# changelog

author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-2
changelog:
  - Wait for daemon ends
  - Resolves: #1072958
  - Do not include symlink to libmysqlclient if not shipping the library
  - Do not use scl prefix more than once in paths
    Based on https://www.redhat.com/archives/sclorg/2015-February/msg00038.html


author: Honza Horak <hhorak@redhat.com> - 1:10.0.17-4
changelog:
  - Include client plugins into -common package since they are used by both -libs
    and base packages.
  - Do not use libedit
  - Related: #1201988
  - Let plugin dir to be owned by -common
  - Use correct comment in the init script
  - Related: #1184604
  - Add openssl as BuildRequires to run some openssl tests during build
  - Related: #1189180
  - Fail in case any command in check fails
  - Related: #1124791
  - Fix mysqladmin crash if run with -u root -p
  - Resolves: #1207170


author: Honza Horak <hhorak@redhat.com> - 1:10.1.11-5
changelog:
  - Add missing requirements for proper wsrep functionality
  - Obsolate mariadb-galera & mariadb-galera-server (thanks Tomas Repik)
  - Resolves: #1279753
  - Re-enable using libedit, which should be now fixed
  - Related: #1201988
  - Remove mariadb-wait-ready call from systemd unit, we have now systemd notify support
  - Make mariadb@.service similar to mariadb.service


author: Honza Horak <hhorak@redhat.com> - 1:10.1.11-7
changelog:
  - Add Provides: bundled(pcre) in case we build with bundled pcre
  - Related: #1302296
  - embedded-devel should require libaio-devel
  - Resolves: #1290517


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.13-2
changelog:
  - Moved /etc/sysconfig/clustercheck
    and /usr/share/mariadb/systemd/use_galera_new_cluster.conf
    to mariadb-server-galera


author: Jakub Dorňák <jdornak@redhat.com> - 1:10.1.14-1
changelog:
  - Add selinux policy
  - Update to 10.1.14 (includes various bug fixes)
  - Add -h and --help options to galera_new_cluster


author: Pavel Raiskup <praiskup@redhat.com> - 1:10.1.14-3
changelog:
  - BR multilib-rpm-config and use it for multilib workarounds
  - install architecture dependant pc file to arch-dependant location


author: Honza Horak <hhorak@redhat.com> - 3:10.1.14-4
changelog:
  - Revert Update to 10.1.15, this release is broken
    https://lists.launchpad.net/maria-discuss/msg03691.html


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.19-1
changelog:
  - Update to 10.1.19
  - added temporary support to build with OpenSSL 1.0 on Fedora >= 26
  - added krb5-devel pkg as Buldrquires to prevent gssapi failure


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.19-2
changelog:
  - fixed bug 1382988
  - added comment to the test suite
  - test suite DISABLED for most builds in Koji, see comments


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.19-5
changelog:
  - Testsuite blacklists heavily updated. Current tracker: #1399847
  - Log-error option added to all config files examples
  - Resolves: #1382988


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.21-1
changelog:
  - Rebase to version 10.1.21
  - Most of the non-essential utilites has been moved to the new sub-package mariadb-server-utils
  - Patches "admincrash" and "errno" removed, they are no longer relevant
    "mysql-embedded-check.c" removed, no longer relevant
  - Buildrequires krb5-devel duplicity removed
  - Manpage for mysql_secure_installation extended
  - Preparation for the CrackLib plugin to be added (waiting for correct SELinux rules to be relased)
  - Related: #1260821, #1205082, #1414387


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.21-3
changelog:
  - Fix for some RPMLint issues
  - Fix: Only server utilities can be move to server-utils subpackage. The rest (from client)
    were moved back to where they came from (client - the main subpackage)
  - Added correct "Obsoletes" for the server-utils subpackage
  - Fixed FTBFS in F26 on x86_64, because of -Werror option
  - Related: #1421092, #1395127


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.21-4
changelog:
  - Cracklib plugin enabled
  - Removed strmov patch, it is no longer needed. The issue was fixed long ago in both MariaDB and MySQL


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.21-6
changelog:
  - Plugin oqgraph enabled
  - Plugin jemalloc enabled
  - 'force' option for 'rm' removed
  - Enabled '--big-test' option for the testsuite
  - Disabled '--skip-rpl' option for the testsuite = replication tests enabled
  - Multilib manpage added


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.24-1
changelog:
  - Rebase to 10.1.24
  - Build dependecies Bison and Libarchive added, others corrected
  - Disabling Mroonga engine for i686 architecture, as it is not supported by MariaDB
  - Removed patches: (fixed by upstream)
      Patch5:  mariadb-file-contents.patch
      Patch14: mariadb-example-config-files.patch
      Patch31: mariadb-string-overflow.patch
      Patch32: mariadb-basedir.patch
      Patch41: mariadb-galera-new-cluster-help.patch
  - Resolves: rhbz#1414387
      CVE-2017-3313
  - Resolves partly: rhbz#1443408
      CVE-2017-3308 CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464


author: Honza Horak <hhorak@redhat.com> - 3:10.1.24-3
changelog:
  - Downstream script mariadb-prepare-db-dir fixed for CVE-2017-3265
  - Resolves: #1458940
  - Check properly that datadir includes only expected files
  - Related: #1356897


author: Michal Schorm <mschorm@redhat.com> - 3:10.1.25-1
changelog:
  - Rebase to 10.1.25
  - Disable plugins 'cracklib' and 'gssapi' by default
  - Related: #1468028, #1464070
  - Looks like the testsuite removes its 'var' content correctly,
    no need to do that explicitly.


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.6-1
changelog:
  - Rebase to 10.2.6
  - SSL patch removed
  - 'libmariadb.so.3' replaced 'limysqlclient.so.18.0.0', symlinks provided
  - "make test" removed, it needs running server and same test are included in the testsuite


author: Honza Horak <hhorak@redhat.com> - 3:10.2.8-2
changelog:
  - Fix paths in galera_recovery and galera_new_cluster
    Resolves: #1403416
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Allow 4567 port for tcp as well
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Run mysql-prepare-db-dir as non-root
  - Sync mysql.init with community-mysql


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.8-5
changelog:
  - Fix building without client library part
  - Start building mariadb without client library part,
    use mariadb-connector-c package >= 3.0 instead
  - Use obosletes of "-libs" in "-common", if built without client library part


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.9-1
changelog:
  - Rebase to 10.2.9
  - Testsuite temorarly disabled in order to fast deploy critical fix
    Related: #1497234


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.9-2
changelog:
  - Fix of "with" and "without" macros, so they works
  - Use 'iproute' dependency instead of 'net-tools'
    Related: #1496131
  - Set server package to own /usr/lib64/mysql directory
  - Use correct obsolete, so upgrade from maridb 10.1 to 10.2 is possible
    with dnf "--allowerasing" option
    Related: #1497234
  - Fix building with client library


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.9-3
changelog:
  - Fix client library obsolete
    Related: #1498956
  - Enable testsuite again
  - RPMLint error fix:
    Remove unused python scripts which remained from TokuDB upstream
  - RPMLint error fix: description line too long


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.10-1
changelog:
  - Rebase to 10.2.10 version
  - Patch 2: mariadb-install-test.patch has been incorporated by upstream
  - Patch 8: mariadb-install-db-sharedir.patch; upstream started to use macros
  - Update PCRE check
  - Start using location libdir/mariadb for plugins
  - Move libraries to libdir
  - Divided to more sub-packages to match upstream's RPM list
    Resolves: #1490401; #1400463
  - Update of Cmake arguments to supported format
    Related: https://lists.launchpad.net/maria-discuss/msg04852.html
  - Remove false Provides


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.10-2
changelog:
  - Fix PID file location
    Related: #1483331, #1515779
  - Remove 'Group' tags as they should not be used any more
    Related: https://fedoraproject.org/wiki/RPMGroups


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.11-1
changelog:
  - Rebase to 10.2.11
  - Temporary fix for https://jira.mariadb.org/browse/MDEV-14537 introduced
  - Temporary fix for #1523875 intoruced
    Related: #1523875


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.12-1
changelog:
  - Rebase to 10.2.12
  - Temporary fix for https://jira.mariadb.org/browse/MDEV-14537 removed
  - TokuDB disabled


author: Honza Horak <hhorak@redhat.com> - 3:10.2.12-1
changelog:
  - Do not build connect plugin with mongo and jdbc connectors
  - Support MYSQLD_OPTS and _WSREP_NEW_CLUSTER env vars in init script,
    same as it is done in case of systemd unit file
    Related: #1455850
  - Print the same messages as before when starting the service in SysV init,
    to not scare users
    Related: #1463411


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.12-4
changelog:
  - Fix the upgrade path. Build TokuDB subpackage again, but build a unsupported
    configuration by upstream (without Jemalloc).
    Jemmalloc has been updated to version 5, which isn't backwards compatible.
  - Use downstream tmpfiles instead of the upstream one
    Related: #1538066


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.13-2
changelog:
  - Further fix of ldconfig scriptlets for F27
  - Fix hardcoded paths, move unversioned libraries and symlinks to the devel subpackage


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.15-1
changelog:
  - Rebase to 10.2.15
  - CVEs fixed: #1568962
    CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771 CVE-2018-2781
    CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2813 CVE-2018-2817
    CVE-2018-2819 CVE-2018-2786 CVE-2018-2759 CVE-2018-2777 CVE-2018-2810


author: Honza Horak <hhorak@redhat.com> - 3:10.2.15-2
changelog:
  - Use mysqladmin for checking the socket
  - Jemalloc dependency moved to the TokuDB subpackage.
    CMake jemalloc option removed, not used anymore.
    The server doesn't need jemalloc since 10.2: https://jira.mariadb.org/browse/MDEV-11059
  - Build MariaDB with TokuDB without Jemalloc.


author: Honza Horak <hhorak@redhat.com> - 3:10.3.8-3
changelog:
  - Move config files mysql-clients.cnf and enable_encryption.preset to correct
    sub-packages, similar to what upstream does


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.8-6
changelog:
  - Use openssl-devel instead of pkgconfig(openssl)
  - Enable conflicts against mysql (instead of community-mysql)
    Related: #1581034


