# changelog

author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.13-0.alpha1.2
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Roland Mainz <rmainz@redhat.com> - 1.13-0.alpha1.3
changelog:
  - fix for CVE-2014-5351 (#1145425) "krb5: current keys returned when
    randomizing the keys for a service principal"


author: Roland Mainz <rmainz@redhat.com> - 1.13-1
changelog:
  - Update from krb5-1.13-alpha1 to final krb5-1.13
  - Removed patch for CVE-2014-5351 (#1145425) "krb5: current
    keys returned when randomizing the keys for a service principal" -
    now part of upstream sources
  - Use patch for glibc |eventfd()| prototype mismatch (#1147887) only
    for Fedora > 20


author: Roland Mainz <rmainz@redhat.com> - 1.13-2
changelog:
  - Bump 1%{?dist} to 2%{?dist} to workaround RPM sort issue
    which would lead yum updates to treat the last alpha as newer
    than the final version.


author: Roland Mainz <rmainz@redhat.com> - 1.13-5
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").
  - Added "python-sphinx-latex" to the build requirements
    to fix build failures on F22 machines.


author: Roland Mainz <rmainz@redhat.com> - 1.13-7
changelog:
  - Remove "python-sphinx-latex" and "tar" from the build requirements
    to fix build failures on F22 machines.
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-8
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - Update to krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-3
changelog:
  - Add temporay workaround for RH bug #1204646 ("krb5-config
    returns wrong -specs path") which modifies krb5-config post
    build so that development of krb5 dependicies gets unstuck.
    This MUST be removed before rawhide becomes F23 ...


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-4
changelog:
  - fix for CVE-2015-2694 (#1216133) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2
  - Add script processing for upcoming Zanata l10n support
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add patch to fix Redhat Bug #1227542 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Remove Zanata test glue and related workarounds
    - Bug #1234292 ("IPA server cannot be run in container due to incorrect /usr/sbin/_kadmind")
    - Bug #1234326 ("krb5-server introduces new rpm dependency on ksh")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Use system nss_wrapper and socket_wrapper for testing.
    Patch by Andreas Schneider <asn@redhat.com>


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-7
changelog:
  - Support config snippets in /etc/krb5.conf.d/ and /usr/share/krb5.conf.d/
    (#1225792, #1146370, #1145808)


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-8
changelog:
  - Remove dependency on systemd-sysv which is no longer needed for fedora > 20
    This also fixes a fail-to-build issue.
  - Miscalaneous spec cleanup fixes


author: Robbie Harwood <rharwood@redhat.com> - 1.14-9
changelog:
  - Upstream release.  No actual change from beta, just version bump
  - Clean up unused parts of spec file


author: Robbie Harwood <rharwood@redhat.com> - 1.14-11
changelog:
  - Backport interposer fix (#1284985)
  - Drop workaround pwsize initialization patch (gcc has been fixed)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-14
changelog:
  - Remove WITH_NSS macro (always false)
  - Remove WITH_SYSTEMD macro (always true)
  - Remove WITH_LDAP macro (always true)
  - Remove WITH_OPENSSL macro (always true)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-19
changelog:
  - Replace _kadmin/_kprop with systemd macros
  - Remove traces of upstart from fedora package per policy
  - Resolves: #1290185


author: Robbie Harwood <rharwood@redhat.com> - 1.14-21
changelog:
  - Adjust dependency on crypto-polices to be just the file we want
  - Patch courtesy of lslebodn
  - Resolves: #1308984


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - New rawhide, new upstream version
  - Drop CVE patches
  - Rename fix_interposer.patch to acquire_cred_interposer.patch
  - Update acquire_cred_interposer.patch to apply to new source


author: Robbie Harwood <rharwood@redhat.com> - 1.14.4-3
changelog:
  - Switch to using autosetup macro.
    - Patches come from git, so it is easiest to just make a git repo


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-5
changelog:
  - Automatically add includedir where not present
  - Try removing sleep statement to see if it is still needed
  - Resolves: #1433083


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Robbie Harwood <rharwood@redhat.com> - 1.16-6
changelog:
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939


author: Robbie Harwood <rharwood@redhat.com> - 1.16-15
changelog:
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.24-1
changelog:
  - New upstream release 1.1.24
  - Resolves: rhbz#1292070 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [fedora-all]


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.1.29-5
changelog:
  - rhbz#1401172 - Missing symbol versioning provided by libldb.so with strict CFLAGS
  - Fix configure time detection with -Werror=implicit-function-declaration
    -Werror=implicit-int


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1
changelog:
  - New upstream release 1.3.3
  - Resolves: rhbz#1574267 - libldb-1.3.3 is available
  - Backport a patch from samba upstream to not require rpc.h


author: Petr Viktorin <pviktori@redhat.com> - 1.4.0-3
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Remove the lmdb dependency in RHEL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Jan Stanek <jstanek@redhat.com> 3.8.3-1
changelog:
  - Update to 3.8.3 (http://www.sqlite.org/releaselog/3_8_3.html)
  - Dropped man-page patch - included upstream


author: Honza Horak <hhorak@redhat.com> - 3.8.4.2-3
changelog:
  - Revert part of the upstream commit dca1945aeb3fb005, since it causes
    nautilus to crash
    Related: #1075889


author: Jan Stanek <jstanek@redhat.com> - 3.8.4.3-1
changelog:
  - Update to version 3.8.4.3 (http://www.sqlite.org/releaselog/3_8_4_3.html)
  - Changed patch for rhbz#1075889 to upstream version
    Related: #1075889


author: Jan Stanek <jstanek@redhat.com> - 3.8.5-1
changelog:
  - Update to version 3.8.5 (http://www.sqlite.org/releaselog/3_8_5.html)
  - Dropped patch already included upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.7-1
changelog:
  - Updated to version 3.8.7 (http://sqlite.org/releaselog/3_8_7.html)
  - Dropped patch for problem fixed upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.8-1
changelog:
  - Updated to version 3.8.8 (https://sqlite.org/releaselog/3_8_8.html)
  - Recreated patches to work on current version.


author: Jan Stanek <jstanek@redhat.com> - 3.10.2-1
changelog:
  - Updated to version 3.10.2 (http://sqlite.org/releaselog/3_10_2.html)
  - Enabled JSON1 Extension (rhbz#1277387)
  - Made test failure nonfatal on MIPS (rhbz#1294888)


author: Nils Philippsen <nils@redhat.com> - 3.11.0-2
changelog:
  - add obsoletes/conflicts to make updates on multi-lib systems work (#1310441)
  - make -devel package depend on arch-specific -libs (not main) package


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Petr Kubat <pkubat@redhat.com> - 3.19.3-1
changelog:
  - Updated to version 3.19.3 (https://sqlite.org/releaselog/3_19_3.html)
  - Better detection of CVE-2017-10989 (#1469673)


author: Petr Kubat <pkubat@redhat.com> - 3.22.0-1
changelog:
  - Fixed issue with some e_expr tests failing i686
  - Fixed issue with a fts3rank test failing on big-endian systems


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-5
changelog:
  - Fixed CVE-2019-13752 (#1786529) 
  - Fixed CVE-2019-13753 (#1786535) 
  - Fixed CVE-2019-13734 (#1786509) 
  - Fixed CVE-2019-19924 (#1789776)
  - Fixed CVE-2019-19923 (#1789812)
  - Fixed CVE-2019-19925 (#1789808)
  - Fixed CVE-2019-19959 (#1789823)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to v346
  - Update download URL
  - use the configure marcro
  - strip binary
  - fix up lesspipe stuff (Bug #8750 and a couple of non-reported bugs)
    (Karsten, did I mention I'll kill you when you return from SAP? ;) )


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up messed output if a user outputs anything in ~/.bashrc or the
    likes (Bug #9443)
  - handle RPM_OPT_FLAGS


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - update URLs
  - Copyright -> License
  - fix #43348 (crashes when searching for /<)
  - fix #39849 (
    _ ignores LESSCHARDEF in displaying characters,
    _ prefaces sequences of one or "high" characters with a capital "A")


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - less-378
  - added some debian patches
  - show image info instead of binary garbage when viewing images


author: Karsten Hopp <karsten@redhat.de> 378-5
changelog:
  - removed older, unused patches
  - add patch from Yukihiro Nakai to fix display of japanese text
    (#79977)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix korean #79977
  - add new less.sh from #89780, s/ko/korean/ and write .csh script
  - add patch from #91661: /japanses/japanese-euc/


author: Jindrich Novy <jnovy@redhat.com> 394-2
changelog:
  - apply better fix for #120916 from Avi Kivity (#177819)
    to avoid flickering when '>' is pressed multiple times


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-8
changelog:
  - The new "--old-bot" option is not documented in the man page (#510724)
  - Fix descriptions of some options in online help
    (#578289, patch by Jeff Bastian <jbastian@redhat.com> [IT603793])


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-11
changelog:
  - Clean lesspipe.sh script
  - Split case for compressed and plain troff files
  - Add support for *.xz and *.lzma man pages (#676057)
  - Add support for reading UTF-16 and UTF-32 files (#638312)
  - Don't require correct exit status from LESSOPEN scripts until
    it gets accepted by upstream (preserve backward compatibility) (#666084, #676057)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 443-1
changelog:
  - Rebase to 443
  - Foption patch made applicable against 443
  - Manpage extra line patch removed; fixed upstream (#697451)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 444-4
changelog:
  - Avoid some unnecessary stat calls and commands in lesspipe.sh,
    patch by Ville Skyttä (#741440)
  - Use `groff' instead of `man -s' for rendering manpages to prevent
    options incompatibility between man and man-db packages (#718498)
  - Add groff to Requires


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 444-7
changelog:
  - Fix less.sh not to override user-defined LESSOPEN variable (#802757)
  - Use POSIX regcomp instead of PCRE - revert 406-11, commit 4b961c7 (#643233)
  - Merge Foption changes by Colin Guthrie to Foption.v2.patch (#805735)


author: Martin Briza <mbriza@redhat.com> - 451-1
changelog:
  - Rebase to 451 (#835802)
  - Removed the empty-lessopen-pipe patch as the issue is now fixed upstream.


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - Resolves #1036326 fixing command line parsing in lesskey
  - changed day of week in order to avoid bogus date in changelog


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - (lesspipe) the groff was used just in case of gzipped man pages
  - (lesspipe) the exit $? should be used directly after command; 
    otherwise may return unexpected value.
  - (lesspipe) not preprocessed output was returning 1


author: Jozef Mlich <jmlich@redhat.com> - 458-10
changelog:
  - (lesspipe) better handling of exit status
    fixing regression of #186931 - turns over the lesspipe exit behavior


author: Jozef Mlich <jmlich@redhat.com> - 458-11
changelog:
  - rollback of previous problem. See explanation of upstream.
    http://greenwoodsoftware.com/less/faq.html#profileout
  - fixing exit status values (the $? should be used as soon
    as possible)


author: Viktor Jancik <vjancik@redhat.com> - 479-2
changelog:
  - Updated spec file to comply with current Fedora Packaging Guidelines
    Added missing documentation files
  - Fixed less profile.d scripts
  - Fixed preprocessing of man pages with special characters (#1241543)


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-2
changelog:
  - Rebase to 0.3.110 which adds support for aarch64 and other arches (Jeff Moyer)
  - Move to /usr
  - Resolves: bz#969680


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Richard Hughes <richard@hughsie.com> 0.1.1-1
changelog:
  - New upstream release
  - Add an 'api-version' property to AsStore
  - Add the new AsUrlKind's and <architectures> from API 0.6
  - Support old-style markup-less <description> tags
  - Support the 'origin' attribute on the root node
  - Do not crash when using getting an unset description
  - Do not depend on functions introduced in Glib 2.39.1
  - Fix parsing incompletely translated AppData files


author: Richard Hughes <richard@hughsie.com> 0.1.2-1
changelog:
  - New upstream release
  - Add more API for gnome-software to use
  - Reduce the number of small attr key allocations
  - Use gperf to generate a perfect hash for the tag names
  - Use the full ID for the AsStore hash


author: Richard Hughes <richard@hughsie.com> 0.1.3-1
changelog:
  - New upstream release
  - Add new API required by gnome-software
  - Ignore settings panels when parsing desktop files
  - Load AppStream files assuming literal text strings


author: Richard Hughes <richard@hughsie.com> 0.1.4-1
changelog:
  - New upstream release
  - Add some more API for createrepo_as and gnome-software
  - Add tool appstream-util


author: Richard Hughes <richard@hughsie.com> 0.1.5-1
changelog:
  - New upstream release
  - Add some more API for createrepo_as and gnome-software
  - Be less strict with the case of the XML header
  - Check the licenses against the SPDX list when validating
  - Support AppData version 0.6 files too


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Add some more API for createrepo_as and gnome-software
  - Also support validating .appdata.xml.in files
  - Correctly parse the localized descriptions from AppData files
  - Fix validation of old-style AppData files without screenshot sizes
  - Only autodetect the AsAppSourceKind when unknown
  - Only require <project_licence> when being strict
  - Only show the thumbnail when creating the HTML status page
  - Retain comments in .desktop and .appdata.xml files when required


author: Richard Hughes <richard@hughsie.com> 0.1.7-1
changelog:
  - New upstream release
  - Add <extends> from the draft AppStream 0.7 specification
  - Add support for the 'dbus' AsProvideKind
  - Add support for validating metainfo.xml files
  - Allow 'appstream-util validate' to validate multiple files
  - Do not log a critical warning in as_store_to_xml()
  - Fix a crash when we try to validate <p></p>
  - Support the non-standard X-Ubuntu-Software-Center-Name


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release
  - Accept slightly truncated SPDX IDs
  - Allow any SPDX license when validating in relaxed mode
  - Allow as_node_get_attribute_as_int() to parse negative numbers
  - Allow dumping .desktop, .appdata.xml and .metainfo.xml files in appstream-util
  - Do not add addons that are packaged in the parent package
  - Do not require a content license to be included into the metadata
  - This is the first release that merges the createrepo_as project.
  - Validate the <developer_name> tag values


