28


author: Xavier Bachelot <xavier@bachelot.org> 5.4.3-9
changelog:
  - Remove extraneous slash (cosmetic)
  - Create directories just before moving stuff in them
  - Truncate long lines
  - Group all golang stuff
  - Simplify BuildRequires/bundled Provides
  - Sort BuildRequires/bundled Provides
  - Fix bundled go packages Provides


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-11
changelog:
  - tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656)
  - build debuginfo package again
  - unbundle BuildRequires for golang-github-hashicorp-version-devel
  - remove some unneeded development files
  - remove macros from changelog and other rpmlint tweaks


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.1-1
changelog:
  - update to v6.0.1 upstream sources, tweak distro config, re-do patch
  - simplify make_webpack.sh script (Elliott Sales de Andrade)
  - vendor/github.com/go-ldap is now gone, so don't unbundle it


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.4-1
changelog:
  - include fix for CVE-2019-15043
  - add patch for uaparser on 32bit systems
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.5-1
changelog:
  - drop uaparser patch now it's upstream
  - add xerrors patch, see https://github.com/golang/go/issues/32246
  - use vendor sources on rawhide until modules are fully supported
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.6-1
changelog:
  - add weak depenency on grafana-pcp
  - add patch to mute shellcheck SC1090 for grafana-cli
  - update to 6.3.6 upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.6.2-1
changelog:
  - added patch0 to set the version string correctly
  - removed patch 004-xerrors.patch, it's now upstream
  - added several patches for golang vendored vrs build dep differences
  - added patch to move grafana-cli binary to libexec dir
  - update to 6.6.2 tagged upstream community sources, see CHANGELOG


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.3-1
changelog:
  - update to 6.7.3 tagged upstream community sources, see CHANGELOG
  - add scripts to list Go dependencies and bundled npmjs dependencies
  - set Grafana version in Grafana UI and grafana-cli --version
  - declare README.md as documentation of datasource plugins
  - create grafana.db on first installation (fixes RH BZ #1805472)
  - change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
  - change permissions of /var/lib/grafana/grafana.db to 640 and
    user/group grafana:grafana (CVE-2020-12458)
  - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-1
changelog:
  - update to 6.7.4 tagged upstream community sources, see CHANGELOG
  - security fix for CVE-2020-13379


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
changelog:
  - update to 7.3.4 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies
  - optionally bundle node.js dependencies and build and test frontend as part of the specfile
  - merge all datasources into main grafana package
  - change default provisioning path to /etc/grafana/provisioning
  - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
changelog:
  - update to 7.3.6 tagged upstream community sources, see CHANGELOG
  - remove dependency on SAML (not supported in the open source version of Grafana)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
changelog:
  - change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
  - add pcp-redis-datasource to allow_loading_unsigned_plugins config option


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
changelog:
  - remove unused cryptographic implementations
  - use cryptographic functions from OpenSSL if FIPS mode is enabled


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
changelog:
  - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
  - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
  - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
  - run integration tests in check phase
  - update FIPS patch with latest changes in Go packaging


author: Mark Goodwin <mgoodwin@redhat.com> 0.0.4-1
changelog:
  - add suggested pmproxy URL in config html
  - updated instructions and README.md now that grafana is in Fedora


author: Andreas Gerstmayr <agerstmayr@redhat.com> 0.0.7-1
changelog:
  - converted into a Grafana app plugin, renamed to grafana-pcp
  - redis: support for instance domains, labels, autocompletion, automatic rate conversation
  - live and bpftrace: initial commit of datasources


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.0-1
changelog:
  - bpftrace: support for Flame Graphs
  - bpftrace: context-sensitive auto completion for bpftrace probes, builtin variables and functions incl. help texts
  - bpftrace: parse output of bpftrace scripts (e.g. using `printf()`) as CSV and display it in the Grafana table panel
  - bpftrace: sample dashboards (BPFtrace System Analysis, BPFtrace Flame Graphs)
  - vector: table output: show instance name in left column
  - vector: table output: support non-matching instance names (cells of metrics which don't have the specific instance will be blank)
  - vector & bpftrace: if the metric/script gets changed in the query editor, immeditately stop polling the old metric/deregister the old script
  - vector & bpftrace: improve pmwebd compatibility
  - misc: help texts for all datasources (visible with the **[ ? ]** button in the query editor)
  - misc: renamed PCP Live to PCP Vector
  - misc: logos for all datasources
  - misc: improved error handling


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.2-1
changelog:
  - handle counter wraps (overflows)
  - convert time based counters to time utilization
  - flame graphs: aggregate stack counts by selected time range in the Grafana UI
  - flame graphs: add option to hide idle stacks
  - vector: fix container dropdown in query editor
  - vector: remove container setting from datasource settings page
  - redis: fix value transformations (e.g. rate conversation of counters)
  - request more datapoints from the datasource to fill the borders of the graph panel


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.3-2
changelog:
  - remove node_modules/node-notifier directory from webpack (due to licensing issues)
  - upgrade copy-webpack-plugin, terser-webpack-plugin and remove uglifyjs-webpack-plugin to mitigate XSS vulnerability in serialize-javascript dependency


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.5-1
changelog:
  - upgrade to upstream 1.0.5
  - flame graphs: clean flame graph stacks every 5s (reduces CPU load)
  - general: implement PCP version checks
  - redis: set default sample interval to 60s (fixes empty graph borders)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 2.0.2-2
changelog:
  - vector: do not show all cgroups in the container overview dashboard in case no containers are present on the system


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