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.9-1
changelog:
  - Rebase to 10.3.9
  - Add workaround for short SSL certificates
  - Fix parallel installability for x86_64 and i686 devel packages
  - CVEs fixed: #1603531
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.10-3
changelog:
  - Fix "-fstack-protector-strong" static analysis errors
    Resolves: #1624139
  - Add wsrep_sst_rsync_tunnel script, add README
    Resolves: #1650463
  - Fix few covscan issues
    Resolves: #1649707
  - Fix galera_new_cluster script
    Resolves: #1641663


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - Remove README.mysql-cnf as we don't ship example configuration files anymore
    Resolves: #1653318
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.17-1
changelog:
  - Rebase to 10.3.17
    Resolves: #1711265
    Resolves: #1701687
  - Add patch for server pkgconfig file location
  - Use logrotatedir macro on one more spot
  - Fix building of TokuDB with Jemalloc 5
  - Fix building with / without lz4
  - Fix "ggsapi" -> "gssapi" typo but keep the broken behaviour
  - Control building of the CACHING_SHA2_PASSWORD plugin
  - Fix the license tag
    Resolves: #1702707


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.11-1
changelog:
  - Rebase to 10.3.11
  - CVEs fixed:
    CVE-2018-3282, CVE-2016-9843, CVE-2018-3174, CVE-2018-3143, CVE-2018-3156
    CVE-2018-3251, CVE-2018-3185, CVE-2018-3277, CVE-2018-3162, CVE-2018-3173
    CVE-2018-3200, CVE-2018-3284


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.12-1
changelog:
  - Rebase to 10.3.12
  - Disable building of the caching_sha2_password plugin, it is shipped
    by 'mariadb-connector-c'
  - Remove libmariadb.pc, is it shipped by 'mariadb-connector-c'


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.12-6
changelog:
  - Enable mysql-selinux requirement
  - Tweak the testsuite execution, speed up the testsuite on rebuilds
  - Change weak dependency of RocksDB and TokuDB storage engines
    from Recommends to Suggests
  - Add "Suggests" weak dependencies to more storage engines


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.15-1
changelog:
  - Rebase to 10.3.15
  - CVEs fixed:
    CVE-2019-2510 CVE-2019-2537
  - CVEs fixed:
    CVE-2019-2614 CVE-2019-2627 CVE-2019-2628


author: Michal Schorm <mschorm@redhat.com> - 3:10.4.11-1
changelog:
  - Rebase to 10.4.11
    Related: #1756468
  - Remove 'bench' subpackage. Upstream no longer maintains it.
  - Use Valgrind for debug builds
  - Remove ancient obsoletions
  - Tweak build flags
  - Add patch for auth_pam_tool directory


author: Michal Schorm <mschorm@redhat.com> - 3:10.4.12-3
changelog:
  - Rebase mariadb-connector-c git submodule to commit fbf1db6
    For fix: https://jira.mariadb.org/browse/CONC-441


author: Michal Schorm <mschorm@redhat.com> - 3:10.4.13-3
changelog:
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages


author: Michal Schorm <mschorm@redhat.com> - 3:10.4.13-7
changelog:
  - Do CMake out-of-source builds
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - Use CMake macros instead of cmake & make direct commands
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    Other changes to compile flags must be specified *after* the %cmake macro


author: Michal Schorm <mschorm@redhat.com> - 2.3.1-3
changelog:
  - Fixed ownership of {_libdir}/mariadb (this dir must me owned by package)
  - Fixed ownership of {_sysconfigdir}/ld.so.conf.d (this dir must me owned by package)
  - Fixed redundnace on lines with {_sysconfigdir}/ld.so.conf.d
  - Fixed ownership of {_bindir} (only one program is owned, so let's be accurate)
  - Some comments added, for me and future maintainers


author: Michal Schorm <mschorm@redhat.com> - 2.3.2-1
changelog:
  - Rebase to version 2.3.2, patch needed (fixed by upstream in later versions)
  - Plugin dir moved from /libdir/plugin to /libdir/mariadb/plugin


author: Michal Schorm <mschorm@redhat.com> - 2.3.3-1
changelog:
  - Rebase to version 2.3.3
  - Patch dropped, solved by upstream; https://jira.mariadb.org/browse/CONC-231


author: Michal Schorm <mschorm@redhat.com> - 3.0.2-7
changelog:
  - Move header files to the same location, as they would be in mariadb-server
  - Add provides "libmysqlclient.so"


author: Michal Schorm <mschorm@redhat.com> - 3.0.2-9
changelog:
  - Add symlinks so more packages will build succesfully
  - Change libdir from .../lib64/mariadb to mysql
    Related: #1497234


author: Michal Schorm <mschorm@redhat.com> - 3.0.2-10
changelog:
  - Add scriptlets to handle errors in /usr/lib64/ created by older versions
    of mariadb and mariadb-connector-c pakages


author: Michal Schorm <mschorm@redhat.com> - 3.0.2-12
changelog:
  - Move library directly to libdir, don't create any symlinks to directories
  - Update scritplets, so they only check for old symlinks to directories
    Related: #1501933
  - Add 'Conflicts' with mariadb package on F<28
    Related: #1506441


author: Honza Horak <hhorak@redhat.com> - 3.0.5-3
changelog:
  - Add -config sub-package that delivers system-wide /etc/my.cnf and
    /etc/my.cnf.d directory, that other packages should use
    This package also obsoletes mariadb-config


author: Michal Schorm <mschorm@redhat.com> - 3.0.9-3
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Related: #1693966


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1 version
  - Disabling the ED25519 plugin
  - Plugindir patch upstreamed
  - Added debug build switch


author: Michal Schorm <mschorm@redhat.com> - 3.1.3-1
changelog:
  - Rebase to 3.1.3 version
  - Patch upstreamed
  - Remove glob from library version, as per Fedora Packaging Guidelines


author: Michal Schorm <mschorm@redhat.com> - 3.1.3-2
changelog:
  - Extract the prepared testsuite to the standalone subpackage so it can be run outside of the buildroot


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Augusto Caringi <acaringi@fedoraproject.org> - 3.0.1-2
changelog:
  - Update to top of 3.0 branch from GitHub 860e7f8b754f (version supporting dynamic linking)
  - Source tarball composed from upstream GitHub, because the latest version solves the issues
    with dynamic linking.


author: Michal Schorm <mschorm@redhat.com> - 3.0.6-1
changelog:
  - Rebase to 3.0.6
  - Raise the minimal version of the connector-c required, because of a fixed bug
    which affected connector-odbc builds


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Daiki Ueno <dueno@redhat.com> - 0.2.1-2
changelog:
  - remove unnesseary BR
  - don't embed rpath in executables
  - add docs
  - drop buildroot cleanup
  - preserve timestamp when make install


author: Daiki Ueno <dueno@redhat.com> - 0.2.2-1
changelog:
  - new upstream release
  - for Fedora 19 or later, use 'ruby(release)' instead of 'ruby(abi)',
    and also update the required Ruby ABI/release version to 2.0.0


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.2.4-5
changelog:
  - Ruby: Rebuild for ruby 2.1 / rubygems 2.2
  - Ruby: regenerate binding files with newer swig for -Werror=format-security
  - Perl: don't use %prefix/local, move installation directory to vendor directory


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-25
changelog:
  - Python 2 binary package renamed to python2-marisa
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-27
changelog:
  - Correct the conditional builds for fedora and rhel
  - Remove Group tag as its no longer needed
  - added %license macro for license files
  - Correct the license tag
  - Added fileslists more verbose for subpackages


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fix buildroot
  - Add COPYING license file to docs
  - Added {} braces around % macros
  - Own {_sysconfdir}/matchbox directory
  - Own {_datadir}/matchbox


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added making packages: tkmc, mcserv (xmc not work yet),
  - gziped man pages,
  - added %{_sysconfdir}/pamd.d/mcserv PAM config file.
  - added instaling icons,
  - added %{_sysconfdir}/profile.d/mc.sh,
  - in %doc added NEWS README,
  - removed %{prefix}/lib/mc/FAQ,
  - added mcserv.init script for mcserv (start/stop on level 86).


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - FIX spec:
     - added URL field,
     - in mc added missing %{prefix}/lib/mc/mc.ext, %{prefix}/lib/mc/mc.hint,
       %{prefix}/lib/mc/mc.hlp, %{prefix}/lib/mc/mc.lib, %{prefix}/lib/mc/mc.menu.


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - new version 3.5.27,
  - %dir %{prefix}/lib/mc/icons and icons removed from tkmc,
  - added commented xmc part.


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added new rpmfs script,
  - removed mcfn_install from mc (adding mc() to bash enviroment is in
    %{_sysconfdir}/profile.d/mc.sh),
  - %{_sysconfdir}/profile.d/mc.sh changed to %config,
  - removed %{prefix}/lib/mc/bin/create_vcs,
  - removed %{prefix}/lib/mc/term.


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - removed all references to non-existent mc.rpmfs
  - added mcedit.1 to the %files section
  - reverted to un-gzipped man pages (RedHat style)
  - removed double install line for mcserv.pamd


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - added support for mc alias in %{_sysconfdir}/profile.d/mc.csh (for csh and tcsh)
  - lowered number of SysV init scripts in %{_sysconfdir}/rc.d/rc[0,1,6].d
    (mcserv needs to be killed before inet)
  - removed all references to RPM_SOURCE_DIR
  - restored $RPM_OPT_FLAGS when compiling
  - minor cleanup of spec file: redundant directives and comments removed


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - updated to 4.1.6
  - added %attr macros in %files,
  - a few simplification in %install,
  - removed glibc patch,
  - fixed installing %{_sysconfdir}/X11/wmconfig/tkmc.


author: Michele Marziani <marziani@fe.infn.it>
changelog:
  - Merged spec file with that from RedHat-5.0 distribution
    (now a Hurricane-based distribution is needed)
  - Added patch for RPM script (didn't always work with rpm-2.4.10)
  - Corrected patch for mcserv init file (chkconfig init levels)
  - Added more documentation files on termcap, terminfo, xterm


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - added --without-debug to configure,
  - modification in %build and %install and cosmetic modification in packages
    headers,
  - added %{PACKAGE_VERSION} macro to Buildroot,
  - removed "rm -rf $RPM_BUILD_ROOT" from prep section
  - removed Packager field.