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Add an 'appstream-util upgrade' command to convert version < 0.6 metadata
  - Add packages recursively when using appstream-builder --packages-dir
  - Allow empty URL sections
  - Fix the xmldir in the APPSTREAM_XML_RULES m4 helper


author: Richard Hughes <richard@hughsie.com> 0.2.2-1
changelog:
  - New upstream release
  - Add two new builder plugins to add kudos on KDE applications
  - Assume local files are untrusted when parsing
  - Do not allow NoDisplay=true applications to ever be in the metadata
  - Never scale up small screenshots
  - Never upscale icons, either pad or downscale with sharpening
  - Sharpen resized screenshots after resizing with a cubic interpolation
  - Write metadata of the failed applications


author: Richard Hughes <richard@hughsie.com> 0.2.3-1
changelog:
  - New upstream release
  - Add oxygen-icon-theme when an application depends on kde-runtime
  - Add some simple filtering in the status.html page
  - Be more careful with untrusted XML data
  - Do not allow duplicates to be added when using as_app_add_kudo_kind()
  - Do not fail to build packages with invalid KDE service files
  - Record if distro metadata and screenshots are being used
  - Show any package duplicates when generating metadata
  - Show the builder progress in a ncurses-style panel


author: Richard Hughes <richard@hughsie.com> 0.2.4-1
changelog:
  - New upstream release
  - Add an installed tests to validate appdata
  - Add support for <source_pkgname> which will be in AppStream 0.8
  - Add the <dbus> provide for applications automatically
  - Do not load applications with NoDisplay=true when loading local
  - Do not pad the compressed AppStream metadata with NUL bytes
  - Do not treat app-install metadata as installed
  - Markup errors should not be fatal when assembling a store


author: Richard Hughes <richard@hughsie.com> 0.2.5-1
changelog:
  - New upstream release
  - Add check-root to appstream-util
  - Add some validation rules for metainfo files
  - Allow desktop->addon demotion with an AppData file
  - Allow different source roots to define addons
  - Do not require sentence case when validating with relaxed settings
  - Fix up legacy license IDs when tokenizing
  - Metadata licenses like 'CC0 and CC-BY-3.0' are valid content licenses
  - Never add duplicate <extends> tags


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new kudo for high contrast icons
  - A keyword search match is better than the project name
  - Allow desktop->addon demotion with an AppData file
  - Allow translated keywords
  - Conform to the actual SPDX 2.0 license expression syntax
  - Ignore AppData screenshots with xml:lang attributes
  - Metadata licenses like 'CC0 and CC-BY-3.0' are content licenses
  - Update the SPDX license list to v1.20


author: Richard Hughes <richard@hughsie.com> 0.3.1-1
changelog:
  - New upstream release
  - Add an --enable-hidpi argument to appstream-builder
  - Add AS_ICON_KIND_EMBEDDED and AS_ICON_KIND_LOCAL
  - Add more applications to the blacklist
  - Allow application with NoDisplay=true and an AppData file
  - Allow AppStream files to be upgraded using appstream-util
  - Install AppStream files with correct permissions
  - Monitor the XML and icons path for changes
  - Relax validation requirements for font metainfo files


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream release
  - Add a simple 'search' command to appstream-util
  - Add some more valid metadata licenses
  - Do not generate metadata with an icon prefix
  - Obsolete the appdata-tools package
  - Show the kudo stats on the status page


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Allow filtering addons in the status html pages
  - Detect missing parents in the old metadata
  - Do not fail to load all the desktop files if one is bad
  - Improve appdata-xml.m4 deprecation notice


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream release
  - Add more applications to the blacklist
  - Add show-search-tokens subcommand to appstream-util
  - Add some new API for gnome-software to use
  - Add the matrix-html subcommand to appstream-util
  - Add the VCS information to the AppStream metadata
  - Assume <image>foo</image> is a source image kind for AppData files
  - Assume that stock icons are available in HiDPI sizes
  - Blacklist the 40 most common search tokens
  - Check if the search entries are valid before searching
  - Check screenshots are a reasonable size
  - Fall back to the dumb tokenizer for keywords with special chars
  - Set an error if an XML file contains font markup
  - Show the offending text when validation fails


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream release
  - Add new API required for firmware support
  - Add new API required for OSTree and xdg-app support


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream release
  - Add a 'replace-screenshots' command to appstream-util
  - Always upscale screenshots if they are too small
  - Assume the INF DriverVer is UTC
  - Remove the gtk3 dep from libappstream-glib
  - Use the correct image URL for HiDPI screenshots


author: Richard Hughes <richard@hughsie.com> 0.4.0-1
changelog:
  - New upstream release
  - Add a mirror-screenshots command to appstream-util
  - Check for duplicate screenshots when adding fonts
  - Detect recolorable symbolic icons
  - Fix a crash for an invalid AppData file
  - Remove all networking support when building metadata
  - Remove overzealous blacklisting entry


author: Richard Hughes <richard@hughsie.com> 0.4.1-1
changelog:
  - New upstream release
  - Add am 'incorporate' command to appstream-util
  - Add a 'mirror-local-firmware' and 'compare' commands to appstream-util
  - Add extra flags for use when building metadata
  - Be less strict when loading incorrect AppData files
  - Do not duplicate <location> tags within a release
  - Do not expect the INF ClassGuid to be the ESRT GUID
  - Don't crash when parsing a <release> with no description
  - Update the SPDX licence list to v2.0


author: Richard Hughes <richard@hughsie.com> 0.5.0-1
changelog:
  - New upstream release
  - Add support for the flashed firmware provide kind
  - Make the DriverVer in the .inf file optional
  - Show a better error message when there's not enough text


author: Richard Hughes <richard@hughsie.com> 0.5.1-1
changelog:
  - New upstream release
  - Add a few applications that have changed desktop ID
  - Add support for release urgency
  - Do not blacklist the 'desktop' token
  - Don't show mangled version numbers as negatives
  - Ignore empty AppStream XML files
  - Support SPDX IDs with the LicenseRef prefix


author: Kalev Lember <klember@redhat.com> 0.5.1-2
changelog:
  - Backport a patch to fix icons in gnome-software for apps without AppData
  - Use license macro for COPYING


author: Richard Hughes <richard@hughsie.com> 0.5.2-1
changelog:
  - New upstream release
  - Accept a '0x' hexidecimal prefix when parsing a version
  - Add multi-guid cabinet firmware support
  - Add support for AppStream <size> metadata
  - Fix crash in validator when processing '<li></li>'
  - Remove the long-obsolete appdata-validate tool
  - Require AppData files to be present in the AppStream metadata
  - Use g_set_object() to fix potential crash when adding pixbufs


author: Richard Hughes <richard@hughsie.com> 0.5.3-1
changelog:
  - New upstream release
  - Return the correct error when the desktop file has no group
  - Strip Win32 and Linux paths when decompressing firmware


author: Richard Hughes <richard@hughsie.com> 0.5.4-1
changelog:
  - New upstream release
  - Add as_utils_version_from_uint16()
  - Generate GUID values according to RFC4122


author: Richard Hughes <richard@hughsie.com> 0.5.5-1
changelog:
  - New upstream release
  - Add as_utils_license_to_spdx()
  - Add the package name as another application search token
  - Fix a crash when tokenizing a NULL string
  - Log when we auto-add kudos or keywords
  - Support live updates


author: Richard Hughes <richard@hughsie.com> 0.5.6-1
changelog:
  - New upstream release
  - Accept various 'or later' metadata content licenses
  - Check the project_group when validating
  - Cull the application blacklist now we depend on AppData files
  - Fix things up for xdg-app use
  - Install gettext ITS rules


author: Richard Hughes <richard@hughsie.com> 0.5.8-1
changelog:
  - New upstream release
  - Add a modify command to appstream-util
  - Add support for per-user and system-wide xdg-app installed stores
  - Reject an invalid project group when parsing
  - Support multi-line copyright statements
  - Support the QT translation system
  - Support <translation> tags in AppData files


author: Richard Hughes <richard@hughsie.com> 0.5.9-1
changelog:
  - New upstream release
  - Accept FSFAP as a valid metadata license
  - Fix a validation error for metainfo files with descriptions
  - Pick up newly added appinfo dirs for xdg-app remotes
  - Update the SPDX license list


author: Richard Hughes <richard@hughsie.com> 0.5.10-1
changelog:
  - New upstream release
  - Add an application prefix to the ID for certain install scopes
  - Add a 'split-appstream' command to appstream-util
  - Add support for getting the SDK and runtime from the bundle
  - Improve the application search tokenizing and filtering
  - Load AppStream stores in a predictable order


author: Richard Hughes <richard@hughsie.com> 0.5.12-1
changelog:
  - New upstream release
  - Add a merge-appstream command to appstream-util
  - Add new API required for GNOME Software
  - Add support for content ratings
  - Split up AudioVideo into two categories


author: Richard Hughes <richard@hughsie.com> 0.5.13-1
changelog:
  - New upstream release
  - Enforce the requirement of AppData for 'Categories=DesktopSettings'
  - Also filter YAML apps before adding to the store
  - Always veto anything with X-Unity-Settings-Panel
  - Do not hardcode x86_64 when searching for xdg-app metadata
  - Support more DEP11 YAML markup


author: Richard Hughes <richard@hughsie.com> 0.5.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software 3.21
  - Add search-pkgname to appstream-cmd
  - Fall back to searching in as_store_get_app_by_pkgname()
  - Ignore desktop files with X-AppStream-Ignore
  - Search /usr/share/metainfo for local files


author: Richard Hughes <richard@hughsie.com> 0.5.15-1
changelog:
  - New upstream release
  - Add all applications for all architectures when loading Flatpak apps
  - Add new API for gnome-software
  - Ignore files with invalid suffixes when building installed stores
  - Omit timestamp from gzip compressed files
  - Rename the xdg-app support to the new name: Flatpak
  - Sort archive contents by name for repeatable results


author: Richard Hughes <richard@hughsie.com> 0.5.16-1
changelog:
  - New upstream release
  - Add elementary to list of project groups
  - Allow setting the id prefix and origin using a symlink name
  - Correctly detect new AppStream apps in new directories
  - Do not rename a category ID in AsApp
  - Load metainfo files if present
  - Never allow NULL to be added to AsApp string array


author: Richard Hughes <richard@hughsie.com> 0.5.17-1
changelog:
  - New upstream release
  - Add external (X-*) keys of an app's desktop file as metadata AsApp
  - Correct disabling of timestamps for gzip
  - Do not add multiple categories for apps with AudioVideo
  - Do not emit a warning when flatpak user directory doesn't exist
  - Fall back to the country code in as_app_get_language()
  - Use libstemmer for keyword stemming


author: Richard Hughes <richard@hughsie.com> 0.5.18-1
changelog:
  - New upstream release
  - Add Sugar as a valid desktop environment
  - Add the translate URL kind
  - Do not split up the main AudioVideo category
  - Don't redundantly monitor files
  - No validation failure for lots of releases


author: Richard Hughes <richard@hughsie.com> 0.6.1-1
changelog:
  - New upstream release
  - Add new API for latest AppStream specification level
  - Add some more validation checks for keywords
  - Add support for AppStream merge components
  - Add support for Google .PAK files
  - Allow multiple components with the same ID in the AsStore
  - Convert all current component-type names
  - Do not save the 'X-' prefixed keys to the AppStream metadata
  - Ensure predictable output order of XML attributes
  - Port away from intltool
  - Remove specific support for flatpak
  - Restrict addons to the same scope and bundle kind


author: Richard Hughes <richard@hughsie.com> 0.6.2-1
changelog:
  - New upstream release
  - Add API for gnome-software
  - Do not merge all LangPack entries
  - Do not require an icon from LOCALIZATION kind
  - Do not use the prefix check when parsing YAML
  - Ignore system datadirs that are actually per-user
  - Invalidate the unique-id if any of the parts are changed
  - Make upgrade check for SPDX license string
  - Pay attention to errors from libyaml


author: Richard Hughes <richard@hughsie.com> 0.6.3-1
changelog:
  - New upstream release
  - Add a component kind of 'driver'
  - Add an easy way to add a language to an existing file
  - Add an easy way to add a modalias to an existing file
  - Support components with merge=replace rules


author: Richard Hughes <richard@hughsie.com> 0.6.4-1
changelog:
  - New upstream release
  - Add more API used by gnome-software master branch
  - Add support for AppImage bundles
  - Don't show a critical warning on invalid yaml file
  - Fix a small memory leak when parsing yaml files
  - Fix building metadata on repos with mixed architecture content
  - Fix setting the origin for Flatpak user repos
  - Fix the CSM rating age calculation
  - Never inhierit Name and Comment when using appstream-compose


author: Richard Hughes <richard@hughsie.com> 0.6.5-1
changelog:
  - New upstream release
  - Add app-removed, app-added and app-changed signals to AsStore
  - Add a 'watch' command to appstream-util
  - Allow only loading native languages when parsing AppStream
  - Allow the client to control what search fields are indexed
  - Always copy the state when replacing AppData with AppStream
  - Do not sent a REMOVED signal when deleting a transient temp file
  - Ensure the component scope is set when loading yaml files
  - Handle files being moved into monitored AppStream directories
  - Load the search token blacklist into a hash table
  - Monitor missing AppStream directories
  - Only transliterate when the locale requires it
  - Process file changes when an attribute changes


author: Richard Hughes <richard@hughsie.com> 0.6.6-1
changelog:
  - New upstream release
  - Add Geary to the app id fallbacks
  - Deduplicate the AsNode attribute key and value using a hash table
  - Detect invalid files in the libyaml read handler
  - Do not absorb core addons into the main application
  - Do not add <kudos>, <languages>, <provides> or <releases> for addons
  - Do not save the attributes if the node or parent node is ignored
  - Set a better icon for codecs


author: Richard Hughes <richard@hughsie.com> 0.6.7-1
changelog:
  - New upstream release
  - Add AsRequire as a way to store runtime requirements
  - Add support for "+" at the end of SPDX license identifiers
  - Allow loading application XPM icons
  - Fix a crash when using as_release_get_location_default()
  - Fix dep extraction when multiple versions are available
  - Only fail to validate <icon> in AppData desktop components
  - Scan /usr/share/metainfo as well when building appstream-data
  - Update the SPDX licence list to v2.5


author: Richard Hughes <richard@hughsie.com> 0.6.9-1
changelog:
  - New upstream release
  - Do not set the AsApp state using the AsRelease state
  - Fail to validate if any release is in the future or in the wrong order


author: Richard Hughes <richard@hughsie.com> 0.6.11-1
changelog:
  - New upstream release
  - Add initial support for Mozilla .xpi translations
  - Fix a problem with appstream-compose with older AppData files
  - Make content_rating required for any component with a 'Game' category
  - Parse small version numbers correctly
  - Show a warning if a desktop file is not found when required