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - version 4.5.29
  - added default desktop icons for Red Hat desktop
  - added redhat-logos to requirements
  - added README.desktop to doc list for gmc
  - added locale data


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - version pre-4.5.30 with patch to make this link on alpha properly
    Mark as version 0.7 to denote not the official 4.5.30 release


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - removed rpm menu defs - we depend on gnorpm for these
  - fixed bug that caused crash if group doesnt exist for file


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - updated mc to work with mc 4.5.36.  Thanks to Brian Ryner
    <bryner@uiuc.edu> for providing the patch.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - builtin cpio vfs, change rpm extfs to use it -
    should speed up e.g. copyout from rpm by orders of magnitude
    patch by Jan Hudec <jhud7196@artax.karlin.mff.cuni.cz>
  - fix buglet in the patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - run %configure in the build phase, not the setup
  - modify Tim's patch to always just edit one file


author: Havoc Pennington <hp@redhat.com>
changelog:
  - rebuild in rawhide
  - fix prefix/share -> datadir
  - comment out gmc/mcserv subpackages, place order for asbestos suit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - cons.saver rewrite to use vcsa user from Jakub, #61149
  - make cons.saver attr(4711, vcsa, root)
  - require new dev package


author: Havoc Pennington <hp@redhat.com>
changelog:
  - don't build --with-included-slang on upstream recommendation
  - add uzip method from cvs, fixes some sort of format string problem
  - get fix for breaking zip files while browsing them from upstream


author: Karsten Hopp <karsten@redhat.de> 4.5.55-10
changelog:
  - support large files (#65159, #65160)
  - own /usr/lib/mc/extfs and /usr/lib/mc/syntax
  - fix NL translation (#63495)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 4.6.0-pre1
  - comment out the patches that don't apply, 
    if someone wants to spend time fixing them 
    that'd be great


author: Havoc Pennington <hp@redhat.com> 4.6.0pre3-3
changelog:
  - drop our translations, they are surely out of date
  - ugh, due to spec file weirdness hadn't actually used the new pre3
    tarball. disabled patches that no longer apply.
  - patch for #78506


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-2
changelog:
  - kill unneeded patches, update the rest for 4.6.0
  - build with system slang
  - first part of UTF-8ization


author: Warren Togami <wtogami@redhat.com> 4.6.0-7
changelog:
  - BuildRequires glib2-devel, slang-devel, XFree86-devel,
    e2fsprogs-devel, gettext
  - Copyright -> License
  - PreReq -> Requires
  - Explicit zero epoch in versioned dev dep
  - /usr/share/mc directory ownership
  - Improve summary
  - (Seth Vidal QA) fix for CAN-2003-1023 (Security)


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-11
changelog:
  - fix a bunch of buffer overflows and memory leaks (CAN-2004-0226)
  - fix hardlink handling in cpio filesystem
  - fix handling of filenames with single/double quotes and backslashes
    in %{_datadir}/mc/extfs/rpm
  - update php.syntax file (#112645)
  - fix crash with large syntax file (#112644)
  - update CAN-2003-1023 fix to still make vfs symlinks relative,
    but with bounds checking


author: Jakub Jelinek <jakub@redhat.com> 4.6.0-12
changelog:
  - fix a bug in complete.c introduced by last patch
  - export MC_TMPDIR env variable
  - avoid integer overflows in free diskspace % counting
  - put temporary files into $MC_TMPDIR tree if possible,
    use mktemp/mkdtemp


author: Jakub Jelinek <jakub@redhat.com> 4.6.1-0.1
changelog:
  - update from CVS
    - handle INFO/LICENSE and INFO/OBSOLETES in rpm vfs (#67341)
  - remove mc-cvs-unzip (#85073)
  - fix hotkey handling when not UTF-8 (Leonard den Ottolander, #120735)
  - allow terminal aliases for keys in mc.lib and ~/mc/ini,
    add gnome, xterm-new and rxvt aliases for xterm (#128163)


author: Karel Zak <zakkr@zf.jcu.cz>
changelog:
  - patch to prevent hangs on directory with '\n' in name, (#127164)
  - UTF8 hints support
  - original hint files conversion to UTF8 in the spec file


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.3
changelog:
  - patch to prevent displaying passwords in ftp paths (#131088)
    - also removes pswd from Delete/Copy/Error dialogs, etc.
  - added patch to fix/add extensions in mc.ext.in (#124242)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.6
changelog:
  - update from CVS
  - drop upstreamed vcsa and xtermaliases patches
  - sync the rest of the patches with upstream
  - update strippwd patch to eliminate passwords from dir hotlist
    and chdir error messages
  - update perl scripts (Leonard den Ottolander, #127973, CAN-2004-0494)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.7
changelog:
  - update from CVS
  - sync strippwd patch with upstream
  - merged hp48.in patch to extfs patch (from Leonard den Ottolander)
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.8
changelog:
  - update from CVS
  - drop mc-php.syntax, more recent version in upstream
  - add utf8-input patch
  - sync strippwd, uglydir, extensions patches with upstream
  - add 8bitdefault patch to enable 8-bit input by default


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - drop upstreamed smallpatches patch
  - install non-en man pages and fix encoding (#137036)
  - fix possible mem leak in strippwd patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.9
changelog:
  - update from CVS
  - convert help files in /doc to UTF-8
  - add --enable-charset (#76486)
  - drop upstreamed 8bitdefault, extfs patch
  - update partially upstreamed strippwd and extension patches
  - add UTF-8 help patch from Vladimir Nadvornik (#136826)
  - add promptfix patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.10
changelog:
  - update from CVS
  - update promptfix patch, drop upstreamed strippwd patch
  - add badsize patch to fix displaying of filesizes >2GB
  - sync UTF-8 patches with upstream
  - replace autogen.sh style with configure


author: Jindrich Novy <jnovy@redhat.com> 4.6.1-0.11
changelog:
  - update from CVS
    - fix #141095 - extraction of symlinks from tarfs is now fine
  - add growbuf patch from Roland Illig #141422 to view files
    in /proc and /sys properly


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add msglen patch to calculate message length correctly in UTF-8 (#141875)
    (thanks to Nickolay V. Shmyrev)
  - convert hints for ru, uk, zh, man page conversion fix


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.1
changelog:
  - update from CVS
  - sync UTF-8 patches with upstream
  - drop upstreamed badsize, growbuf patches
  - faster FISH upload support (#140750) - from Dmitry Butskoj


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.2
changelog:
  - update from CVS - problem in uzip.in fixed by upstream (#141844)
  - fix msglen patch to deal with wide UTF-8 characters (#141875)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.3
changelog:
  - rewrote mbstrlen() in utf8 patch, this fixes:
    - dir name truncation in command prompt for ja_JP, ko_KR locales (#142706)
    - localized texts will fit dialog windows and pull-down menus - tweak create_menu()
    - dialog titles are centered correctly
  - fix bad displaying of mc logo in help (#143415)
  - merge msglen patch with utf8 patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.4
changelog:
  - update from CVS (fixes #143586)
  - merge all UTF-8 related patches to single .utf8 patch
  - drop BuildRequires gettext-devel, autopoint no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.5
changelog:
  - update from CVS
  - sync the .utf8 patch with upstream
  - fix infinite loop hang when copying/deleting some strangely
    named files (#150569)
  - drop BuildRequires to gettext, XFree86-devel -> xorg-x11-devel
  - don't define umode_t on ppc64


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.6
changelog:
  - fix refusal to chdir/start file action when spaces are typed in
    command prompt and Enter is pressed (#151637)
  - undefinition of umode_t for ppc64 is no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.9
changelog:
  - update from CVS
  - sync with .utf8 patch
  - fix broken charset conversion feature in the .utf8 patch, 
    Andrew V. Samoilov (#154516)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.10
changelog:
  - update from CVS
  - sync with .utf8 patch and some minor gcc4 fixups
  - add .fixes patch
  - drop upstreamed .spaceprompt patch
  - update .userhost, .64bit patch
  - add mcview


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.13
changelog:
  - don't hang when ftpfs connection times out - Hans de Goede (#166976)
  - fix extension file to better fit FC (xpdf->evince, lynx->links)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.14
changelog:
  - backport the new Find dialog from upstream (#167493)
  - disable Xorg usage and drop the dependency
  - enable samba vfs
  - highlight "%check" in spec files (Mike A. Harris)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.15
changelog:
  - fix segfault when copying symlinks of a particular type and
    fix creation of dangled symlinks (#168184)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.16
changelog:
  - fix memory leak in mc-utf8 patch, thanks to Marcin Garski (#169549)
  - fix mc-find patch to support UTF-8, thanks to Victor Abramoff (#169531)
  - remove bogus condition from mc-symcrash patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.17
changelog:
  - fix duplicated keyboard shortcuts in menus for Czech locale (#169734)
  - fix ctrl-t page code recoding for Russian locale, thanks to
    Andy Shevchenko (#163594)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.18
changelog:
  - fix off-by-one highlighting when searching backwards in mcedit (#169823)
  - fix yet another duplicates in menus for Czech locale


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.19
changelog:
  - update from CVS
  - convert spec to UTF-8
  - sync utf8, promptfix, 64bit patches
  - drop upstreamed gcc4, ftpcrash, find, symcrash, cstrans, searchfix patches
  - drop ctrl-t patch
  - update userhost patch to let the edited/viewed file name be displayed in
    xterm title


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.21
changelog:
  - add vertical scrollbars to main panels and listboxes
  - fix memleak in menu.c caused by UTF-8 patch
  - display UTF-8 characters corectly in mcview (#172571)
  - fix extensions patch


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.22
changelog:
  - update from upstream CVS for the new slang support
  - use internal slang-2.0.5 in mc for now
  - temporarily drop slang-devel dependency
  - don't use gpm to avoid hangs caused by it (#168076, #172921),
    console mouse support works even without gpm
  - display scrollbars correctly even if UTF-8 locale isn't set (#173014)
  - add slang2 support to utf8 patch (Leonard den Ottolander)
  - update %description


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-0.23
changelog:
  - update from CVS to fix the usage of glibc private symbols
  - don't try to display UTF8ized characters in hex viewing mode
    and display the characters correctly (#173309)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-4
changelog:
  - don't segfault when LANG is not set, thanks to Andy Shevchenko (#174070)
  - drop specsyntax patch, applied upstream
  - sync NVRE with Fedoras
  - depend on external slang [now updated to 2.0.5] (#174662)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-5
changelog:
  - correctly concatenate directory and file in concat_dir_and_file()
  - highlight PHP files correctly (#174802)
  - use evince instead of gv to view ps files
  - align mini status bar with main panels


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-6
changelog:
  - display free space on a device assigned to current directory in
    main panels
  - correctly diplay characters in mcview for non-UTF-8 LANG set (#174007)
    thanks to Dmitry Butskoy


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-7
changelog:
  - update from CVS - fixes syntax file for PHP
  - make displaying of free space configurable
  - fix permission highlighting (#177100)
  - redirect stdout and stderr of several apps run on background
    to /dev/null to not to mess up mc interface (#178833)
  - refresh directories to avoid errors caused by copying
    files to non-existent directories (#177111)
  - add an option to insert changelog entry in mcedit,
    thanks to Radek Vokal


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-8
changelog:
  - make mc FHS compliant: store config files in /etc/mc and
    extfs/*.ini files in /etc/mc/extfs instead of /usr/share/mc
    (#2188) - the oldest open Red Hat bug is now gone ;)
  - fix warnings


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-9
changelog:
  - fix hotkey conflict in Layout options (#183282)
  - move syntax configuration file from /usr/share/mc to /etc/mc
  - save layout settings pernamently for showing free space, not
    only for current session (#182127)
  - fix audio bindings, make firefox default html binding


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-13
changelog:
  - comment fallback to use only dd in FISH upload patch
  - drop .promptfix patch so that prompt is displayed only
    once while in panels


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-16
changelog:
  - fix the free space widget patch: stat()s filesystem less
    frequently, display correct info in all circumstances


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-17
changelog:
  - apply UTF-8 fixes from Vladimir Nadvornik
  - move the free space widget to the bottom of the main panel
    and don't use highlighting


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-18
changelog:
  - apply 00-74, 00-78 patches from Egmont Koblinger with
    UTF-8 fixes related to filename truncation and file search


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-21
changelog:
  - update to new mc snapshot (fixes #195810)
  - drop .segfault patch, applied upstream
  - highlight "Serial:" and "Copyright:" obsolete RPM tags so that
    everyone is aware it's obsolete


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-22
changelog:
  - use less ugly UTF-8 special characters for scrollbars
  - properly highlight RPM tags that differ in case while
    editing spec file


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-23.fc6
changelog:
  - update to new mc CVS snapshot
  - drop .case, .rpmobsolete patches - applied upstream
  - allow exit command even on non-local filesystems (#202440)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-24.fc6
changelog:
  - fix segfault caused by improper parsing of ls output while
    deleting files via shell link (#202623)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-27.fc6
changelog:
  - display hex values correctly even for non-UTF8 locales, thanks
    to Egmont Koblinger
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-34
changelog:
  - fix #214255 - sh vfs disconnects with special character in filename
  - drop fish-upload patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-35
changelog:
  - update to new CVS snapshot
  - drop .fishfix, .rpmconf patches, applied upstream
  - fix IPv6 patch (should fix #206234 and #213212)
  - don't crash when directory ending with newline is listed (#215909),
    disable support for directories with '\n' in name to avoid
    further issues (remove .uglydir patch) and report chdir error


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-37
changelog:
  - update bindings
  - attempt to fcntl() descriptors appropriatelly so that subshell
    doesn't leave them open while execve()ing commands (#217027)
  - more general fix for #215909


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-40
changelog:
  - update to new upstream CVS snapshot
  - drop upstreamed tmpcrash patch
  - reenable gpm support as it is now fixed (#168076)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-43
changelog:
  - display free space correctly for multiple filesystems (#225153)
    (thanks to Tomas Heinrich for patch)
  - fix up configs


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-46
changelog:
  - update to new upstream CVS snapshot (2007-06-04-22)
  - don't print prompts multiple times when switching
    between mc and subshell


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-50
changelog:
  - don't preserve attributes in copy/move while the option is
    switched off (#195614)
  - rebuild to fix iso9660 vfs because of missing gawk in
    buildroot(#381751, #363611)


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-1.pre1
changelog:
  - update to 4.6.2-pre1
  - forwardport the UTF-8 patch to 4.6.2-pre1 and convert new
    functionality to support UTF-8


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-3.pre1
changelog:
  - don't segfault when hint or help files are missing (#439025),
    thanks to Tomas Heinrich
  - fix displaying of 8bit encoded files in UTF-8 (#426756),
    thanks to Andrew Zabolotny
  - don't gzip man pages, leave it to brp-compress


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-5.pre1
changelog:
  - don't try to parse obsolete RPM tags in RPM VFS (#457912),
    thanks to Milan Broz
  - use correct extension for lzma and regenerate so that it applies
    with fuzz==0


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-6.pre1
changelog:
  - do not change directory in panel to subshell directory
    when switched back from subshell (#460633)


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-7.pre1
changelog:
  - allow switching of trailing spaces/tab highlighting with crtl-v,
    patch from Jan Engelhardt (#464738)
  - update the UTF-8 patch accordingly


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-10.pre1
changelog:
  - fix segfault in mc editor when pressing ctrl+right (skip one word)
    in binary file (#500818)
  - don't use dpkg tools for *.deb files (#495649), thanks to Dan Horak


author: Jindrich Novy <jnovy@redhat.com> 4.6.2-11
changelog:
  - update to mc-4.6.2 release
  - drop .8bit-hex, .preserveattrs, .cloexec, .7zip and part of
    .utf8-look-and-feel patch, applied upstream
  - sync the rest of patches, adopt upstream version of UTF8 patch
  - update URL and source links
  - add required BR


author: Jindrich Novy <jnovy@redhat.com> 4.6.99-0.20090731git
changelog:
  - update to latest GIT mc
  - forwardport prompt fix and exit patch, keep IPv6 patch and drop the others


author: Jindrich Novy <jnovy@redhat.com> 4.7.0-0.9.pre4.20091221git
changelog:
  - provide yum-repo.syntax (#549014)
  - avoid occasional crash while reading panels (#548987)
  - remove duplicates from filelist
  - enable mcvfs, disable rpath


author: Jindrich Novy <jnovy@redhat.com> 4.7.1-3
changelog:
  - patches from upstream:
    - fix crash in mcedit ran stand-alone (#571570)
    - fix segfault when trying to panelize find results (#569823)


author: Jindrich Novy <jnovy@redhat.com> 4.7.3-3
changelog:
  - fix broken directory copying, backport from upstream (#624973)
  - backport patch fixing crash while copying files to directory
    with '?' letters in its name (#576622)


author: Jindrich Novy <jnovy@redhat.com> 4.7.3-4
changelog:
  - fix segfault when pressing Cancel in Replace String dialog (#629847)
  - show proper contents in history and fix memleak (ticket #2299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.5-0.2.pre1
changelog:
  - fix crash in opening mc VFS (#661290, #588795, #653156)
  - fix crash while creating a VFS timestamp (#660308)


author: Jindrich Novy <jnovy@redhat.com> 4.8.6-2
changelog:
  - sanitize of MC_EXT_SELECTED variable when viewing
    multiple files, CVE-2012-4463 (#862814)
    https://www.midnight-commander.org/ticket/2913


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
  - attempt to fix segfault while passing messages to widgets (#907045, #912033)
  - fix possible segfault when freeing a VFS (#923415)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-1
changelog:
  - updated to 4.8.19
  - drop use slang and use ncurses. There are only few packages which are using
    slang. As ncurses support is fully working now it makes more sense to
    use it instead slang (Solaris 11.3 mc uses now ncurses)
  - instead passing -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE to CFLAGS use
    --enable-largefile autoconf param
  - removed Group, BuildRoot and %clear (new packaging policy)
  - added pkgconfig to BuildRequires
  - replaced groff by groff-base in BuildRequires (only nfroff is used)
  - use %autosetup in %prep
  - added using %{make_build} and %{make_build} macros
  - "rm -rf $RPM_BUILD_ROOT" on beginning %install is no longer needed
  - mcfs is no longer supported (removed --enable-vfs-mcfs autoconf option)
  - added explicit enabled other VFSesess to force necessary checks


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-2
changelog:
  - go back to slang as it is serious issue with shift-f6 when ncurses is used
    displaying "Delete" instead "Move As" dialog (#1436394)
  - added slang %bcond to simplify experiments with switching to ncurses
  - reformat %description to 80 cols
  - really remove Group
  - %defattr() is no longer needed
  - simplifications in %files
  - use %{buildroot} macro
  - build --with-x (it does not add X11 libraries dependencies)
  - cons.saver no longer need to be 711 (changed to 755)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.23-3
changelog:
  - add python3 patch: port to python3
  - added python subpackage with s3+ and uc1541 extfs backend scrips to minimise
    base package dependencies
  - added python3-boto to python subpackage dependencies
  - use -Wno-strict-aliasing in CFLAGS is no longer needed
  - added spec.syntax patch: improve rpm spec files syntax colouring
  - added default_setup patch: enable by default lynx navigate with arrows keys
    and auto save setup


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.23-5
changelog:
  - just keep perl-interpreter BR because of man2hlp,
    it is a perl script required by build
  - require aspell-en, otherwise an annoying error prompt
    is displayed while editing any file


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.23-6
changelog:
  - re-add BR: perl-generators, it is required for generating
    rpm deps from the embedded VFS perl scriptlets