author: Richard Hughes <richard@hughsie.com> 0.6.12-1
changelog:
  - New upstream release
  - Validate kudos in AppData and AppStream files
  - Copy hash table keys to avoid a common crash on Ubuntu
  - Fix the predicate comparison when using globs in metainfo files


author: Richard Hughes <richard@hughsie.com> 0.6.13-1
changelog:
  - New upstream release
  - Add a 'check-component' command to appstream-util
  - Add new API for gnome-software and fwupd
  - Add support for icon scaling and <launchable>
  - Allow using the app origin as a search keyword
  - Casefold all stemmed entries
  - Support non-numeric version numbers correctly


author: Richard Hughes <richard@hughsie.com> 0.7.0-1
changelog:
  - New upstream release
  - Add the limits in the validation output messages
  - Do not enforce that the project is a valid environment_id
  - Don't cast gsize to guint32 when getting file length
  - Remove the cache-id functionality
  - Show a warning if adding keywords after the cache creation
  - Switch to the meson build system


author: Richard Hughes <richard@hughsie.com> 0.7.1-1
changelog:
  - New upstream release
  - Add <id> kinds for application provides
  - Fail to validate if AppData screenshots are duplicated
  - Install appdata-xml.m4
  - Skip loading desktop data from Snap directory
  - Update the SPDX license list to 2.6
  - Validate the <id> format according to the spec


author: Richard Hughes <richard@hughsie.com> 0.7.2-1
changelog:
  - New upstream release
  - Allow remote icon types for desktop AppData files
  - Do not check the suffix of <id> tags
  - Prefer /usr/share/metainfo as default path for metainfo files


author: Richard Hughes <richard@hughsie.com> 0.7.3-1
changelog:
  - New upstream release
  - Add new API required by fwupd
  - Do not assign "flatpak" as an app's origin when no origin was found
  - Fix the inode mode to be sane on extracted files
  - Prefer /usr/share/metainfo as default path for metainfo files
  - Write XML for newer AppStream specification versions


author: Richard Hughes <richard@hughsie.com> 0.7.5-1
changelog:
  - New upstream release
  - Add more GObject Introspection annotations for Python
  - Do not try to extract duplicate files in the icon theme packages
  - Don't expect an enum when really passing a bitfield
  - Fix a crash when calling as_release_add_location() directly
  - Fix appstream-compose when using new-style desktop IDs
  - Fix compile with GCab v1.0
  - Fix the arithmetic when fitting an image in 16:9
  - Generate icons and samples for emoji fonts
  - Never change the default screenshot when processing AppData
  - Support OARS v1.1 additions
  - Use pngquant to make the application icons take up less space


author: Richard Hughes <richard@hughsie.com> 0.7.7-1
changelog:
  - New upstream release
  - Add custom metadata key for shell extension uuid
  - Always resize AppStream icons to fit the destination size
  - Correctly validate files using OR in the metadata_license
  - Do not fail to validate if the timestamps are out of order
  - Don't abort the build if pngquant fails
  - Update the SPDX license list to v3.0


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Rex Dieter <rexdieter[AT]users.sf.net> - 0.6.7-0.fdr.2
changelog:
  - remove "We decided..." part of description
  - remove hard-coded .gz info references
  - Req(preun)->Preq(postun): /sbin/install-info


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (ifarch rather than ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - upgrade to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog
  - fix #545147 - util-linux-ng : Violation of the Packaging Guidelines
    (remove uuid and blkid static libs)


author: Karel Zak <kzak@redhat.com> 2.17-2
changelog:
  - remove Provides: lib{uuid,blkid}-static (thanks to Michael Schwendt)
  - remove useless URL to sf.net


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to the final 2.17.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - fix #581252 - remounting tmpfs fails because of hidden rootcontext=
  - fix #580296 - "rtcwake" does miss the "off" option
  - fix #575734 - use microsecond resolution for blkid cache entries
  - upgrade to the bugfix release 2.17.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - minor fixed in spec file


author: Karel Zak <kzak@redhat.com> 2.18-0.1
changelog:
  - upgrade to the release 2.18-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-0.2
changelog:
  - upgrade to 2.18-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-1
changelog:
  - upgrade to the final 2.18
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.18-2
changelog:
  - fix #615719 - tmpfs mount fails with 'user' option.
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work
  - fix #618957 - ISO images listed in fstab are mounted twice at boot


author: Karel Zak <kzak@redhat.com> 2.19-0.1
changelog:
  - upgrade to the release 2.19-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19-0.3
changelog:
  - upgrade to the release 2.19-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc2-ChangeLog
  - fix #671893 - SELinux is preventing /bin/chown from 'setattr' accesses
    on the file mounts.


author: Karel Zak <kzak@redhat.com> 2.19-0.4
changelog:
  - upgrade to the release 2.19-rc3
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc3-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19-1
changelog:
  - upgrade to the release 2.19
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes
  - remove /sbin/mount.tmpfs -- integrated to mount(8)


author: Karel Zak <kzak@redhat.com> 2.19.1-0.1
changelog:
  - upgrade to the release 2.19.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19.1-1
changelog:
  - upgrade to the release 2.19.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19.1-2
changelog:
  - fix #716483 - /var/tmp --(BIND-mounted)--> /tmp disrupts/hangs bootup
  - fix #709681 - failure to mount if a mount point ends with a slash in /etc/fstab
  - fix #709319 - 'mount -a' mounts already mounted directories
  - fix kernel version parsing


author: Karel Zak <kzak@redhat.com> 2.20-0.1
changelog:
  - upgrade to the release 2.20-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.20-0.2
changelog:
  - upgrade to the release 2.20-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.21-0.1
changelog:
  - upgrade to the release 2.21-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.21/v2.21-ReleaseNotes
  - add {fsck,mkfs}.minix
  - add new command chcpu(8)
  - add new command prlimit(1)
  - enable raw(8) command
  - move 60-raw.rules from /etc from /usr/lib/udev/rules.d
  - move blkid cache from etc to /run/blkid


author: Karel Zak <kzak@redhat.com> 2.21.2-1
changelog:
  - upgrade to bugfix release 2.21.2
  - fix #814699 - namei(1) incorrectly resolves relative symlinks
  - fix #820707 - Impossible to unmount nfsv4/krb5 mounts after network disconnect
  - fix #816877 - libmount does not close device fd before mount(2)
  - fix #822705 - unable to login after installing


author: Karel Zak <kzak@redhat.com> 2.22-0.1
changelog:
  - upgrade to the release 2.22-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes
  - add sulogin, utmpdump, lslocks, wdctl


author: Karel Zak <kzak@redhat.com> 2.22-1
changelog:
  - upgrade to the release 2.22
  - enable eject(1) from util-linux, obsolete original eject package
  - fix #853164 - setuid program should have full RELRO
  - fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV


author: Karel Zak <kzak@redhat.com> 2.22.2-3
changelog:
  - fix #882305 - agetty: unstable /dev/tty* permissions
  - fix #885314 - hexdump segfault
  - fix #896447 - No newlines in piped "cal" command
  - fix libblkid cache usage (upstream patch)
  - fix #905008 - uuidd: /usr/sbin/uuidd has incorrect file permissions


author: Karel Zak <kzak@redhat.com> 2.23-0.1
changelog:
  - upgrade to the release 2.23-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23-ReleaseNotes
  - add nsenter and blkdiscard
  - remove tunelp


author: Karel Zak <kzak@redhat.com> 2.23.2-1
changelog:
  - upgrade to stable release 2.23.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.23.2-3
changelog:
  - refresh and rename patches
  - fix #987787 - Remove lastlogin from su
  - fix #950497 - problem umounting loop device
  - fix #921498 - multiple internal testsuite failures


author: Karel Zak <kzak@redhat.com> 2.23.2-4
changelog:
  - fix #1005566 - recount_geometry: Process /usr/sbin/fdisk was killed by signal 8 (SIGFPE)
  - fix #1005194 - su generates incorrect log entries


author: Karel Zak <kzak@redhat.com> 2.24-1
changelog:
  - upgrade to upstream release v2.24
  - remove nologin (merged upstream)
  - fix #1022217 - fdisk mishandles GPT corruption


author: Karel Zak <kzak@redhat.com> 2.24.1-1
changelog:
  - upgrade to stable release 2.24.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.24/v2.24.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.24.2-1
changelog:
  - upgrade to stable release 2.24.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.24/v2.24.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25-0.1
changelog:
  - upgrade to release 2.25-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.1-0.1
changelog:
  - upgrade to release 2.25.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.1-1
changelog:
  - upgrade to stable 2.25.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.2-1
changelog:
  - upgrade to stable 2.25.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.26-0.1
changelog:
  - upgrade to 2.26-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.26/v2.26-ReleaseNotes
  - build with -pie for uuidd
  - new command zramctl


author: Karel Zak <kzak@redhat.com> - 2.26.2-1
changelog:
  - upgrade to stable release 2.26.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.26/v2.26.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.27-0.1
changelog:
  - upgrade to v2.27-rc1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes
  - add lsipc


author: Karel Zak <kzak@redhat.com> - 2.27-0.2
changelog:
  - fix #1251320 - rfe: please change login to not add /bin:/sbin to $PATH
  - apply patches from Lokesh Mandvekar to make spec file more portable


author: Karel Zak <kzak@redhat.com> - 2.28-0.1
changelog:
  - upgrade to v2.28-rc1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes
  - add patch to fix broken swapon
  - add subpackage util-linux-user (utils with dependence on libuser)


author: Karel Zak <kzak@redhat.com> - 2.28.1-1
changelog:
  - upgrade to stable 2.28.1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.28.2-1
changelog:
  - upgrade to stable 2.28.2
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-6
changelog:
  - Fix sys/capabilities.h header (#55727)
  - Move to /lib, some applications seem to be using this rather early
    (#55733)


author: Jakub Jelinek <jakub@redhat.com> 1.10-12
changelog:
  - CFLAGS was using COPTFLAG variable, not COPTFLAGS
  - build with -fpic
  - apply the IA-64 patch everywhere, use capget/capset from glibc,
    not directly as _syscall (as it is broken on IA-32 with -fpic)
  - reenable alpha


author: Mike A. Harris <mharris@redhat.com> 1.10-13
changelog:
  - Removed %name macro sillyness from package Summary, description text, etc.
  - Removed archaic Prefix: tag
  - lib64 fixes everywhere to use _lib, _libdir, etc
  - Removed deletion of RPM_BUILD_DIR from %clean section
  - Added -q flag to setup macro
  - Severely cleaned up spec file, and removed usage of perl


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Kyle McMartin <kyle@redhat.com> 0.7.4-5
changelog:
  - Clamp CAP_LAST_CAP at /proc/sys/kernel/cap_last_cap's value in the
    Python bindings test if possible, otherwise use the value from
    <linux/capability.h> since the kernel now has 37 capabilities upstream,
    but our builders are not that up to date.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36.2-1
changelog:
  - Update to 0.36.2, fixing packaging the libraries (#605434)
  - Remove the dependency on redhat-lsb (#603578)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1
changelog:
  - Update to 0.37
  - use /sys/fs/cgroup as default directory to mount control groups (and rely on
    systemd mounting tmpfs there)


author: Jan Safranek <jsafrane@redhat.com> 0.37.1-4
changelog:
  - fixed cgconfig service not to unmount stuff it did not mount
  - added better sample cgconfig.conf file to reflect systemd
    mounting all controllers during boot (#702111)


author: Peter Schiffer <pschiffe@redhat.com> - 0.38-3
changelog:
  - resolves: #850183
    scriptlets replaced with new systemd macros (thanks to vpavlin)
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> 0.41-1
changelog:
  - resolves: #966008
    updated to 0.41
  - removed deprecated cgred service
    please use Control Group Interface in Systemd instead


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: Jindrich Luza <jluza@redhat.com> 0.1.2
changelog:
  - automatic changelog system
  - fixed issue #14
  - libcomps.Dict is now behave more like python dict. Implemented iter(libcomps.Dict)
  - libcomps.iteritems() and libcomps.itervalues()
  - remaked error reporting system.
  -     libcomps.Comps.fromxml_f and libcomps.Comps.fromxml_str now return
  -     -1, 0 or 1. 0 means parse procedure completed without any problem,
  -     1 means there's some errors or warnings but not fatal. -1 indicates
  -     fatal error problem (some results maybe given, but probably incomplete
  -     and invalid)
  - errors catched during parsing can be obtained by calling
  -     libcomps.Comps.get_last_parse_errors
  - all log is given by
  -     libcomps.Comps.get_last_parse_log
  - prop system complete
  - fixed issue 1
  - fixed issue 3
  - added <packagereq requires=...> support
  - new prop system in progress....
  - separated doc package
  - some minor fixes in CMakeFiles
  - improved integrated tests


author: Jindrich Luza <jluza@redhat.com> 0.1.3
changelog:
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log


author: Jindrich Luza <jluza@redhat.com> 0.1.4
changelog:
  - added missing files
  - architectural redesign finished
  - fixed #1003986 by Gustavo Luiz Duarte guidelines (but not tested on ppc)
  - fixed bug #1000449
  - fixed bug #1000442
  - added GroupId.default test
  - some minor unreported bugs discovered during testing fixed
  - finished default attribute support in groupid object
  - Comps.get_last_parse_errors and Comps.get_last_parse_log has been renamed
  -   as Comps.get_last_errors and Comps.get_last_log
  - version bumped. Python bindings is now easier.
  - added missing files


author: Jindrich Luza <jluza@redhat.com> 0.1.5
changelog:
  - version bump
  - PyCOMPS_Sequence.__getitem__["objectid"] implemented for libcomps.GroupList, libcomps.CategoryList, libcomps.EnvList
  - added missing files
  - missing display_order fix for libcomps.Environment


author: Jindrich Luza <jluza@redhat.com> 0.1.4-4
changelog:
  - group.uservisible is true by default now.
  - fixed comps_mobjradix parent node problem
  - implemented bindings for blacklist, whiteout and langpacks
  - COMPS_Logger redesigned


author: Jindrich Luza <jluza@redhat.com> 0.1.6
changelog:
  - version bumped
  - added libcomps.MDict.keys()
  -         libcomps.MDict.values()
  -         libcomps.MDict.items()
  -         libcomps.MDict.clear()
  -         libcomps.MDict.update()
  -         libcomps.MDict.copy()
  - COMPS_List replaced with COMPS_HSList
  - added missing basearchonly to DocGroupPackage
  - python3/CMakeLists.txt fixed
  - added explicit attributes support for xml options
  - added arch_filter test for python
  - insert method in libcomps.Sequence
  - Unioning is now accomplished with replace x append policy
  - Weaker package equality check (comparing only name now)
  - Fixed leeks in unioning
  - modified test_merge_comps test_libcomps
  - dictionaries are now storing keys in alphabetical order
  - comps parser redesigned
  - change python/tests directory composition
  - added elem attributes check in parser
  - xml output '_arch' attribute support
  - parser and xml output defaults options for specify defaults values
  - comps object validation in python
  - added validity checker before append/set object to list (python only)
  - .validate() method
  - added libcomps.Dict.keys
  -         libcomps.Dict.values
  -         libcomps.Dict.items
  -         libcomps.Dict.clear
  -         libcomps.Dict.update
  -         libcomps.Dict.copy
  - added xml output options (comps.xml_str([options = {}]), comps.xml_f(options = {}))


author: Jindrich Luza <jluza@redhat.com> 0.1.7
changelog:
  - added langpacks to union process
  - comps DOCTYPE read-write-read fix
  - support biarchonly attribute
  - fixed rhbz#1073885 rhbz#1073890 rhbz#1073907 rhbz#1073979
  - fix rhbz#1073079
  - comps_*_match() now support fnmatching
  - added libpycomps.MATCH_IGNORECASE as matching flag
  - added group.packages_match
  - added comps.groups_match, comps.categories_match, comps.entironments_match
  - PyCOMPS_Package hash
  - cmake-2.6, python-2.6, RHEL-6 compatible
  - '_arch' attribute change to 'arch'
  - empty 'arch' attribute will be ommited from output from now


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Aaron Bennett <aaron.bennett@olin.edu> 0:0.6-0.fdr.4
changelog:
  - Added post and postun scripts to run ldconfig
  - changed group to standard System/Libraries group
  - removed libtool *.la files


author: Jindrich Novy <jnovy@redhat.com> 5.0.21-0.2
changelog:
  - remove C# documentation
  - disable/remove rpath
  - fix description
  - tighten dependencies
  - run ldconfig for cxx and sql subpackages


author: Jindrich Novy <jnovy@redhat.com> 5.1.19-1
changelog:
  - update to 5.1.19
  - rename -devel-static to -static subpackage (#617800)
  - build java on all arches


author: Jindrich Novy <jnovy@redhat.com> 5.2.36-1
changelog:
  - update to 5.2.36,
    http://download.oracle.com/otndocs/products/berkeleydb/html/changelog_5_2.html#id3647664


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-21
changelog:
  - Reintroduce upstream patch for rhbz#1394862
  - Do not rebuild rpm's environment during a rpm transaction


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Reintroduce patches removed in 5.3.28-22
  - Modify upstream patch to fail on pthread version mismatch (#1460003)


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Try looking at env lock via /proc/locks during env_attach (#1460003)
  - Check rpm's transaction lock via /proc/locks
  - Do not access DB_CONFIG when db_home is not set (#1464033)


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Daniel Mach <dmach@redhat.com> - 0.16.1-1
changelog:
  - [module] Implement 'module_hotfixes' conf option to skip filtering RPMs from hotfix repos.
  - [goal] Fix distupgrade filter, allow downgrades.
  - [context] Allow to set module platform in context.
  - [module] Introduce proper modular dependency solving.
  - [module] Platform pseudo-module based on /etc/os-release.
  - [goal] Add Goal::listSuggested().
  - [l10n] Support for translations, add gettext build dependency.


author: Daniel Mach <dmach@redhat.com> - 0.17.0-1
changelog:
  - [conf] Add module_platform_id option.
  - [module] Add ModulePackageContainer class.
  - [module] Add ModulePersistor class.
  - [sack] Module filtering made available in python API
  - [sack] Module auto-enabling according to installed packages


author: Daniel Mach <dmach@redhat.com> - 0.17.1-1
changelog:
  - [module] Solve a problem in python constructor of NSVCAP if no version.
  - [translations] Update translations from zanata.
  - [transaction] Fix crash after using dnf.comps.CompsQuery and forking the process in Anaconda.
  - [module] Support for resetting module state.
  - [output] Introduce wrapper for smartcols.


author: Daniel Mach <dmach@redhat.com> - 0.17.2-2
changelog:
  - [module] Create /etc/dnf/modules.d if it doesn't exist.
  - [module] Forward C++ exceptions to bindings.


author: Daniel Mach <dmach@redhat.com> - 0.18.0-1
changelog:
  - [repo] Implement GPG key import
  - [repo] Introduce Repo class replacing dnf.repo.Repo
  - [context] Fix memory corruption in dnf_context
  - [rhsm] Fix: RHSM don't write .repo file with same content (RhBug:1600452)
  - [module] Create /etc/dnf/modules.d if it doesn't exist.
  - [module] Forward C++ exceptions to bindings.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.19.0-1
changelog:
  - [query] Reldeps can contain a space char (RhBug:1612462)
  - [transaction] Avoid adding duplicates via Transaction::addItem()
  - Fix compilation errors on gcc-4.8.5
  - [module] Make available ModuleProfile using SWIG
  - [module] Redesign module disable and reset


author: Jaroslav Mracek <jmracek@redhat.com> - 0.19.1-1
changelog:
  - Fix compilation errors on gcc-4.8.5
  - [module] Allow module queries on disabled modules (RhBug:1627081)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.20.0-1
changelog:
  - [module] Report module solver errors
  - [module] Enhance module commands and errors
  - [transaction] Fixed several problems with SWDB
  - Remove unneeded regex URL tests (RhBug:1598336)
  - Allow quoted values in ini files (RhBug:1624056)
  - Filter out not unique set of solver problems (RhBug:1564369)
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - bug 1605274 - DNF crashes on * in installation repository URL
  - Resolves: rhbz#1623383 - dnf.exceptions.ConfigError: Error parsing ...


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-1
changelog:
  - Fix segfault in repo_internalize_trigger (RhBug:1375895)
  - Change sorting of installonly packages (RhBug:1627685)
  - [swdb] Fixed pattern searching in history db (RhBug:1635542)
  - Check correctly gpg for repomd when refresh is used (RhBug:1636743)
  - [conf] Provide additional VectorString methods for compatibility with Python list.
  - [plugins] add plugin loading and hooks into libdnf


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-2
changelog:
  - Add patch Modify-solver_describe_decision-to-report-cleaned-RhBug1486749
  - Add patch swdb-create-persistent-WAL-files-RhBug1640235
  - Add patch Relocate-ModuleContainer-save-hook-RhBug1632518
  - Add patch Test-if-sack-is-present-and-run-save-module-persistor-RhBug1632518


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.3-1
changelog:
  - Permanently disable Python2 build for Fedora 30+
  - Update to 0.22.3
  - Modify solver_describe_decision to report cleaned (RhBug:1486749)
  - [swdb] create persistent WAL files (RhBug:1640235)
  - Relocate ModuleContainer save hook (RhBug:1632518)
  - [transaction] Fix transaction item lookup for obsoleted packages (RhBug: 1642796)
  - Fix memory leaks and memory allocations
  - [repo] Possibility to extend downloaded repository metadata


author: Daniel Mach <dmach@redhat.com> - 0.22.4-1
changelog:
  - Enhance LIBDNF plugins support
  - [repo] Check whether metadata cache is expired (RhBug:1539620,1648274)
  - [sack] Implement dnf_sack_get_rpmdb_version()


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.33.0-1
changelog:
  - Update to 0.33.0
  - Enhance sorting for module list (RhBug:1590358)
  - [DnfRepo] Add methods for alternative repository metadata type and download (RhBug:1656314)
  - Remove installed profile on module enable or disable (RhBug:1653623)
  - Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  - Add support of wild cards for modules (RhBug:1644588)
  - Exclude module pkgs that have conflict
  - Enhance config parser to preserve order of data, and keep comments and format
  - Improve ARM detection
  - Add support for SHA-384
  - Return empty query if incorrect reldep (RhBug:1687135)
  - ConfigParser: Improve compatibility with Python ConfigParser and dnf-plugin-spacewalk (RhBug:1692044)
  - ConfigParser: Unify default set of string represenation of boolean values
  - Fix segfault when interrupting dnf process (RhBug:1610456)
  - Installroot now requires absolute path
  - Support "_none_" value for repo option "proxy" (RhBug:1680272)
  - Add support for Module advisories
  - Add support for xml:base attribute from primary.xml (RhBug:1691315)
  - Improve detection of Platform ID (RhBug:1688462)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Skip invalid key files in "/etc/pki/rpm-gpg" with warning (RhBug:1644040)
  - Enable timestamp preserving for downloaded data (RhBug:1688537)
  - Fix 'database is locked' error (RhBug:1631533)
  - Replace the 'Failed to synchronize cache' message (RhBug:1712055)
  - Fix 'no such table: main.trans_cmdline' error (RhBug:1596540)
  - Fix: skip_if_unavailable=true for local repositories (RhBug:1716313)
  - Add support of modular FailSafe (RhBug:1623128)
  - Add support of DNF main config file in context; used by PackageKit and
    microdnf (RhBug:1689331)
  - Exit gpg-agent after repokey import (RhBug:1650266)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-4
changelog:
  - Fix typo in error message (RhBug:1726661)
  - Update localizations from zanata (RhBug:1689991)
  - Don't disable nonexistent but required repositories (RhBug:1689331)
  - Ignore trailing blank lines of multiline value (RhBug:1722493)
  - Re-size includes map before re-computation (RhBug:1725213)


author: Ales Matej <amatej@redhat.com> - 0.35.5-1
changelog:
  - Update to 0.35.5
  - Make libdnf own its plugin directory (RhBug:1714265)
  - Set priority of dnf.conf.d drop-ins
  - Fix toString() to not insert [] (RhBug:1584442)
  - Fix handling large number of filenames on input (RhBug:1690915)
  - Detect armv7 with crypto extension only on arm version >= 8
  - A new standardized User-Agent field consisting of the libdnf and OS version
    (including the variant) (RhBug:1156007)
  - Add basic countme support (RhBug:1647454)
  - Fix crash in PackageKit (RhBug:1636803)
  - Do not create @System.solv files (RhBug:1707995)
  - Set LRO_CACHEDIR so zchunk works again (RhBug:1739867)
  - Improve detection of extras packages by comparing (name, arch) pair instead
    of full NEVRA (RhBuh:1684517)
  - Improve handling multilib packages in the history command (RhBug:1728637)
  - Repo download: use full error description into the exception text (RhBug:1741442)
  - Properly close hawkey.log (RhBug:1594016)
  - Fix dnf updateinfo --update to not list advisories for packages updatable
    only from non-enabled modules
  - Apply modular filtering by package name (RhBug:1702729)


author: Ales Matej <amatej@redhat.com> - 0.38.1-1
changelog:
  - Update to 0.38.1
  - Change the best option default to false
  - Use more descriptive message when failed to retrieve GPG key (RhBug:1605117)
  - Add removeMetadataTypeFromDownload function to the API
  - Context part of libdnf can now read vars (urlvars) from dirs and environment
  - Throw exception immediately if file cannot be opened
  - Add test when there is no primary metadata in compatible format (RhBug:1744960)
  - Various improvements to countme features
  - Don't abort on rpmdb checksum calculation failure
  - Enable module dependency trees when using set_modules_enabled_by_pkgset() (RhBug:1762314)
  - Resolve problem with --best and search in provides (RhBug:1737469)
  - New method "Query::filterSubject()", replaces Solution::getBestSolution()
  - The Solution class was removed
  - Add query argument into get_best_query and get_best_solution
  - Add module reset function into dnf_context
  - Add method to get all repository metadata locations
  - Catch NoModuleException in case of not existent value was used in persistor (RhBug:1761773)


author: Ales Matej <amatej@redhat.com> - 0.39.1-1
changelog:
  - Update to 0.39.1
  - Report reason how package was excluded (RhBug:1649754)
  - Additional Arm detection improvements (RhBug:1691430)
  - Set skip_if_unavailable for media repos to skip their update (RhBug:1716067)
  - Add support of xml:base for remote and local url in context (RhBug:1734350,1717865)


author: Ales Matej <amatej@redhat.com> - 0.39.1-3
changelog:
  - Add two new query filters: obsoletes_by_priority, upgrades_by_priority (RhBug:1769466)
  - [context] Add wildcard support in dnf_context_repo_set_data (RhBug:1781420)
  - Remove killGpgAgent function (RhBug:1781601)


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Allow excluding packages with "excludepkgs" and globs
  - Make parsing of reldeps more strict (RhBug:1788107)
  - Add expanding solvable provides for dependency matching (RhBug:1534123)
  - DnfRepo: fix module_hotfixes keyfile priority level
  - Add custom exceptions to libdnf interface
  - Port to libmodulemd-2 API (RhBug:1693683)
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug:1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add setter for running kernel protection setting
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Config options: only first empty value clears existing (RhBug:1788154)
  - [conf] Set useful default colors when color is enabled
  - [context] Use installonly_limit from global config (RhBug:1256108)
  - [context] Add API to get/set "install_weak_deps"
  - [context] Adds support for includepkgs in repository configuration.
  - [context] Adds support for excludepkgs, exclude, includepkgs, and disable_excludes in main configuration.
  - [context] Added function dnf_transaction_set_dont_solve_goal
  - [context] Added functions dnf_context_get/set_config_file_path
  - [context] Respect "plugins" global conf value
  - [context] Add API to disable/enable plugins
  - [context] Create new repo instead of reusing old one (RhBug:1795004)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path
  - [context] Support repositories defined in main configuration file


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.48.0-3
changelog:
  - Add log file level main config option (RhBug:1802074)
  - Accept '==' as an operator in reldeps (RhBug:1847946)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Kamil Dudka <kdudka@redhat.com> 3.0-2.20090923cvs
changelog:
  - eliminated compile-time warnings
  - fix to not break the read loop on SIGWINCH, patch contributed
    by Edward Sheldrake (#575383)


author: Jerry James <loganjerry@gmail.com> - 3.0-3.20110227cvs
changelog:
  - Update to 3.0 (20110227 snap)
  - Drop upstreamed -sigwinch patch
  - Preserve ChangeLog timestamp when converting to UTF-8
  - Fix "unused direct shared library dependency" warning from rpmlint
  - Don't BR gawk; it is on the exceptions list


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Boris Ranto <branto@redhat.com> - 3.1-12.20150325cvs
changelog:
  - Rebase to latest upstream version
  - We no longer need the patch to not ignore extchars on utf8 charset -- the patch was merged upstream


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Steve Dickson <steved@redhat.com> 1.3b-1
changelog:
  - Updated to latest upstream version 1.3b
  - Incorporated Merge Review comments (bz 226002)
  - Increased the polling timeout (bz 204990)


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.21-4
changelog:
  - Fix -doc package for F20 UnversionedDocDirs (#993956)
  - Add missing directory /usr/include/event2
  - Fix directory ownership in -doc package
  - Correct summary and description of -devel and -doc packages
  - Set -doc package Group tag to "Documentation"
  - Add %?_isa to -devel package base dependency
  - Remove %defattr


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Dennis Gilmore <dennis@ausil.us> - 3.0.10-3
changelog:
  - drop back to 3.0.10, 3.0.11 was never pushed anywhere as the soname bump broke buildroots
  - as 3.0.11 never went out no epoch needed.