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.23-7
changelog:
  - disable aspell support until it is clear how to set up
    aspell dependencies or avoiding annoying error message
    when no dictionary is found every time a file is edited


author: Alex Williamson <alex.williamson@redhat.com> - 0.46-1
changelog:
  - 6bfe7b0a22c4 ("Add back BuildRequires for systemd")
  - 9cf1afc50b2c ("Allow advanced JSON output from the list command")
  - 1c98f58ff505 ("Fixup Makefile and spec for README.md")
  - 838cac5ac9f0 ("Merge pull request #12 from cohuck/markdown")
  - 2eeda7456288 ("README: convert to markdown")
  - 70efa0a3a2ab ("Merge pull request #11 from cohuck/example-verbose")
  - 28fe248613c8 ("fix attribute output examples")
  - 37bb8f26d1c2 ("Update man page")
  - 8f9798a32884 ("Let --index be abbreviated with -i")
  - 7ea03365a192 ("Split mdev types from list command")
  - b323cf96e4e7 ("Consistent, gratuitous quoting")
  - 84044a178502 ("Fix man page install")
  - 4e4e45a03154 ("Merge pull request #10 from cohuck/manpage")
  - f37b1aa5625d ("add a man page")
  - 840c86d1f79c ("simplify attribute handling")
  - 1226ba8e4b39 ("Merge pull request #7 from cohuck/json-import-export-doc")
  - 02ddfca4d1a2 ("README: update with JSON")
  - 0ca6019ba007 ("help text: fix typos")
  - 02ca8f9756cd ("Dump and import support")
  - a2417e68246d ("Merge pull request #6 from cohuck/print_index")
  - a7c759ea3788 ("print index when listing attributes")
  - 386af2db03a7 ("Interpret escapes")
  - 88033494334e ("Attribute support")
  - b08f4939634c ("Rework start logic, add uuidgen support and list active feature")
  - b2cf2d1bf1f8 ("Note 'make rpm' support")
  - d90876b93f5f ("JSON config files")
  - ead45a253a2e ("Merge pull request #5 from cohuck/improve-comments")
  - 4d533d8adee5 ("Merge pull request #4 from cohuck/realpath")
  - 2a101c6de4e4 ("tweak some comments")
  - 387eb4fc84e0 ("use realpath for canonicalization")
  - d74bf93dbc79 ("mdevctl: Respin")
  - b8c98109e307 ("Merge pull request #3 from cohuck/readme-uuidgen")
  - 47e4d255baf2 ("README: avoid inline `uuidgen`")
  - 863417ee7a52 ("Merge pull request #2 from c3d/whitespace-and-usage-cleanup")
  - dc1d6fc95118 ("Trailing whitespace cleanup")
  - 97b393552ab4 ("Put usage message in a single large blob of text")
  - b439f53017f3 ("Merge pull request #1 from cohuck/destdir")
  - 205040b3c006 ("Makefile: drop extra '/'")
  - c51ebb40d3f6 ("mdevctl: Move to https://github.com/mdevctl/mdevctl")
  - 914c0076535b ("mdevctl: Don't start mdevs created with --manual")
  - 9e84529a5ddd ("mdevctl: Implement defaults and per mdev start option")
  - bb5135475bd8 ("mdevctl: Add RPM build support")
  - d1f6110c59d4 ("mdevctl: Minor usage fixes")
  - 42ba1670288f ("Merge pull request #1 from cohuck/improve_cmdline")
  - d27ba583f77b ("mdevctl: improve commandline handling")
  - 5114f9eb8268 ("mdevctl: Initial commit")


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Simone Caronni <negativo17@gmail.com> - 1.1.0-9
changelog:
  - Added patches for file transfer and status time workaround:
    http://www.lilotux.net/~mikael/pub/meanwhile/
  - Spec file formatting.


author: Simone Caronni <negativo17@gmail.com> - 1.1.0-12
changelog:
  - Fix documentation generation.
  - SPEC file cleanup.
  - Documentation is now noarch.
  - Run autotools on source; remove aarch64 patch.


author: Paul Lindner <lindner@inuus.com> - 1.2.2-3
changelog:
  - Enable build-time regression tests
  - add dependency on initscripts
  - remove memcached-debug (not needed in dist)
  - above suggestions from Bernard Johnson


author: root <lindner@inuus.com> - 1.2.3-2
changelog:
  - Upgrade to 1.2.3 upstream
  - Adjust make install to preserve man page timestamp
  - Conform with LSB init scripts standards, add force-reload


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Joe Orton <jorton@redhat.com> - 0:1.4.5-2
changelog:
  - LSB compliance fixes for init script
  - don't run the test suite as root
  - ensure a constant timestamp on the sysconfig file


author: Paul Lindner <lindner@inuus.com> - 0:1.4.7-1
changelog:
  - Upgrade to memcached 1.4.7 (http://code.google.com/p/memcached/wiki/ReleaseNotes147)
  - Fix some rpmlint errors/warnings.


author: Paul Lindner <lindner@mirth.inuus.com> - 0:1.4.13-1
changelog:
  - Upgrade to memcached 1.4.13
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1413
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1412
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1411


author: Joe Orton <jorton@redhat.com> - 0:1.4.15-1
changelog:
  - update to 1.4.15 (#782395)
  - switch to simple systemd service (#878198)
  - use systemd scriptlet macros (Václav Pavlín, #850204)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.28-1
changelog:
  - update to 1.4.28
  - listen only on loopback interface by default (#1182542)
  - use upstream unit file (#1350939)
  - remove obsolete macros and scriptlet


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Rafael Aquini <aquini@linux.com> - 0.3.0-4
changelog:
  - Update upstream fixes for memkind-0.3.0
  - Switch old init.d scripts for systemd unit service
  - Fix fc24 build error


author: Jonathan Shapiro <shap@eros-os.com> - 0.9.4-2
changelog:
  - update to 0.9.4-2
  - install contrib directory
  - set up required path for hgk
  - install man5 man pages


author: Neal Becker <ndbecker2@gmail.com> - 1.0-5
changelog:
  - Move hgk-related py files to hgk
  - Put mergetools.hgrc in /etc/mercurial/hgrc.d
  - Add hgk.rc and put in /etc/mercurial/hgrc.d


author: Neal Becker <ndbecker2@gmail.com> - 1.0-12
changelog:
  - Remove xemacs pkg - this is moved to xemacs-extras
  - Own %{python_sitearch}/{mercurial,hgext} dirs


author: Neal Becker <ndbecker2@gmail.com> - 1.1.2-5
changelog:
  - Own directories bash_completion.d and zsh/site-functions
    https://bugzilla.redhat.com/show_bug.cgi?id=487015


author: Neal Becker <ndbecker2@gmail.com> - 3.4.1-1
changelog:
  - Update to 3.4.1
  - Obsolete emacs-mercurial{-el}
  - own _emacs_sitelispdir/mercurial
  - use standard emacs macros


author: Sebastian Kisela <skisela@redhat.com> - 4.6.2-1
changelog:
  - New release 4.6.2.
  - Convert deprecated specfile python macros to use python2 macros.
  - Explicitly depend on gcc, as it was removed from buildroot default packages.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-4.20140118
changelog:
  - Fix up building drivers on AArch64, enable LLVM there.
  - Eliminate some F17 cruft from the spec, since we don't support it anymore.
  - Conditionalize with_radeonsi on with_llvm instead of ppc,s390 && >F-17.
  - Conditionalize libvdpau_radeonsi.so.1* on with_radeonsi instead of simply
    with_llvm to fix a build failure on AArch64.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-6.20140118
changelog:
  - Fix accidentally inverted logic that meant radeonsi_dri.so went missing
    on all architectures instead of just ppc and s390. Sorry!


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1-1.20140305
changelog:
  - mesa: Bump version to 10.1 (final) (Ian Romanick)
  - glx/dri2: fix build failure on HURD (Julien Cristau)
  - i965: Validate (and resolve) all the bound textures. (Chris Forbes)
  - i965: Widen sampler key bitfields for 32 samplers (Chris Forbes)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1.1-3.20140430
changelog:
  - Update to today snapshot
  - apply as downstream patches for reporting GPU max frequency on r600 (FD.o #73511)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.1.rc1.20140505
changelog:
  - Enable omx on x86 and arm (RHBZ #1094199) (kwizart)
  - Split _with_xa from _with_vmware (RHBZ #1094199) (kwizart)
  - Add _with_xa when arch is arm and _with_freedreeno (RHBZ #1094199) (kwizart)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.3.rc1.20140505
changelog:
  - Move gallium-pipe to the correct sub-package (RHBZ #1094588) (kwizart)
  - Move egl_gallium.so to the correct location (RHBZ #1094588) (kwizart)
  - Switch from with to enable for llvm shared libs (kwizart)


changelog: - Rebase to 'master' branch (f381c27c548aa28b003c8e188f5d627ab4105f76 commit)
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.1.f381c27c548aa28b003c8e188f5d627ab4105f76


changelog: - c40d7d6d948912a4d51cbf8f0854cf2ebe916636 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
author:
  Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636.1


changelog: - 10.4 c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.1.c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f


changelog: - 80771e47b6c1e47ab55f17311e1d4e227a9eb3d8 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


changelog: - add swrast to dri driver list
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.1.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 11.3.0-0.1.gitea2bff1
changelog:
  - 11.3.0 (gitea2bff1)
  - Add SWR state-tracker (but disable because build is broken)
  - Use gallium-osmesa instead of classic osmesa (RHBZ #1305588)
  - Remove very old changelogs


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.4.rc2
changelog:
  - Update eglext.h to 20161230 version this brings in some new defines needed
    by some apps / libraries


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.5.rc2
changelog:
  - Fix GLX_SGIX_fbconfig extension dispatching with glvnd, this fixes games such
    as "The Binding of Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam


author: Hans de Goede <hdegoede@redhat.com> - 17.0.1-3
changelog:
  - Fix glXGetDriverConfig not working with glvnd (rhbz#1429894)
  - Fix indirect rendering, add libGLX_indirect.so.0 symlink (rhbz#1427174)


author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.0-2
changelog:
  - Fix package to depend on lesstif-devel
  - -devel now Requires libGL-devel
  - use name var in -devel Requires
  - actually use RPM_OPT_FLAGS
  - symlink devel libs, not copy (except for .*.*.*)


author: Adam Jackson <ajackson@redhat.com> 6.5.1-0.1
changelog:
  - Move revision back up to 6.5.1 for upgrade path from FC5.  Misc other
    spec fixes as per bug #188974 comment 30.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - upgrade to cvs snap 2.4.0.90 with pile of bugfixes from 
    this weekend
  - change default theme to bluecurve and require new redhat-artwork


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.0.91 with raise/lower keybindings for msf, fixes to fullscreen
  - more apps that probably intend to be, fix for changing number of
    workspaces, fix for moving windows in multihead


author: Havoc Pennington <hp@redhat.com>
changelog:
  - grow size of top resize, and display proper cursor on enter notify
  - require latest intltool to try and fix metacity.schemas by
    regenerating it in non-UTF-8 locale


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.5.90
  - add little script after configure that checks what config.h
    contains, to be sure we detected all the right features.


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.16-1
changelog:
  - Update to cvs snapshot to add the ability to 
    runtime enable compositor
  - change %makeinstall to make install DESTDIR=..


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.17-1
changelog:
  - Update to latest cvs snapshot to give meaningful failure error
    messages
  - Don't remove build root in install, because it triggers a
    rebuild of metacity


author: Soren Sandmann <sandmann@redhat.com> 2.15.5-1
changelog:
  - Update metacity to a cvs snapshot, and libcm 0.0.22. (The standalone
    libcm package is being put through the package review process).


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Remove GL dependencies.
  - Remove static-cm patch
  - add patch to fix more CurrentTime race conditions (bug 206263)


author: Colin Walters <walters@redhat.com> - 2.21.5-2
changelog:
  - Add patch for avoiding moving windows across workspaces
    This makes clicking on links in firefox do what you want.
    http://bugzilla.gnome.org/show_bug.cgi?id=482354


author: Colin Walters <walters@redhat.com> - 2.21.8.svn3554-1
changelog:
  - Drop random macros at top of file; spec files should be as amenable
    to static analysis as possible, easing our way into the bright future
    where our software build process isn't a horrible mismash of a
    preprocessor on shell script, with manual editing required, 
    but something scriptable.
  - Update to SVN 3554, to which our patches were designed to apply
  - Readd patch metacity-2.21.13-dont-move-windows.patch, which makes
    Firefox behave as those multiple-workspace users desire.


author: Owen Taylor <otaylor@redhat.com> - 2.27.0-5
changelog:
  - Add a fix for http://bugzilla.gnome.org/show_bug.cgi?id=588119,
    remove no-longer-needed no-lame-dialog patch


author: Lennart Poettering <lpoetter@redhat.com> - 2.27.0-6
changelog:
  - Apply two trivial patches for bell/sound
  - http://bugzilla.gnome.org/show_bug.cgi?id=593356
  - http://bugzilla.gnome.org/show_bug.cgi?id=593355


author: Lennart Poettering <lpoetter@redhat.com> - 2.27.0-7
changelog:
  - Apply another trivial patch related to sound events
  - http://bugzilla.gnome.org/show_bug.cgi?id=593358


author: Peter Robinson <pbrobinson@gmail.com> - 2.27.0-9
changelog:
  - Add upstreamed patch for option to force fullscreen for sugar
  - https://bugzilla.redhat.com/show_bug.cgi?id=516225


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Require gnome-themes rather than nodoka-metacity-theme (rhbz 532455, Stijn Hoop)
  - Add patches for GNOME bugs
     445447 - Application-induced window raise fails when raise_on_click off (rhbz 526045)
     530702 - compiz doesn't start if metacity compositor is enabled (rhbz 537791)
     559816 - Doesn't update keybindings being disabled/cleared (rhbz 473224)
     567528 - Cannot raise windows from applications in Tcl/Tk and Java (rhbz 503522)
     577576 - Failed to read saved session file warning on new sessions (rhbz 493245)
     598231 - When Chromium rings the bell, metacity quits (rhbz 532282)
     598995 - Don't focus ancestor window on a different workspace (rhbz 237158)
     599097 - For mouse and sloppy focus, return to "mouse mode" on motion (rhbz 530261)
     599248 - Add no_focus_windows preference to list windows that shouldn't be focused (rhbz 530262)
     599261 - Add a new_windows_always_on_top preference (rhbz 530263)
     599262 - Add XFCE Terminal as a terminal
     604319 - Handle XError and XIOError for unknown displays (rhbz 537845)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-15
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.30.0-5
changelog:
  - Add a patch to fix confusion between windows (rhbz #533066)
  - Add additional tweeks no_focus_windows and new_windows_always_on_top
    preferences (gnome bz 599248, gnome bz 599261)


author: Colin Walters <walters@verbum.org> - 2.32.0-1.git20110228
changelog:
  - Upstream git snapshot
    Includes Alt-` binding which we really want for gnome-shell
  - Drop upstreamed patches
  - Switch to my auto-autogen snippet which automatically invokes configure,
    so we can build from a pure git archive
  - Instead of using autoreconf, just rm -f configure and let autogen do
    the work
  - BR gnome-common so autogen works


author: Florian Müllner <fmuellner@redhat.com> 2.34.2-1
changelog:
  - Update to 2.34.2
  - Remove patches:
    - screenshot-forkbomb.patch: screenshot keybindings have been moved
      to gnome-settings-daemon
    - workspace.patch: default preference values now defined in
      gsettings-desktop-schemas
    - default-window-icon.patch: included upstream
  - Rebase remaining patches
  - Adjust spec file to dropped GConf dependency


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-1
changelog:
  - Initial package
  - Removed chrpaths
  - Added BR chrpath
  - Removed exec permissions to silence spurious-executable-perm warning


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-2
changelog:
  - Initial release changed from 0 to 1
  - Removed chrpath command
  - Added metis-width-datatype.patch only for 64bit systems
  - Build commands completely changed to use %cmake
  - TEMPORARY fix for files in "/usr/lib"


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-3
changelog:
  - Static sub-package removed
  - TEMPORARY fix for files in "/usr/lib" removed
  - Added patches for set up shared GKlib and soname libmetis 
  - Removed BR chrpath


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-4
changelog:
  - Added patch to sets up GKREGEX, GKRAND, libsuffix options to the Makefiles
  - Configured patch2 condition
  - soname version of libmetis changed to 0
  - Added cmake options and flags to check openmp
  - GKlib_includes destination changed to include/metis
  - Added commands to generate binaries man-page
  - Added BR openmpi-devel, pcre-devel, help2man


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-9
changelog:
  - Added BR 'perl-Carp' for Fedora
  - Excluded manpage creation for 'cmpfillin' and 'graphchk' commands


author: Antonio Trande <sagitter@fedoraproject.org> - 5.0.3-10
changelog:
  - Removed BR 'perl-Carp' (Bug 926996)
  - Added LD_PRELOAD before help2man tasks to fix manpage shared_lib_error


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.1-4
changelog:
  - Switch to using upstream (GNU) binutils 2.19.1.  It's exactly the
    same as the MinGW version now.


author: Richard W.M. Jones <rjones@redhat.com> - 2.20.51.0.10-1
changelog:
  - Synchronize with Fedora native version (2.20.51.0.10).
  - Note however that we are not using any Fedora patches.


author: Kalev Lember <kalev@smartlink.ee> - 2.21-1
changelog:
  - Update to 2.21
  - Added a patch to use runtime pseudo reloc v1 by default as the version of
    mingw32-runtime we have does not support v2.
  - Don't own the /usr/i686-pc-mingw32/bin/ directory


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-1
changelog:
  - Update to 2.22.52 20120225 snapshot
  - Bump the BR/R: mingw32-filesystem to >= 95
  - Rebuild using the i686-w64-mingw32 triplet
  - Dropped some obsolete configure arguments
  - Temporary provide mingw-strip, mingw-objdump and mingw-objcopy
    in preparation for win32+win64 support


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-2
changelog:
  - Renamed the source package to mingw-binutils (RHBZ #673786)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.22.52-3
changelog:
  - Made the package compliant with the new MinGW packaging guidelines
  - Added win64 support
  - Added a mingw-binutils-generic package containing toolchain
    utilities which can be used by both the win32 and win64 toolchains
  - Enable the testsuite
  - Package the license
  - Fix source URL


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24-5
changelog:
  - Fix CVE-2014-8501 (RHBZ #1162578 #1162583)
  - Fix CVE-2014-8502 (RHBZ #1162602)
  - Fix CVE-2014-8503 (RHBZ #1162612)
  - Fix CVE-2014-8504 (RHBZ #1162626)
  - Fix CVE-2014-8737 (RHBZ #1162660)
  - Fix CVE-2014-8738 (RHBZ #1162673)


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Richard W.M. Jones <rjones@redhat.com> - 4.4.0-0.2
changelog:
  - Move to upstream version 4.4.0-20090216 (same as Fedora native version).
  - Added FORTRAN support.
  - Added Objective C support.
  - Added Objective C++ support.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Kalev Lember <kalev@smartlink.ee> - 4.5.0-1
changelog:
  - Update to vanilla gcc 4.5.0
  - Drop patches specific to Fedora native gcc.
  - BuildRequires libmpc-devel and zlib-devel
  - Added Provides for additional shared language runtime DLLs


author: Kalev Lember <kalev@smartlink.ee> - 4.5.3-2
changelog:
  - Disable plugin support with a configure option, instead of deleting
    the files in the install section
  - Use the %{_mingw32_target} macro in files section


author: Kalev Lember <kalev@smartlink.ee> - 4.5.3-3
changelog:
  - Rebuilt with automatic dep extraction and removed all manual
    mingw32(...) provides / requires
  - Cleaned up the spec file from cruft not needed with latest rpm


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.0-0.3.20120224
changelog:
  - Update to gcc 4.7 20120224 snapshot
  - Perform a bootstrap build using mingw-w64
  - Dropped the /lib/i686-pc-mingw32-cpp symlink
  - Dropped the float.h patch as it isn't needed anymore with mingw-w64
  - Added some patches which upstream mingw-w64 recommends us to apply