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-3
changelog:
  - add back the nistp521r1 EC curve
  - fix a bug in the Whirlpool hash implementation
  - speed up the PBKDF2 computation


author: Tomáš Mráz <tmraz@redhat.com> 1.6.1-1
changelog:
  - new upstream version breaking ABI compatibility
  - this release temporarily includes old compatibility .so


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-3
changelog:
  - Disable rijndael, cast5, camellia ARM assembly, as it's non-PIC as
    presently written, which results in .text relocations in the shared
    library. (rhbz#1069792)


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-4
changelog:
  - Re-enable below algos, apply patch from upstream list to make
    that code -fPIC friendly. (rhbz#1069792)


author: Tomáš Mráz <tmraz@redhat.com> 1.6.3-3
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap) (#1204517)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-3
changelog:
  - give gpg-error-config libdir=@exec_prefix@/lib instead of @libdir@, so that
    it agrees on 32- and 64-bit arches (it suppresses the -L argument if @libdir@
    is /usr/lib, so this should be cleaner than adding a non-standard .pc file
    which upstream developers might inadvertently think they can depend to be on
    every system which provides this library)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream version
  - Use the native hotplug support in libusb 1.0.19
  - Fix a crash where libusb_get_pollfds() is unavailable


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream version
  - Always set a device platform ID
  - Ignore 'unsupported' as a return value for kernel drivers


author: Richard Hughes <richard@hughsie.com> 0.2.4-1
changelog:
  - New upstream version
  - Add new API for various client programs
  - Don't filter out hub devices when getting the device list
  - Make the platform ID persistent across re-plug


author: Richard Hughes <richard@hughsie.com> 0.2.5-1
changelog:
  - New upstream version
  - Add g_usb_device_get_custom_index()
  - Allow setting the GMainContext when used for sync methods
  - Use symbol versioning


author: Richard Hughes <richard@hughsie.com> 0.2.7-1
changelog:
  - New upstream version
  - Add missing element-type annotations
  - Support g_autoptr() for all gusb object types


author: Richard Hughes <richard@hughsie.com> 0.2.8-1
changelog:
  - New upstream version
  - Add a PERMISSION_DENIED error enum
  - Add a thin glib wrapper around a libusb_interface_descriptor
  - Ignore the not-found error when resetting a device


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Steve Fox <drfickle@k-lug.org> - 0.20060706-2
changelog:
  - Fix the Makefile so that the ld.hugetlbfs script doesn't store the
    DESTDIR in the path to the ldscripts dir


author: Eric Munson <ebmunson@us.ibm.com> 2.1-1
changelog:
  - Updating for libhuge-2.1 release
  - Adding -devel and -utils subpackages for various utilities
    and devel files.


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Kyle McMartin <kyle@fedoraproject.org> - 2.17-1
changelog:
  - Update for upstream 2.17 release (adds AArch64 support)
  - update libhugetlbfs-2.16-s390.patch for 2.17 changes to Makefile
  - add libhugetlbfs-2.17-ppc.patch to fix powerpc{,64}


author: Rafael Aquini <aquini@redhat.com> - 2.20-10
changelog:
  - Fix up annocheck distro flag failures (1624131)
  - Convert libhugetlbfs run_tests.py to Python3 (1620250)


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Jakub 'Livio' Rusinek <jakub.rusinek@gmail.com> - 0.27-2
changelog:
  - Source... Changed
  - Debug information in libical main package... Excluded
  - Non-numbered .so files in libical main package... Moved
  - libical-devel documentation... Added


author: Debarshi Ray <rishi@fedoraproject.org> - 0.30-4
changelog:
  - Changed value of License according to Fedora licensing guidelines.
  - Enabled reentrant system calls and C++ bindings.
  - Omitted unused direct shared library dependencies.
  - Added ChangeLog, COPYING, LICENSE, NEWS and README to doc and dropped
    examples.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Milan Crha <mcrha@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Remove patch for RH bug #1176204 (fixed upstream)
  - Add patch to fix ARM build break


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.1
changelog:
  - Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z]
  - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z]
  - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z]
  - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z]
  - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.2
changelog:
  - Resolves: rhbz#1985456 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.3
changelog:
  - Move libraries to /%{_lib} instead of %{_libdir}, which is useful
    during boot when the library might be needed before a potentially
    seperate /usr partition is mounted


author: Björn Esser <besser82@fedoraproject.org> - 1.0.3-0.8
changelog:
  - Move the kcapi-hasher binary to -replacements package, since it is
    not of much use without the linked invocation names and saves the
    extra Requires on the -tools package


author: Björn Esser <besser82@fedoraproject.org> - 1.0.3-2
changelog:
  - Decrease optmem_max preset to 40960
  - Let the build fail, if the minimum kernel version cannot be met
  - Conditionalize the sysctl.d tweak on version of the kernel
  - Conditionalize the name of README.distro on the distro


author: Björn Esser <besser82@fedoraproject.org> - 1.0.3-10
changelog:
  - Replace single patches with a monolitic one from upstream
  - Obsolete replacements subpackage
  - Ignore failing tests on %{power64} temporarily


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.0-5
changelog:
  - Skip CLang static analysis in RHEL
  - Revert "Skip CLang static analysis in RHEL"
  - Use own sha512hmac and fipscheck


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-7_1
changelog:
  - [RHEL] Sync with the Fedora branch
  - [RHEL] Fixup specfile
  - [RHEL] Rebase the disable-AEAD-tests patch


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-8
changelog:
  - Add more Coverity fixes from upstream
  - Add patch to fix AEAD fuzz test for BE arches
  - Fixup specfile


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Rex Dieter <rexdieter[AT]users.sf.net> 0.9.11-2
changelog:
  - revert to 0.9.11 (0.9.12 makes gnupg2 fail on x86_64) using Obsoletes
    to avoid Epoch or other ugly means.


author: Alejandro Alvarez <aalvarez@cern.ch> - 0.1.2-2
changelog:
  - Escaped macros in changelog
  - Changed packages summaries
  - Renamed -docs to -doc, and changed its group to Documentation
  - Fixed -devel dependencies
  - Removed -docs dependency on the main package
  - All header files specified explicitly


author: Alejandro Alvarez <aalvarez@cern.ch> - 0.1.2-3
changelog:
  - Added BuildRequires: CUnit-devel
  - Added %check section
  - Removed %defattr
  - Moved man pages to devel package. There is no need for -doc


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.3.1-3
changelog:
  - Changed license to GPLv3+ and added some comments
    regarding the license issues with this package


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - This version introduces a API bump (which is required for
    supporting large files on 32bit environments)
  - The license issues we had with version 0.3.1 of this package (as
    discussed in #457924) are resolved in this version. The license
    of this package is now changed to LGPLv2+
  - Added a patch to fix two testcases on 64bit environments (upstream bug #1454)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0a-1
changelog:
  - Update to version 0.4.0a
  - Drop upstreamed patch
  - Added a new patch to fix a 64bit issue
  - The -devel package now contains a pkgconfig file
  - The configure script is now run with '--enable-messages --enable-https'
  - Made the -doc subpackage noarch (F11+)


author: Tim Niemueller <tim@niemueller.de> - 0.9.2-3
changelog:
  - Add missing BR gnutls-devel and libgcrypt-devel
  - Added patch to fix test apps (NSS instead of GnuTLS/OpenSSL curl,
    implicit DSO linking)
  - Disable test cases for now due to false errors, reported upstream


author: Tim Niemueller <tim@niemueller.de> - 0.9.34-1
changelog:
  - Update to latest uptsream release 0.9.34
  - Create sub-packages for libmicrospdy which is now enabled by default


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.52-1
changelog:
  - Update to 0.9.52
  - Dropped subpkg microspdy2http because it's dead
  - Adjust gnutls-utilize-system-crypto-policy.patch
  - Use %make_build
  - Use %make_install
  - Use %license
  - Cleanup Specfile
  - Add BR gettext-devel


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.52-3
changelog:
  - Enable HTTPS with --enable-https=yes
  - Re-add gnutls-utilize-system-crypto-policy.patch
  - Add epoch to allow update of higher release version


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-4
changelog:
  - Remove docs from -devel package
  - Upgrade cmake requirement to 2.8.0
  - Add cmake to -devel requires


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.2.0-1
changelog:
  - Update to libmodulemd 0.2.0
  - Adds gtk-doc generated documentation
  - (ABI-break) Makes all optional properties accept NULL as a value to clear
    them
  - (ABI-break) Modulemd.SimpleSet takes a STRV (char **) instead of a
    GLib.PtrArray
  - Fixes a bug where the name was not always set for components
  - Adds support for dumping YAML from the introspected API
  - Includes add/remove routines for profiles


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
changelog:
  - Support modulemd v2
  - Add tool to do quick validation of modulemd
  - Fix memory management
  - Warn and ignore unparseable sub-documents in the YAML
  - Fix several memory issues detected by Coverity scan


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Be more strict with certain parser edge-cases
  - Replace popt argument processing with glib
  - Drop upstreamed patches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - RPM components are properly emitted when no module components exist
  - Parser works around late determination of modulemd version


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
  - Adds support for handling modulemd-defaults YAML documents
  - Adds peek()/dup() routines to all object properties
  - Adds Modulemd.Module.dup_nsvc() to retrieve the canonical form of the unique module identifier.
  - Adds support for boolean types in the XMD section
  - Revert obsoletion of pythonX-modulemd packages for now


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - Update to version 1.1.1
  - Make default stream and profiles optional
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/25
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/26
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/27


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.2-1
changelog:
  - Update to version 1.1.2
  - Revert backwards-incompatible API change
  - Fix version string in pkgconfig file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-1
changelog:
  - Update to version 1.2.0
  - New Functions:
    * Modulemd.objects_from_file()
    * Modulemd.objects_from_string()
    * Modulemd.dump()
    * Modulemd.dumps()
    * Modulemd.Defaults.new_from_file()
    * Modulemd.Defaults.new_from_string()
  - Deprecated Functions:
    * Modulemd.Module.new_all_from_file()
    * Modulemd.Module.new_all_from_file_ext()
    * Modulemd.Module.new_all_from_string()
    * Modulemd.Module.new_all_from_string_ext()
    * Modulemd.Module.dump_all()
    * Modulemd.Module.dumps_all()
  - Bugfixes
    * Properly use G_BEGIN_DECLS and G_END_DECLS in headers
    * Assorted fixes for memory ownership in GObject Introspection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
  - New Public Objects:
    * Modulemd.Prioritizer - tool to merge module defaults
  - New Public Functions:
    * Modulemd.SimpleSet.is_equal()
    * Modulemd.Defaults.copy()
    * Modulemd.Defaults.merge()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
  - Adds new API for returning failed YAML subdocuments
  - Stop emitting log messages by default (polluting consumer logs)
  - Validate RPM artifacts for proper NEVRA format
  - Improve the validator tool
  - Drop upstreamed patch


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Update to version 1.5.0
  - Adds support for "intents" in Modulemd.Defaults
  - Adds `Modulemd.get_version()`
  - Adds support for RPM whitelists in the buildopts
  - Adds a new object: Modulemd.Buildopts
  - Deprecates Modulemd.Module.get_rpm_buildopts()
  - Deprecates Modulemd.Module.set_rpm_buildopts()
  - Fixes some missing license blurbs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0
  - libndp: fix processing for larger options
  - libndp: do not fail on receiving non-ndp packets


author: Jiri Pirko <jpirko@redhat.com> - 1.2-2
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084] [1091720]


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Paul P. Komkoff Jr <i@stingr.net> - 0.0.33-0.1.svn7211
changelog:
  - grab latest upstream changes and fixes, along with new version number
  - do not mess with bundled nfnetlink.h, use <linux/netfilter/nfnetlink.h>


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: Steve Dickson <steved@redhat.com> 1.0.10-2
changelog:
  - Fixed -o remount (bz 210346)
  - fix memory leak in rpc.idmapd (bz 212547)
  - fix use after free bug in dirscancb (bz 212547)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.10-4
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 212471)


author: Steve Dickson <steved@redhat.com> 1.0.12-2
changelog:
  - Added condstop to all the initscripts (bz 196934)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.12-5
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Updated mountd and showmount reverse lookup flags (bz 220772)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887) 
  - Added missing unlock_mtab() call in moutnd
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)


author: Steve Dickson <steved@redhat.com> 1.0.10-6
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240225)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Disabled the FSCache patch, for now...


author: Steve Dickson <steved@redhat.com> 1.1.0-4
changelog:
  - Make sure the open() system calling in exportfs uses
    mode bits when creating the etab file (bz 252440).


author: Steve Dickson <steved@redhat.com> 1.1.0-5
changelog:
  - Changed the default paths in sm-notify to 
    /var/lib/nfs/statd (bz 258461)
  - Updated exportfs manpage (bz 262861)


author: Steve Dickson <steved@redhat.com> 1.1.1-1
changelog:
  - Updated to latest upstream release, nfs-utils-1.1.1
  - Added the removal of sm-notify.pid to nfslock init script.
  - Changed spec file to use condrestart instead of condstop
    when calling init scripts.
  - Fixed typo in rpc.mountd man page 
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Added -S/--since to the nfsstat(1) manpage
  - The wording in the exportfs man page can be a bit confusing, implying
    that "exportfs -u :/foo" will unexport /foo from all hosts, which it won't
  - Removed nfsprog option since the kernel no longer supports it.
  - Removed mountprog option since the kernel no longer supports it.
  - Stop segfaults on amd64 during warnings messages.
  - Fix bug when both crossmnt and fsid are set.