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.0-0.6.20120224
changelog:
  - Renamed the source package to mingw-gcc (RHBZ #673788)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.0-0.7.20120224
changelog:
  - Added support for both win32 and win64 targets
  - Perform a bootstrap build
  - Split out the OpenMP pieces to mingw{32,64}-libgomp packages to avoid
    forced dependency on mingw{32,64}-pthreads
  - Added support for running the testsuite for both win32 and win64 targets
  - Added a %global called enable_winpthreads which can be used to enable
    C++11 threads support (requires winpthreads instead of pthreads-w32)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.0-1.20120322
changelog:
  - Update to gcc 4.7.0 final release (20120322 snapshot)
  - Dropped upstreamed patches
  - Enable the testsuite


author: Kalev Lember <kalevlember@gmail.com> - 4.7.0-2
changelog:
  - Fix the build
  - Switch to the release tarball
  - Disable the testsuite again to avoid breaking build on arches where
    wine is unavailable


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.2-4
changelog:
  - Made this package compatible with RHEL6 and RHEL7
  - Build with --disable-ppl-version-check (fixes FTBFS against latest PPL)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.2-5
changelog:
  - Temporary build without libgomp support because of the broken circular
    dependency between mingw-gcc and mingw-pthreads which was caused by the
    latest PPL update


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.7.2-7
changelog:
  - Backported imported fix regarding virtual thunks as recommended
    by upstream mingw-w64 developers (gcc bug #55171)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.0-0.3.svn.20130113.r195137
changelog:
  - Make sure the header xmmintrin.h is C++ compatible. Fixes build
    failure in the mingw-qt5-qtbase package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.1-3
changelog:
  - Own the folders %{_libexecdir}/gcc/%{mingw32_target}/%{version},
    %{_libexecdir}/gcc/%{mingw32_target}, %{_libexecdir}/gcc/%{mingw64_target}
    and %{_libexecdir}/gcc/%{mingw64_target}/%{version}


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 5.0.0-0.4.svn.20150405.r221873
changelog:
  - Switch back to the old libstdcxx c++98 ABI on Fedora 22 only
    (This was also done for the native Fedora GCC package)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 5.1.0-2
changelog:
  - Export additional symbols needed to resolve boost build failure with GCC 5
  - Resolves RHBZ #1218290, GCC #66030


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.26-2
changelog:
  - Dropped the configure argument --with-installed-glib as it's not needed
    anymore as of pkg-config 0.26
  - Fixed typo in RPM macros


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.5-12
changelog:
  - Renamed the source package to mingw-bzip2 (RHBZ #800847)
  - Use mingw macros without leading underscore
  - Dropped unneeded RPM tags


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.5-13
changelog:
  - Added win64 support (contributed by Jay Higley)
  - Added the autoconf patch from http://ftp.suse.com/pub/people/sbrabec/bzip2/
  - Dropped some unneeded patches
  - Dropped the non-implementated testsuite pieces
  - Bundle the pkgconfig files


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.6-1
changelog:
  - Update to 1.0.6
  - Export all symbols using the cdecl calling convention instead of
    stdcall as it is also done by various other downstream distributors
    (like mingw.org and gnuwin32) and it resolves various autoconf and
    cmake detection issues (RHBZ #811909, RHBZ #812573)
  - Added -static subpackages (RHBZ #665539)


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-3
changelog:
  - Include license file in documentation section.
  - Disable building static library to save time.
  - Remove BRs on mingw32-fontconfig and mingw32-freetype which are
    not needed on Win32.
  - Use _smp_mflags.
  - Added BRs mingw32-dlfcn, mingw32-iconv, mingw32-zlib.


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-4
changelog:
  - Disable freetype in configure so it doesn't break if freetype
    or fontconfig are actually installed. (Erik van Pienbroek).


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.8.6-2
changelog:
  - Fixed %defattr line
  - Added -static subpackage
  - Use ./configure --disable-pthread to avoid conflict with native pthread library


author: Kalev Lember <kalevlember@gmail.com> - 1.10.2-7
changelog:
  - Apply patches recommended by the GTK+ Windows team:
  - Fix A1 format win32 surfaces
  - Reset clip region when writing fallback results


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.10.2-10
changelog:
  - Renamed the source package to mingw-cairo (RHBZ #800373)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.1-10
changelog:
  - Renamed the source package to mingw-expat (RHBZ #800377)
  - Use mingw macros without leading underscore
  - Use the RPM magic to automatically generate provides/requires tags
  - Automatically generate a debuginfo subpackage


author: Uri Lublin <uril@redhat.com> - 2.4.8-1
changelog:
  - Update to 2.4.8 and pick up CVEs fixes
  - Resolves: rhbz#2050504 CVE-2022-23990
  - Resolves: rhbz#2057023 CVE-2022-25236
  - Resolves: rhbz#2057037 CVE-2022-25235
  - Resolves: rhbz#2057094 CVE-2022-25313
  - Resolves: rhbz#2057099 CVE-2022-25314
  - Resolves: rhbz#2057127 CVE-2022-25315


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.8.0-5
changelog:
  - Renamed the source package to mingw-fontconfig (RHBZ #800379)
  - Use mingw macros without leading underscore


author: Richard W.M. Jones <rjones@redhat.com> - 2.3.8-1
changelog:
  - New upstream version 2.3.8.
  - Use the patches from the Fedora native package.
  - Disable patented code.
  - Don't build the static library.
  - Use _smp_mflags.
  - BR mingw32-dlfcn (not required, but uses it if installed).
  - Add license file to doc section.


author: Richard W.M. Jones <rjones@redhat.com> - 2.3.11-1
changelog:
  - New upstream version 2.3.11.
  - Match patches from Fedora native version.
  - Recheck package with rpmlint.


author: Kalev Lember <kalevlember@gmail.com> - 2.4.5-1
changelog:
  - Update to 2.4.5
  - Synced patches with Fedora native freetype 2.4.5-2
  - Spec cleanup
  - Enable automatic mingw dep extraction
  - Create -debuginfo subpackage


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.4.8-3
changelog:
  - Renamed the source package to mingw-freetype (RHBZ #800380)
  - Use mingw macros without leading underscore


author: Richard W.M. Jones <rjones@redhat.com> - 0.17-6
changelog:
  - Add fix for undefined Gnulib symbols (Farkas Levente).
  - Rebuild against mingw32-termcap / libtermcap.


author: Richard W.M. Jones <rjones@redhat.com> - 0.17-7
changelog:
  - Remove the manpages - already available in base Fedora gettext-devel.
  - Use _smp_mflags for build.
  - Added list of potential BRs.
  - Added license file to doc section.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.17-13
changelog:
  - Replaced the libintl import library with a small wrapper library in order
    to let other binaries have a soft-dependency on libintl-8.dll as proposed
    on the fedora-mingw mailing list


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.17.15
changelog:
  - Dropped the proxy-libintl pieces as the upstream gtk+ win32 maintainers
    also decided to drop it and it's causing more harm than good


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.18.1.1-6
changelog:
  - Renamed the source package to mingw-gettext (RHBZ #800387)
  - Use mingw macros without leading underscore


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.5-2
changelog:
  - Rebase to native Fedora version 2.19.5.
  - Use _smp_mflags.
  - Use find_lang.
  - Don't build static libraries.
  - +BR dlfcn.


author: Erik van Pienbroek <info@nntpgrab.nl> - 2.19.5-4
changelog:
  - Added -static subpackage
  - Developers using the static build of GLib need to add
    -DGLIB_STATIC_COMPILATION and -DGOBJECT_STATIC_COMPILATION to
    their CFLAGS to avoid compile failures
  - Fixed the %defattr line
  - Rebuild for mingw32-gcc 4.4 (RWMJ)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.21.1-1
changelog:
  - Update to 2.21.1
  - Use %global instead of %define
  - Dropped the glib-i386-atomic.patch as it doesn't have any effect (the mingw32
    toolchain is called i686-pc-mingw32, not i386-pc-mingw32)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.26.0-3
changelog:
  - Let binaries depending on GLib link against the libintl wrapper library
    in a way that libtool doesn't refuse


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.28.6-1
changelog:
  - Update to 2.28.6
  - Dropped the ugly build hack as it isn't needed anymore (the
    broken mingw32-runtime has been fixed by now)
  - Made the pkgconfig LDFLAGS libtool friendly (fixes compilation for
    non-libtool based projects such as midori)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.28.6-3
changelog:
  - Own the folders %{_mingw32_libdir}/gio and %{_mingw32_libdir}/gio/modules
  - Dropped the .def files as they aren't useful for other binaries


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.31.18-2
changelog:
  - Renamed the source package to mingw-glib2 (RHBZ #800389)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.33.10-2
changelog:
  - Use CreateFile on Win32 to make sure g_unlink always works (GNOME BZ #674214)
  - Fixed typo's in description


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.35.9-1
changelog:
  - Update to 2.35.9
  - Added R: mingw{32,64}-gettext-static to the -static subpackages
  - Prefer the use of GCC constructors over DllMain
    This removes the DllMain symbol from the static libraries


author: Richard W.M. Jones <rjones@redhat.com> - 2.40.0-3
changelog:
  - Fix valgrind support (RHBZ#1095664, GNOME bug 730198).
  - Include <stdint.h>, required by valgrind.h only on Rawhide.