author: Steve Dickson <steved@redhat.com> 1.1.1-3
changelog:
  - Added in relatime mount option so mount.nfs stays
    compatible with the mount command in util-linux-ng (bz 274301)


author: Steve Dickson <steved@redhat.com> 1.1.1-5
changelog:
  - Stopped mountd from incorrectly logging an error
    (commit 9dd9b68c4c44f0d9102eb85ee2fa36a8b7f638e3)
  - Stop gssd from ignoring the machine credential caches
    (commit 46d439b17f22216ce8f9257a982c6ade5d1c5931)
  - Fixed typo in the nfsstat command line arugments.
    (commit acf95d32a44fd8357c24e8a04ec53fc6900bfc58)
  - Added test to stop buffer overflow in idmapd
    (commit bcd0fcaf0966c546da5043be700587f73174ae25)


author: Steve Dickson <steved@redhat.com> 1.1.2-3
changelog:
  - Documented how to turn off/on protocol support for
    rpc.nfsd in /etc/sysconfig/nfs (bz443625)
  - Corrected the nfslock initscript 'status' return code (bz 441605)
  - Removed obsolete code from the nfslock initscript (bz 441604)


author: Steve Dickson <steved@redhat.com> 1.1.2-7
changelog:
  - Added -D_FILE_OFFSET_BITS=64 to CFLAGS
  - make nfsstat read and print stats as unsigned integers
  - Added (but not installed) the mountstats and nfs-iostat
    python scripts.


author: Steve Dickson <steved@redhat.com> 1.1.2-12
changelog:
  - Changed the default directories for sm-notify (bz 435480)
  - Added 'condstop' to init scripts so service are not
    started when nfs-utils is removed.


author: Steve Dickson <steved@redhat.com> 1.1.3-5
changelog:
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 462508)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - gssd: unblock DNOTIFY_SIGNAL in case it was blocked
  - Ensure statd gets started if required when non-root
    user mounts an NFS filesystem


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.1.6-4
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-15
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
    - Stop ignoring the -o v4 option (bz 529407)
    - Allow network protocol roll backs when proto is set
      in the config file (bz 529864)
  - v4 mounts will roll back to v3 mounts when the mount
    fails with ENOENT.


author: Steve Dickson <steved@redhat.com> 1.2.1-10
changelog:
  - Updated to the latest pseudo root release (rel10) which
    containts the upstream pseudo root release


author: Steve Dickson <steved@redhat.com> 1.2.1-11
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-12
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-13
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6


author: Steve Dickson <steved@redhat.com> 1.2.3-2
changelog:
  - Initscripts do not conform to LSB specification (bz 621562)
  - sm-notify needs to call res_init() before each try (bz 625531)
  - exports(5) man page duplicated paragraphs (bz 590921)


author: Steve Dickson <steved@redhat.com> 1.2.3-4
changelog:
  - The nfs service is not stopped on reboot or halt (bz 652786)
  - Removed obsolete configuration values (bz 653765)


author: Steve Dickson <steved@redhat.com> 1.2.3-7
changelog:
  - Updated to latest upstream release: nfs-utils-1-2-4-rc5
  - Add initscripts changes needed for rpcbind to be running when nfs is started
  - Initscripts changes needed to support NFS over RDMA
  - Allow the setting of the NFSv4 grace period (bz 665387)


author: J. Bruce Fields <bfields@redhat.com> 1.2.4-1
changelog:
  - Rely on crypto module autoloading in init scripts
  - initscripts: just try to mount rpc_pipefs always


author: Steve Dickson <steved@redhat.com> 1.2.4-4
changelog:
  - Converted init scrips to systemd services. (bz 699040)
  - Made nfsnobody's uid/gid to always be a 16-bit value of -2
  - mount: fix for libmount from util-linux >= 2.20


author: Steve Dickson <steved@redhat.com> 1.2.4-7
changelog:
  - Added StandardError=syslog+console to all the service files
    so startup errors will be logged. 
  - Changed exportfs to only log errors on existing /etc/export.d 
    directory, which eliminates a needless syslog entry.
  - Automount /proc/fs/nfsd for rpc.nfsd


author: Steve Dickson <steved@redhat.com> 1.2.4-9
changelog:
  - Both the nfs.lock and nfs.idmap services should always
    enabled on both installs and upgrades (bz 699040)
  - Fixed the paths to the server scriptlets (bz 733531)


author: Steve Dickson <steved@redhat.com> 1.2.5-1
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc1
  - Added named.service to After list in nfs-server.service (bz 742746)


author: Steve Dickson <steved@redhat.com> 1.2.5-2
changelog:
  - Removed SUID bits on mount commands (bz 528498)
  - Fixed a few typos in a couple man pages (bz 668124, 673818, 664330)
  - Fixed a I/0 problem in rpc.idmapd (bz 684308)


author: Steve Dickson <steved@redhat.com> 1.2.5-5
changelog:
  - Ensured nfs-idmap service is started after the network up (bz 748275)
  - Update to upstream RC release: nfs-utils-1.2.6-rc3 (bz 746497)


author: Steve Dickson <steved@redhat.com> 1.2.5-6
changelog:
  - Remove RQUOTAD_PORT and RQUOTAD from /etc/sysconfig/nfs (bz 754496)
  - Ensured nfs-idmap service is started after the named is up (bz 748275)


author: Steve Dickson <steved@redhat.com> 1.2.5-7
changelog:
  - Enabled new idmaping by installing the id_resolver.conf file.
  - Update to upstream RC release: nfs-utils-1.2.6-rc4


author: Steve Dickson <steved@redhat.com> 1.2.5-11
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc6
  - Reworked how the nfsd service requires the rpcbind service (bz 768550)


author: Steve Dickson <steved@redhat.com> 1.2.5-13
changelog:
  - Make sure statd is start before NFS mounts (bz 786050)
  - rpc.idmap: Hide global symbols from libidmap plugins (bz 797332)
  - nfsd: Bump up the default to 8 nprocs (bz 757452)


author: Steve Dickson <steved@redhat.com> 1.2.5-14
changelog:
  - gssd: Look for user creds in user defined directory (bz 786993)
  - gssd: Don't link with libgssapi_krb5 (bz 784908)


author: Steve Dickson <steved@redhat.com> 1.2.6-0
changelog:
  - Update to the latest upstream release: nfs-utils-1.2.6 (bz 821673)
  - Split out NFS server daemons into individual service files (bz 769879) 
  - Removed Wants= from nfs-lock.service (bz 817895)
  - Only enable services if they are enabled on upgrades (bz 807020)


author: Steve Dickson <steved@redhat.com> 1.2.6-1
changelog:
  - Correctly search for the existence of nfsnobody (bz 816149)
  - Correctly change the default group id for nfsnobody (bz 816149)


author: Steve Dickson <steved@redhat.com> 1.2.6-12
changelog:
  - Added FedFS support by added a BuildRequires for fedfs-utils-devel
  - Introduce new systemd-rpm macros (bz 850227)
  - Updated to latest upstream RC release: nfs-utils.1.2.7-rc5 (bz 833024)


author: Steve Dickson <steved@redhat.com> 1.2.6-14
changelog:
  - Allow the service to start when RPCNFSDCOUNT is comment out. (bz 870143)
  - Removed some old cruft from the spec file (bz 226198)


author: Steve Dickson <steved@redhat.com> 1.2.7-3
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc3
  - Took ownership of /usr/lib/nfs-utils (bz 894535)


author: Steve Dickson <steved@redhat.com> 1.2.7-5
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc4
  - Added nfs-lock.service to After line in nfs-server.service (bz 914792)


author: Steve Dickson <steved@redhat.com> 1.2.8-2.0
changelog:
  - Update to latest upstream RC release: nfs-utils.1.2.9-rc1
  - Added GSS_USE_PROXY variable to nfs.sysconfig (bz 967112)


author: Steve Dickson <steved@redhat.com> 1.2.9-2.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-10-rc2
  - Added Also=nfs.target to nfs-service file. (bz 1047972)


author: Steve Dickson <steved@redhat.com> 1.2.9-3.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-10-rc3
    - gssd: Improve first attempt at acquiring GSS credentials (bz 1055077)
  - gssd: set $HOME to prevent recursion (bz 1052902)


author: Steve Dickson <steved@redhat.com> 1.3.0-5.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-3-1-rc3
  - Use _statdpath to define where statd's state lives


author: Steve Dickson <steved@redhat.com> 1.3.1-0.0
changelog:
  - Update to the latest upstream release: nfs-utils-1-3-1
  - Enable gssproxy to manage the GSSAPI creds on the server.


author: Steve Dickson <steved@redhat.com> 1.3.1-4.0
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-3-2-rc4 (bz 1164477)
  - Handle the rpcuser like other created users (bz 1165322)
  - Restored lockd port and v4 grace/lease interface (bz 1115225)
  - Make sure nfs-client target is enabled (bz 1173564)


author: Steve Dickson <steved@redhat.com> 1.3.2-0.2
changelog:
  - Change statd-notify.service to not wait for network to come up (bz 1183293)
  - Added the rpcuser group before adding the rpcuser uid (bz 1165322)


author: Steve Dickson <steved@redhat.com> 1.3.3-7.rc4
changelog:
  - Updated to the latest RC release: nfs-utils-1-3-4-rc4 (bz 1316701)
  - Changed BuildRequires: glibc-headers ==> BuildRequires: gcc (bz 1230477)


author: Steve Dickson <steved@redhat.com> 2.1.1-4.rc2
changelog:
  - Updated to the latest RC release: nfs-utils-2-1-2-rc2 (bz 1419351)
  - Fixed typo in nfs.sysconfig  (bz 1422249)


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc2
changelog:
  - Conditionally restart gssproxy now that config file is installed (bz 1440885)
  - systemd: Afters are also needed for the Wants=network-online.target (bz 1419351)
  - nfsdcltrack: silence some expected errors (bz 1445863)
  - Cleaned up fuzzy patches


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc4
changelog:
  - Updated to the latest RC releease: nfs-utils-2-1-2-rc4 (bz 1462218)
  - rpc.c: added include file so UINT16_MAX is defined


author: Steve Dickson <steved@redhat.com> 2.2.1-1.rc1
changelog:
  - Restore ABI compat with pre-merge libnfsidmap (bz 1509063)
  - Add a build-time dependency on python3-devel


author: Steve Dickson <steved@redhat.com> 2.3.1-6.rc1
changelog:
  - Stop failing when systemctl try-restart gssproxy fails (bz 1552976)
  - Use Fedora build flags (bz 1548679)


author: Steve Dickson <steved@redhat.com> 2.3.1-8.rc1
changelog:
  - Ensure /var/lib/nfs/rpc_pipefs has the correct permissions (bz 1583489)
  - Remove rpc.svcgssd from systemd scripts (bz 1591700)


author: Steve Dickson <steved@redhat.com> 2.3.3-3
changelog:
  - Ensure /var/lib/nfs/rpc_pipefs has the correct permissions (bz 1583489)
  - mount.nfs: Only ignore EBUSY when a filesystem is already mount (bz 1629644)


author: Steve Dickson <steved@redhat.com> 2.3.3-6
changelog:
  - Changed /var/lib/nfs/rpc_pipefs to have 555 permissions (bz 1583489)
  - Removed tcp wrappers support from man pages (bz 1642596) 
  - Reload not restart gssproxy in nfs-server.service (bz 1592660)


author: Steve Dickson <steved@redhat.com> 2.3.3-8
changelog:
  - Update junction code with latest upstream code (1543126)
  - Make sure /etc/sysconfig/nfs is immutabl (1639432)


author: Steve Dickson <steved@redhat.com> 2.3.3-12
changelog:
  - Change nfsconvert.sh not to set the immutable bit (bz 1673685)
  - Change nfsconvert.py not to create the new dummy /etc/sysconfig/nfs (bz 1673685)


author: Steve Dickson <steved@redhat.com> 2.3.3-15
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1672395)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1677576)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1683714)


author: Steve Dickson <steved@redhat.com> 2.3.3-16
changelog:
  - Add a conversion for new sm-notify force option in nfs.conf (bz 1677576)
  - Correct the modes on /etc/nfs.conf after a conversion (bz 1655880)


author: Steve Dickson <steved@redhat.com> 2.3.3-17
changelog:
  - Moved the gating tests out of a patch and into the top dir (bz 1653927)
  - Move the mode corrections on /etc/nfs.conf to nfsconvert.py (bz 1655880)
  - gssd: add verbosity options to the rpc.gssd man page (bz 1668026)


author: Steve Dickson <steved@redhat.com> 2.3.3-24
changelog:
  - nfs.man: Fixed small typo in man page (bz 1732877)
  - mount: Report correct error in the fall_back cases (bz 1709963)
  - rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1712202)
  - spec: Remove redundant manpage files (bz 1718738)


author: Steve Dickson <steved@redhat.com> 2.3.3-27
changelog:
  - More coverity scans updates (bz 1746572)
  - nfsd: Adjust nfs.conf setting/parsing of rdma port (bz 1710532)
  - Add plain --rdma option to nfs.conf convertor (bz 1747295)
  - mountstats: Add per-op error counts to iostat command (bz 1719983)
  - gssd: add configure options verbosity to man page (bz 1749642)


author: Steve Dickson <steved@redhat.com> 2.3.3-32
changelog:
  - junction: Fixed debug statement (bz 1831829)
  - Userspace support for the latest nfsdcld daemon (bz 1817756)


author: Steve Dickson <steved@redhat.com> 2.3.3-33
changelog:
  - manpage: Add a description of the 'nconnect' mount option (bz 1761352)
  - nfsdclddb: Redname clddb-tool to nfsdclddb (bz 1836924)


author: Steve Dickson <steved@redhat.com> 2.3.3-38
changelog:
  - exports man page: warn about subdirectory exports (bz 1652437)
  - Don't modify /etc/group on upgrades (bz 1856881)
  - nfs-iostat: divide by zero with fresh mount (bz 1861823)
  - nfsiostat: Drop autofs entries before calling compare_iostats() (bz 1859130)
  - nfsdclddb: clddb-tool was recently renamed to nfsdclddb (bz 1893599)


author: Steve Dickson <steved@redhat.com> 2.3.3-39
changelog:
  - systemd: Ingnore export failures in nfs-server.serivce unit (bz 1894873)
  - exports.man: Remove some outdated verbiage (bz 1769688)


author: Steve Dickson <steved@redhat.com> 2.3.3-42
changelog:
  - gssd: Add options to allow for the use of ~/.k5identity file (bz 1868087)
  - man: Correct gssd(8) description of rpc-timeout and context-timeout (bz 1908232)
  - exportfs: fix unexporting of '/' (bz 1944119)


author: Steve Dickson <steved@redhat.com> 2.3.3-44
changelog:
  - gssd: Deal with failed thread creation (bz 1981400)
  - gssd: Add timeout for upcall threads (bz 1981403)
  - gssd: Cleaned up debug messages (bz 1961056)
  - spec: Updated description of the nfs-utils rpm (bz 1981419)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el8]
changelog:
  - Rebase onto upstream version 1.1.1
  - Sync spec file with RHEL7
  - Disable JSON parsing, deprecated by upstream
  - Make use of builtin testsuite


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Paul Wouters <pwouters@redhat.com> - 3.2.22-2
changelog:
  - Update to 3.2.22 (rhbz#963111)
  - Add patch for double tree crasher in rtnl_link_set_address_family()


author: Thomas Haller <thaller@redhat.com> - 3.2.24-3
changelog:
  - add nl_has_capability() function
  - retry local port on ADDRINUSE (rh #1097175)
  - python: fix passing wrong argument in netlink/core.py
  - fix return value of nl_rtgen_request()
  - fix nl_msec2str()
  - fix crash in rtnl_act_msg_parse()
  - fix rtnl_route_build_msg() not to guess the route scope if RT_SCOPE_NOWHERE


author: Thomas Haller <thaller@redhat.com> - 3.2.26-3
changelog:
  - Update to 3.2.26-rc1
  - fix broken symbols from 3.2.26-1
  - backport upstream fix for nl_socket_set_fd()


author: Thomas Haller <thaller@redhat.com> - 3.2.29-2
changelog:
  - Update with patches from upstream
  - check valid input arguments for nla_reserve() (rh#1414305, CVE-2017-0386)
  - fix crash during SRIOV parsing
  - lazyly read psched settings
  - use O_CLOEXEC when creating file descriptors with fopen()


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Adam Jackson <ajax@redhat.com> 0.9.1-3.20071031
changelog:
  - libpciaccess-fd-cache.patch: Cache sysfs PCI config space file
    descriptors for great boot speed justice.


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Bastien Nocera <bnocera@redhat.com> 1.5.0-1
changelog:
  - Disable vala, as it was disabled upstream:
  http://git.gnome.org/browse/libpeas/commit/?id=1031aaeeef282ab2bb65cb6ae48fa4abff453c4d


author: David King <amigadave@amigadave.com> - 1.15.0-1
changelog:
  - Update to 1.15.0 (#1235615)
  - Update URL
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Add README and NEWS to doc


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 1.20.0-2
changelog:
  - Trivial fixes in spec
  - disable silent building
  - use %autosetup
  - split out GTK+ support to the subpackage
  - use %make_build
  - remove all libtool files in libdir
  - drop unneeded chrpath calls


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Neal Gompa <ngompa13@gmail.com> - 1.1.0-2
changelog:
  - Rework package to not generate conflict with pkgconfig
  - Disable pkgconf-m4 and pkgconf-pkg-config by default


author: Neal Gompa <ngompa13@gmail.com> - 1.1.1-2
changelog:
  - Add missing Epoch to pkgconfig Provides/Conflicts for pkgconf-pkg-config
  - Add copy of pkgconf.1 as pkg-config.1 in pkgconf-pkg-config


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Tom Lane <tgl@redhat.com> 2:1.2.16-1
changelog:
  - Update to libpng 1.2.16
  Resolves: #211705, #216706, #227334
  - Separate libpng.a into a -static subpackage
  - Other minor packaging fixes per Fedora merge review
  Resolves: #226038


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #717509
  Resolves: #721307


author: Tom Lane <tgl@redhat.com> 2:1.5.6-1
changelog:
  - Update to new major release series 1.5.x; includes source-code-incompatible
    API changes and a soname version bump
  - Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 2:1.5.6-2
changelog:
  - Don't include libpng12.pc in the compat subpackage; instead just offer a
    phony Provides: for it in the devel subpackage


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: kwizart < kwizart at gmail.com > - 0.2.3-2
changelog:
  - Rename binding-python to python
  - Add Requires: gecko-libs >= %{gecko_version}
  - Fix some descriptions
  - Add plugin-webkit package


author: kwizart < kwizart at gmail.com > - 0.2.3-3
changelog:
  - Move proxy.h to libproxy/proxy.h
    This will prevent it to be included in the default include path
  - Split main to libs and util and use libproxy to install all


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Nicolas Chauvet <kwizart@fedoraproject.org> - 0.3.1-1
changelog:
  - Update to 0.3.1
  - Avoid dependecies on -python and -bin subpackages
  - Create -networkmanager sub-package.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 0.4.4-1
changelog:
  - Update to 0.4.4
  - Removed install workarounds (fixed upstream)
  - Removed patches (fixed upstream)
  - Moved -python to noarch
  - Downgrade cmake requirement (upstream change)
  - Disabled perl bindings
  - Run tests


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.5-2
changelog:
  - Update to 0.4.5
  - Disable mozjs on fedora >= 15
  - Disable webkit
  - Add libproxy bootstrap option to disable modules.


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.6-3
changelog:
  - Fix mozjs/webkit obsoletion - rhbz#656849
  - Workaround unreliable Version field in pkg-config - rhbz#656484


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.7-0.1svn20110412
changelog:
  - Update to 0.4.7 svn20110412
  - Add support for webkitgtk3
  - Add support for xulrunner 2.0
  - fix #683015 - libproxy fails with autoconfiguration
  - fix #683018 - libproxy needs BR: NetworkManager-glib-devel  (f14)
  - Manually fix libproxy-1.0.pc version field - #664781 / #674854


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Dan Winship <danw@redhat.com> - 0.4.11-7
changelog:
  - Fix file descriptor leak (#911066)
  - Fix crash when pacrunner fails (probably because of EMFILE...) (#998232)


author: David King <amigadave@amigadave.com> - 0.4.12-1
changelog:
  - Update to 0.4.12
  - Simplify conditional macros
  - Use isa macro when requiring base package
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Use javascriptcoregtk-4.0
  - Apply an upstream patch to pair new[] with delete[]
  - Fix slowdown in KDE plugin
  - Make the pacrunner subpackage depend on pacrunner (#1171679)
  - Install man page from Debian


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Christopher Meng <rpm@cicku.me> - 0.5.0-2
changelog:
  - Drop useless test data
  - Add missing gettext-devel
  - psl is now separately packaged recommended by the upstream


author: Honggang Li <honli@redhat.com> - 10.2.103_1-1
changelog:
  - Rebase to latest upstream master branch.
  - Fix build failures caught by gcc 7.x.
  - Resolves: bz1423872


author: - 10.3.8-5
changelog:
  - Fix partial injection of Fedora build flags.
  - Double the sizeof array fdesc to fix a gcc compiling issue.
  - Resolves: bz1556062


author: Tomas Mraz <tmraz@redhat.com> 0.9-2
changelog:
  - fixes for problems found in review (missing BR on pam-devel,
    License field, Source URL, Require pam, other cleanups)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.3.0-1
changelog:
  - Change the defaults for credits, difok, and minlen
  - Make the cracklib check optional but on by default
  - Add implicit support for parsing  <cfgfile>.d/*.conf files
  - Add libpwquality API manual page


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-1
changelog:
  Bump version to 0.16.0 ... do not use version 0.15.0
  Update release gpg sign key
  Bump the version to 0.15.0
  Merge pull request #83 from davidvossel/master
  Low: ipc_socket: Output send event failure as debug instead of error
  Low: ipcserver.c: Fix example server's glib mainloop implementation
  High: ipc_socket.c: Detect EOF connection on connection STREAM socket
  Merge pull request #81 from davidvossel/dgram_max_msg
  Low: tests: Add dgram max size detection test
  Low: ipc_socket.c: Handle the unlikely event of an EAGAIN or EINTR during dgram max size detection
  Merge pull request #82 from davidvossel/master
  Fixes detect disconnect on send for tcp example
  Fixes sem leak
  Fixes less-than-zero comparision of unsigned int
  fixes double close
  Fixes double close
  Fixes double fd close
  Fixes fd leak
  Prevent use after free in benchmark util
  Fixes use ater free in shm disconnect
  Fixes use after free during ipcs client disconnect
  Remove dead code
  Low: check_ipc.c: Verify dgram max size during tests
  High: ipcc: Add abilty to verify dgram kernel buffer size meets max msg value
  Fixes travis build error
  Merge pull request #80 from davidvossel/master
  Low: check_ipc.c: fix debug message to only display once.
  High: ringbuffer: Make max_size of ringbuffer accurate so shm ipc max msg size value is honored
  Low: ipcs: For shm ipc, always retry outstanding notifications when next event is sent
  Low: tests: Added test to verify sending ipc msg equal to max size succeeds
  Merge pull request #79 from davidvossel/master
  Merge pull request #78 from davidvossel/master
  Fix: ipcs: Fixes compile time issue reported by travis
  Merge pull request #77 from davidvossel/stress_tests_fixes
  Low: loop_pool_kqueue: remove potentially noisy dbug statement
  Low: tests: rework bulk event msg ipc test
  Account for fbsd ENOBUFS during stress test
  Low: tests: Adds ipc event stress test to testsuite
  Low: ipc_socket: In fbsd send() returns ENOBUFS when dgram queue is full, this should be treated similar to EAGAIN
  High: kqueue: Properly enable kqueue filter in poll loop
  Low: ipcs: Attempt to resend outstanding event notifications during event send
  Merge pull request #75 from davidvossel/ref_count_cleanup
  Low: qbipcs.h: update ipcs connection iterator documentation
  Merge pull request #74 from davidvossel/ref_count_cleanup
  Fix: ipcs: Disconnect shm ipc connection when poll socket returns error on msg receive
  Fix: ipcs: Properly disconnect client connection on POLLNVAL or any other error causing connection removal from mainloop.
  Simplify internal ipcs ref counting, add comments and document api behavior
  Simplifies connection ref counting without changing behavior
  Low remove ref-count error in example ipcserver.
  Merge pull request #73 from davidvossel/ref_count_cleanup
  Merge pull request #72 from davidvossel/master
  Low: tests: Verify reading valid blackbox file works
  Fix: refcount leak
  Fix: ringbuffer: Add file header version field and detect reading corrupted blackbox files using hash value
  Fix: tests: On some platforms -ECONNRESET is returned rather than -ENOTCONN after server failure
  Fix: tests: Make blackbox_segfault.sh not depend on bash
  Hopefully this is the last travis link fix
  Fix travis icon (travis is case sensitive)
  Fix the github links
  Merge pull request #70 from yuusuke/fix_logging
  fix a problem when the character string beyond the number of the maximum characters is passed
  Merge pull request #68 from r1mikey/upstream
  Add a IPC service context pointer and accessors from both the connection and service level.
  Enable distcheck on the travis tests
  Add atomic_int.h to noinst_HEADERS
  Use the new atomic ops in the ringbuffer
  Add internal support for the new __atomic gcc builtins
  Rename the configure macros from atomic to sync
  ringbuffer: use atomic ops on ringbuffer chunk magic
  Remove some test code mistakenly committed to the example program.
  IPC: make each connection ref the owning service
  Indicate when/why qb_rb_force_close() fails to remove share memory files
  Typo fixed in configure
  Fix "make srpm"
  Remove doxygen from travis deps to try and get the job working.
  Fix make distcheck
  Merge pull request #60 from t-matsuo/fix-makefile-of-tests
  add file_change_bytes into check_PROGRAMS and fix a typo
  Deal better with corrupt blackbox files.
  Merge pull request #58 from inouekazu/fix_connection_state_checking
  IPC: fix the connection state checking
  LOG: copy the function/filename for dynamic callsites
  Deal with /dev/shm issue on Travis builders
  Properly discover SO_NOSIGPIPE and MSG_SIGNAL
  IPC: fix call to QB_SUN_LEN
  list: don't splice empty lists onto the head.
  rpl_sem: make destroy more compliant
  test: fix unused-but-set-variable warning
  test: fix missing-format-attribute warning
  RB: make the "sem" abstraction into a notifier
  IPC: clean up the connection state checking
  Use dgram sockets for message oriented communications
  IPC: don't interpret EMSGSIZE and ENOMSG as a disconnect
  POLL: prevent a spin if the fd is not removed from the mainloop
  add TAGS and ~ files to .gitignore
  docs: install qb-blackbox.8 if doxygen is not available.
  IPC: seperate ipc_us.c into 2 files
  IPC: move utility functions to unix.c
  IPC: make sure we return a consistent error when the message is too big.


author: David Vossel <dvossel@redhat.com> - 0.17.0-1
changelog:
  Fix: build: Allow 'make rpm' to work with lightweight tags for release candidates
  Fix: spec: reference correct url in spec file
  Doc: update broken doxygen link to something that exists
  Bump version to 0.17.0
  Low: ipc_socket: further optimize max msg size calculations for fbsd portability tests
  Low: ipc_socket: Allow socket max msg size to be calculated more accurately
  Fix: fixes travis compile time error
  Low: tests: Fixes compile time issue with make check
  High: ipcs: Prevent ipc server use after free.
  Low: ipc: Remove ipc connection reference given to dispatch functions
  High: ipc: Fixes memory leak in server connection accept when client partially connects
  IPC: Increase the listen backlog of IPC server
  Low: ipcs: Clarifications to the ipcs server callback documentation.
  Fix rb.test to avoid overwriting memory during reading.
  Low: example: Update client/server example to use server enforced buffer size
  Low: Client side buffer retrieval regression test
  Feature: New api function to retrieve client buffer size
  Low: check_ipc.c: Verify server enforced buffer sizes work
  Feature: Enforce buffer size limits on the server side
  Low: regession tests for regex log filters
  Feature: Filter logs using regex patter on function, format, or filename
  ipc_setup: Set SO_PASSCRED on listener socket
  Fix: log: Filtering by function and file must match exactly, no substring matches
  Low: blackbox: Abort blackbox logging on ringbuffer overwrite reclaim error
  High: ipcs: Api function allowing server to retrieve client connection's ipc buffer size
  Low: ringbuffer: Abort during chunk reclaim if OVERWRITE flag is set and reclaim fails.
  High: blackbox: unique blackbox ringbuffer files per pid
  Low: ipc_socket: Fixes fd leak in socket ipc client disconnection
  Use sizeof to get the correct size of the sockaddr_un sun_path member in a portable way. Fixes corosync on Mac OS X.
  Detect the max signal value that can be used using NSIG macro
  Avoid double-decrement of level->todo


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
  Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
  Fix: trie: allow modifying the trie map during the notify callback
  Fix: fix invalid option when run 'ipcclient -h'
  Fix: epoll: don't miss poll events under high load
  Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
  Fix: ringbuffer: fix size in qb_rb_create_from_file()
  Fix: ringbuffer: fix qb_rb_open_2() debug format string
  Fix: trie: fixes regression caused by ref count refactoring
  Fix: ipcc: Properly timeout during recv when timeout value is provided


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 0.17.2-1
changelog:
  - Update to libqb-0.17.2 + fix check_ipc tests, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v0.17.2


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0-1
changelog:
  - Update to libqb-1.0, for list of changes see, in order:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc1
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc2
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc3
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0rc4
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0
  - Adapt spec file per the upstream version (drop defattr statements,
    autogen.sh call with %build, conditionalize build process)
  - Add gcc as an explicit BuildRequires (required per the new guidelines)
  - Do not depend on the rpmbuild-imposed man page archiving method


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.1-1
changelog:
  - Update to libqb-1.0.1, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.1
  - Move qb-blackbox manual page from libqb-devel to libqb
    (where the utility itself resides)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-1
changelog:
  - Update to libqb-1.0.2, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.2


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-4
changelog:
  - Mitigate changed treatment of orphaned sections in ld.bfd/binutils-2.29,
    resulting in logging facility silently out of order (rhbz#1478089)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-6
changelog:
  - Better approach so as to mitigate changed treatment of orphaned sections
    in ld.bfd/binutils-2.29, resulting in logging facility silently out of order
    (rhbz#1478089)
  - Related to that, build commands now shown in full to ease the sanity checking
  - Adapt spec file per the upstream version (conditionalizing build through
    --enable-syslog-tests no longer relevant since v1.0.2)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-14
changelog:
  - Evolution of the previous (rhbz#1478089)
  - Make -devel package dependency on the main package arch-qualified


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.3-1
changelog:
  - Update to libqb-1.0.3, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.3


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.3-11
changelog:
  Correctly set socket directory permissions when
    qb_ipcs_connection_auth_set() is called
    Resolves: rhbz#1836146


author: Remi Collet <remi@fedoraproject.org> - 0.5.0-1
changelog:
  - update to 0.5.0
  - open https://github.com/alanxz/rabbitmq-c/issues/169 (version is 0.5.1-pre)
  - open https://github.com/alanxz/rabbitmq-c/issues/170 (amqp_get_server_properties)


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.18-1
changelog:
  - Add new option LRO_FTPUSEEPSV
  - Update AUTHORS
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)
  - Doc: Fixed minor doc typo (Philippe Ombredanne)
  - Doc: Other updates
  - Doc: Update default values in doc to reflect reality


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.19-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.20-1
changelog:
  - Tests: Disable test_download_packages_with_resume_02 test
  - Update build utils to match new fedora spec schema


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - Reduce download delays
  - Add an option to preserve timestamps of the downloaded files (RhBug:1688537)
  - Append the '?' part of repo URL after the path
  - Fix memory leaks


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.3-1
changelog:
  - wizard: correct comments in save_text_if_changed()
  - events: improve example
  - reporter-bugzilla: add parameter -p
  - wizard: fix save users changes after reviewing dump dir files
  - dd: make function load_text_file non-static
  - bugzilla: don't attach build_ids
  - run_event: rewrite event rule parser
  - dd: add convenience wrappers fro loading numbers
  - ureport: improve curl's error messages
  - ureport: use Red Hat Certificate Authority to make rhsm cert trusted
  - curl: add posibility to use own Certificate Authority cert
  - spec: add redhat-access-insights to Requires of l-p-rhtsupport
  - bugzilla: put VARIANT_ID= to Whiteboard
  - autogen: use dnf instead of yum to install dependencies
  - configure: use hex value for dump dir mode
  - curl: add a helper for HTTP GET
  - dd: don't warn about missing 'type' if the locking fails
  - dd: stop warning about corrupted mandatory files
  - Use a dgettext function returning strings instead of bytes


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.4-1
changelog:
  - doc: add option -o and -O into reporter-ureport man page
  - rhtsupport: use problme report API to create description
  - bugzilla: make the event configurable
  - report-gtk: offer users to create private ticket
  - bugzilla|centos: declare 'restricted access' support
  - event config: add support for 'restricted access'
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - dd: dd_delete_item does not die
  - dd: add function getting stat of item
  - dd: correct handling of TYPE when creating dump directory
  - dd: add function computing dump dir file system size
  - dd: add function counting number of dd items
  - dd: add function copying file descriptor to element
  - dd: allow 1 and 2 letter long element names
  - problem_data: factor out function reading single problem element
  - formatdup: more universal comment
  - dd: make function uid_in_group() public
  - Refactoring conditional directives that break parts of statements.
  - bugzilla: actualize man pages
  - bugzilla: don't report private problem as comment
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - spec: add uploader config files and related man page
  - uploader: add possibility to set SSH keyfiles
  - curl: add possibility to configure SSH keys
  - desktop-utils: deal with Destkop files without command line
  - ureport: enable attaching of arbitrary values
  - update .gitignore
  - uploader: save remote name in reported_to
  - curl: return URLs without userinfo
  - lib: add function for removing userinfo from URIs
  - plugins: port reporters to add_reported_to_entry
  - reported_to: add a function formatting reported_to lines
  - lib: introduce parser of ISO date strings
  - uploader: use shared dd_create_archive function
  - dd: add a function for compressing dumpdirs
  - problem_report: add examples to the documentation
  - client: document environment variables


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.0-1
changelog:
  - ignored words: update ignored words
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - augeas: trim spaces before key value
  - Revert "xml parser: be more verbose in case xml file cannot be opened"
  - xml parser: be more verbose in case xml file cannot be opened
  - spec: add workflows.d to filesystem package
  - makefile: define LANG in release target
  - mailx: stop creating dead.letter on mailx failures
  - workflows: add comments to ambiguous functions
  - workflows: NULL for the default configuration dir
  - workflows: publish the function loading configuration
  - build: fix build on Fedora24
  - augeas: exclude mantisbt format configurations
  - reporter-mantisbt: add missing '=' to conf file
  - curl: fix typo Ingoring -> Ignoring
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - report client: add silent mode to clean_up()
  - doc: add documentation for requires-details attribute
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - spec: add workflow for RHEL anonymous report files
  - wizard: fix the broken widget expansion
  - dd: add documentation of dd_create_skeleton
  - workflow: add extern C to the header file
  - Fix minor typos
  - Translation updates
  - translations: update zanata configuration
  - wizard: fix the broken "Show log" widget
  - wizard: remove the code correcting Bugzilla groups


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.1-1
changelog:
  - spec: compression updates
  - lib: add lz4 decompression
  - lib: avoid the need to link against lzma
  - all: format security
  - lib: add cgroup namespace
  - dd: introduce functions getting occurrence stamps
  - dd: introduce dd_get_env_variable
  - lib: add get env variable from a file
  - RHTSupport: include count in Support cases
  - lib: problem report API check fseek return code
  - ignored words: remove 'kwallet_jwakely' which I added wrongly


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.2-1
changelog:
  - Translation updates
  - wizard: do not create reproducible if complex_detail == no
  - include: save_user_settings function declaration isn’t a prototype
  - Bugzilla: fix typo in comment don -> don't
  - client-python: fix a typo in error check
  - dd: do not log missing uid file when creating new dump dir
  - build: update searched pkg names for systemd


author: Jakub Filak <jfilak@redhat.com> 2.8.0-1
changelog:
  - lib: fix a memory leak in create_dump_dir fn
  - rhtsupport: fix a double free of config at exit
  - autogen: fix typo in usage help string
  - debuginfo: dnf API logging workarounds list
  - lib: don't warn when user word file doesn't exist
  - testuite: add test for forbidden_words
  - lib: be able to define base conf dir at runtime
  - wizard: use dnf instead of yum in add a screencast note
  - problem_report: document resevered elements


author: Jakub Filak <jakub@thefilaks.net> 2.9.0-1
changelog:
  - Translation updates
  - build: make the release-* targets smarter
  - add CHANGELOG.md
  - reporter-s-journal: enable SYSLOG_IDENTIFIER from env
  - report-python: add method run_event_on_problem_dir
  - lib: use lz4 instead of lz4cat
  - reportclient: honor ABRT_VERBOSE
  - tree-wide: introduce 'stop_on_not_reportable' option
  - client: add support for $releasever to debuginfo
  - lib: correct test for own root
  - workflows: run analyze_BodhiUpdates event on Fedora
  - man: fix formating
  - reporter-systemd-journal: introduce reporter-systemd-journal
  - problem_data: add function which returns all problem data keys
  - include: add exception_type element constant
  - spec: changes related to reporter-systemd-journal
  - problem_report: add normalization of crashed thread
  - problem_report: make generate report configurable
  - problem_report: use core_backtrace if there is no backtrace
  - lib: refuse to parse negative number as unsigned int
  - spec: simplify and remove old conditional
  - build: add gettext-devel to sysdeps
  - dd: add check for validity of new file FD
  - build: configure tree for debugging by default
  - spec: use %buildroot macro
  - spec: remove defattr which match the defaults
  - spec: do not clean buildroot
  - spec: remove Groups
  - spec: code cleanup
  - lib: fix a bug in dealing with errno
  - lib: add convenient wrappers for uint in map_string_t
  - problem_report: ensure C-string null terminator
  - lib: fix invalid cgroup namespace ID
  - lib: make die function configurable
  - lib: allow using FD of /proc/[pid] instead of pid_t
  - dd: add functions for opening dd item
  - lib: add xfdopen
  - problem data: search for sensitive words in more files
  - dd: add dd_copy_file_at
  - ignored words: add "systemd-logind" and "hawkey"
  - build: reset the default version with each release
  - doc: make README more verbose
  - tree-wide: produce less messages in NOTICE log lvl
  - ureport: less confusing logging
  - spec: install JavaScript workflows
  - workflow: add JavaScript workflows
  - bugzilla: stop including package details


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: create tarball in release-* target
  - problem_data: fix double const
  - wizard: fix error found by -Werror=format-security
  - run_event: fix cmp between pointer and zero character
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Julius Milan <jmilan@redhat.com> 2.9.3-1
changelog:
  - Translation updates
  - commit to delete
  - workflows: fix description in workflow_RHELJavaScript.xml.in
  - workflows: add workflow for adding data to existing case
  - client-python,report-python: Allow python to be optional at build time
  - ignored words: add SYSTEMD_NSS_BYPASS_BUS
  - reporter-ureport: add 'ProcessUnpackaged' option
  - spec: add workflow for adding data to existing case
  - rep-sys-journal: fix in finding executable basename
  - remove old obsolete
  - Group is not used any more
  - remove old changelogs
  - requires pythonX-dnf instead of dnf
  - doc: fix obsolete doxygen tags & complains
  - lib: Introduce pid_for_children element from ns
  - client-python: Do not try to unlink None
  - spec: rename Python binary packages


author: Martin Kutlak <mkutlak@redhat.com> 2.9.4-1
changelog:
  - Translation updates
  - Revert "use /usr/sbin/"
  - ureport: remove json-c is_error() usage
  - ldconfig and gtk-update-icon-cache is not needed in rawhide
  - reporter-rhtsupport: Remove dependency on redhat-access-insights
  - do not expand macro in changelog
  - move defattr which match the defaults
  - use /usr/sbin/
  - macro python_sitearch is always defined on rhel7+
  - remove rhel6 specific items and accomodate to rhel7+
  - This package uses names with ambiguous `python-` prefix in requirements.
  - reporter-{bugzilla,mantisbt,rhtsupport}: fix free
  - reporter-mailx: rely on configured email
  - spec: fix unowned directories
  - augeas: include local config path
  - doc: update to contain newly added user's local config
  - reporter-mantisbt: read configuration from user's home
  - reporter-rhtsupport: read configuration from user's home
  - reporter-bugzilla: read configuration from user's home
  - reporter-bugzilla: ask concrete bz when requiring login
  - makefile: fix make release


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-1
changelog:
  - spec: actualize according to downstream
  - spec: Conditionalize the Python2 and Python3
  - report-python: fix tests if configure --without-python2
  - autogen: correctly parse buildrequires from spec file


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.9.5-15.0.1
changelog:
  - Disable centos sub package
  - Don't requires subscription for Anolis OS
  - Remove unused sub packages
  - cherry-pick [1acfc44 00b6684 2f29df5]


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use %{_prefix}/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-3
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-4
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Get rid of security_context_t and fix const declarations.
  	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
changelog:
  - Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
  - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts


author: Petr Lautrbach <plautrba@redhat.com> 2.3-8
changelog:
  - selinux.py - use os.walk() instead of os.path.walk() (#1195004)
  - is_selinux_enabled(): drop no-policy-loaded test (#1195074)
  - fix -Wformat errors and remove deprecated mudflap option


author: Petr Lautrbach <plautrba@redhat.com> 2.3-10
changelog:
  - is_selinux_enabled: Add /etc/selinux/config test (#1219045)
  - matchpathcon/selabel_file: Fix man pages (#1219718)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-4
changelog:
  - Flush the class/perm string mapping cache on policy reload (#1264051)
  - Fix restorecon when path has no context


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix location of selinuxfs mount point
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t input


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-9
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()


author: Petr Lautrbach <plautrba@redhat.com> 2.5-12
changelog:
  - Fix -Wsign-compare warnings
  - Drop unused stdio_ext.h header file
  - Kill logging check for selinux_enabled()
  - Drop usage of _D_ALLOC_NAMLEN
  - Add openrc_contexts functions
  - Fix redefinition of XATTR_NAME_SELINUX
  - Correct error path to always try text
  - Clean up process_file()
  - Handle NULL pcre study data
  - Fix in tree compilation of utils that depend on libsepol


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libselinux
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libselinux


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-12
changelog:
  - Correct manpages regarding removable_context
  - build: follow standard semantics for DESTDIR and PREFIX


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