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.44.0-4
changelog:
  - gio/ginetaddress.c: Fix Windows XP inet_pton() Emulation
    (https://bugzilla.gnome.org/show_bug.cgi?id=730352#c24)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.14.1-2
changelog:
  - ExclusiveArch: i686, x86_64
    Related: rhbz#1615874
  - BuildRequires: python3-devel
    Related: rhbz#1615874


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.2-1
changelog:
  - Update to 1.1.2
  - Make freetype an optional runtime dependency instead of a hard dependency (using delay load)
  - Perform verbose make


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.8.1.1-5
changelog:
  - Added win64 support
  - Use mingw macros without leading underscore
  - Use %global instead of %define


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.1-1
changelog:
  - Initial release (based on mingw32-libjpeg)
  - Dropped the BR: mingw32-dlfcn
  - Obsoletes/provides mingw32-libjpeg and mingw32-libjpeg-static
  - Disable SIMD support for now because libtool doesn't recognize nasm


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.1-1
changelog:
  - Update to 1.1.1
  - Temporary made the package compliant to the old guidelines as the new
    mingw-w64 based toolchain isn't approved for inclusion in Fedora yet


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.1-3
changelog:
  - Moved the obsoletes/provides to the right location
  - Bundle the licence and other %doc's
  - Fixed a small rpmlint warning


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.40-2
changelog:
  - In the previous build no symbols were exported in the resulting DLL making this
    package unusable. This should be fixed for now (but may need more research)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Fixes CVE-2010-1205 (BZ #608238)
  - Fixes CVE-2010-2249 (BZ #608644)
  - Use %global instead of %define
  - Fixed %defattr tag
  - Dropped unneeded patches


author: Kalev Lember <kalevlember@gmail.com> - 1.4.8-1
changelog:
  - Update to 1.4.8 (CVE-2011-2690, CVE-2011-2692)
  - Generate debuginfo subpackage
  - Removed static libs from the main package
  - Spec cleanup


author: Kalev Lember <kalevlember@gmail.com> - 1.5.7-3
changelog:
  - Renamed the source package to mingw-libpng (#800430)
  - Use mingw macros without leading underscore


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Michael Ploujnikov <ploujj@gmail.com> - 3.8.2-14
changelog:
  - cleanup based on initial review and help from Adam Goode:
  - removed LIBVER define
  - exported proper mingw32 cflags
  - removed make check
  - removed executables
  - removed multilib stuff (irrelevant for mingw32)
  - fixed defattr
  - added .la files back in


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.8.2-19
changelog:
  - Rebuild for minw32-libjpeg 7
  - Automatically generate debuginfo subpackage
  - Added -static subpackage


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.9.4-1
changelog:
  - Update to 3.9.4
  - Merged the native Fedora package changes up to 3.9.4-1
  - Fixes CVE-2010-1411 (RHBZ #592361) and various other CVE's


author: Kalev Lember <kalev@smartlink.ee> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Fixes CVE-2011-1167 (#689575)
  - Dropped the patches from Fedora native libtiff package which are all now
    incorporated in 3.9.5


author: Kalev Lember <kalevlember@gmail.com> - 3.9.5-5
changelog:
  - Renamed the source package to mingw-libtiff (#800437)
  - Spec clean up
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 4.0.3-4
changelog:
  - Fix CVE-2013-4231, CVE-2013-4232, CVE-2013-4243, CVE-2013-4244 (RHBZ #996833)
  - Fix CVE-2012-4447, CVE-2012-4564, CVE-2013-1960.patch, CVE-2013-1961


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.0-0.1.beta3
changelog:
  - Update to version 1.0.0 beta 3
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage
  - Merged various changes from the native Fedora package (up to 1.0.0-0.5.beta3)
  - Don't use the %{_mingw32_make} macro anymore as it's ugly and causes side-effects
  - Added missing BuildRequires mingw32-dlfcn (Kalev Lember)
  - Reworked patches to rename *eay32.dll to lib*.dll (Kalev Lember)
  - Patch Configure script to use %{_mingw32_cflags} (Kalev Lember)


author: Kalev Lember <kalev@smartlink.ee> - 1.0.0-0.5.beta4
changelog:
  - Updated to version 1.0.0 beta 4
  - Merged patches from native Fedora openssl (up to 1.0.0-0.15.beta4)
  - Added patch to fix build with fips disabled


author: Kalev Lember <kalev@smartlink.ee> - 1.0.0-0.6.beta4
changelog:
  - Merged patches from native Fedora openssl (up to 1.0.0-0.16.beta4)
  - Dropped the patch to fix non-fips mingw build,
    as it's now merged into fips patch from native openssl


author: Kalev Lember <kalev@smartlink.ee> - 1.0.0a-1
changelog:
  - Updated to openssl 1.0.0a
  - Synced patches with Fedora native openssl-1.0.0a-1
  - Use sed to fix up cflags instead of unmaintainable patch
  - Rebased mingw32 specific patches
  - Disabled capieng to fix build
  - Properly regenerate def files with mkdef.pl and drop linker-fix.patch


author: Kalev Lember <kalevlember@gmail.com> - 1.0.0d-4
changelog:
  - Renamed the source package to mingw-openssl (#800443)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.1e-5
changelog:
  - Synced patches with native openssl-1.0.1e-38.fc21
  - Enable ECC support (RHBZ #1037919)
  - Fixes CVE-2013-6450 (RHBZ #1047844)
  - Fixes CVE-2013-4353 (RHBZ #1049062)
  - Fixes CVE-2013-6449 (RHBZ #1045444)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 1.0.1i-1
changelog:
  - Synced with native openssl-1.0.1i-3.fc21
  - Fixes various flaws (RHBZ#1096234 and RHBZ#1127705)
    CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3511
    CVE-2014-3510 CVE-2014-3508 CVE-2014-3509 CVE-2014-0221
    CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298
    CVE-2014-3470


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.1j-1
changelog:
  - Synced with native openssl-1.0.1j-3.fc22
  - Add support for RFC 5649
  - Prevent compiler warning "Please include winsock2.h before windows.h"
    when using the OpenSSL headers
  - Fixes various CVE's (RHBZ #1127889 #1127709 #1152851)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.2h-1
changelog:
  - Synced with native openssl-1.0.2h-1
  - Fixes RHBZ #1332591 #1332589 #1330104 #1312861 #1312857 #1307773 #1302768


author: Christophe Fergeau <cfergeau@redhat.com> - 1.0.2k-1
changelog:
  - Sync with rhel 7.6 OpenSSL 1.0.2k+patches in order to get the latest security
    fixes
  - Related: rhbz#1615874


author: Kalev Lember <kalevlember@gmail.com> - 8.10-7
changelog:
  - Renamed the source package to mingw-pcre (#801011)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.33-1
changelog:
  - Update to 8.33
  - Added the configure arguments --enable-pcre8 --enable-pcre16 --enable-pcre32
    (the pcre16 one is needed by mingw-qt5-qtbase)
  - Use a more verbose filelist


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.38-1
changelog:
  - Update to 8.38
  - Fixes various CVE's:
    RHBZ #1236660, #1249905, #1250947, #1256453, #1256454, #1287616,
    RHBZ #1287619, #1287626, #1287628, #1287631, #1287634, #1287640,
    RHBZ #1287642, #1287648, #1287650, #1287656, #1287658, #1287661,
    RHBZ #1287663, #1287668, #1287670, #1287673, #1287675, #1287692,
    RHBZ #1287694, #1287698, #1287700, #1287704, #1287706, #1287720,
    RHBZ #1287722


author: Richard W.M. Jones <rjones@redhat.com> - 0.13.2-1
changelog:
  - Resynch with Fedora package (0.13.2).
  - Disable static library for speed.
  - Use _smp_mflags.
  - Requires pkgconfig.
  - Depends on dlfcn.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.15.10-1
changelog:
  - Update to 0.15.10
  - Use %global instead of %define
  - Dropped pixman-0.13.2-license.patch as freedesktop bug #19582 is resolved


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.15.20-1
changelog:
  - Update to version 0.15.20
  - Updated SOURCE0 and URL
  - Automatically generate debuginfo subpackage
  - Don't build the 'blitters-test' testcase as it requires the memalign function
    which we don't have on MinGW


author: Kalev Lember <kalevlember@gmail.com> - 0.22.2-1
changelog:
  - Update to 0.22.2
  - Use automatic mingw dep extraction
  - Cleaned up the spec file for modern rpmbuild


author: Kalev Lember <kalevlember@gmail.com> - 0.24.4-2
changelog:
  - Renamed the source package to mingw-pixman (#800445)
  - Use mingw macros without leading underscore


author: Kalev Lember <kalevlember@gmail.com> - 5.2-11
changelog:
  - Renamed the source package to mingw-readline (#801022)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Richard Jones <rjones@redhat.com> - 3.6.6.2-1
changelog:
  - New upstream release (to match Fedora native), 3.6.6.2.
  - Replace patches with ones from native.
  - Rebase -no-undefined patch.
  - Remove spurious +x permissions on libsqlite3.dll.a.
  - Requires pkgconfig.


author: Kalev Lember <kalevlember@gmail.com> - 3.7.9-3
changelog:
  - Renamed the source package to mingw-sqlite (#800450)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.7.14.1-1
changelog:
  - Update to 3.7.14.1
  - Dropped all patches which are not needed for the mingw target
  - There's no need to re-run the autotools any more


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.7.16.2-2
changelog:
  - Don't try to link against pthreads even if it is available on win32
    (sqlite uses the native win32 threading API already)


author: Uri Lublin <uril@redhat.com> - 3.26.0.0-1
changelog:
  - Rebase to sqlite 3.26.0
  - Fix CVE-2019-8457  CVE-2019-13752 CVE-2019-13753 CVE-2019-13734
  - Fix CVE-2019-19924 CVE-2019-19923 CVE-2019-19925 CVE-2019-19959
  - Fix CVE-2019-20218 CVE-2020-6405  CVE-2020-9327  CVE-2019-5018
  - Fix CVE-2019-16168
    Resolves: rhbz#1826898
  - Fix CVE-2020-13632
    Resolves: rhbz#1845615
  - Fix CVE-2020-13631
    Resolves: rhbz#1845475
  - Fix CVE-2020-13630
    Resolves: rhbz#1845212
  - Fix CVE-2020-13434
    Resolves: rhbz#1845851
  - Fix CVE-2020-15358


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-4
changelog:
  - Rerun autoconf because the standard configure doesn't know --bindir.
  - Set exec_prefix during make install step.


author: Kalev Lember <kalevlember@gmail.com> - 1.3.1-12
changelog:
  - Renamed the source package to mingw-termcap (#801034)
  - Modernize the spec file
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.0.2-1
changelog:
  - Update to version 0.0.2
  - Dropped upstreamed patch
  - Dropped the win_iconv.exe binary
  - Bumped the mingw32-iconv obsoletes


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.0.2-2
changelog:
  - Use the name mingw-win-iconv for the srpm to ease the transition to
    the mingw-w64 based toolchain
  - Use the RPM 4.9 dependency generator
  - Dropped unnecessary tags


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.0.2-3
changelog:
  - Moved the obsoletes/provides to the proper location
  - Bumped the requirement for mingw32-filesystem to >= 68 because of RPM 4.9 support
  - Dropped the %defattr tags
  - Dropped the %{?dist} tag from the obsoletes/provides


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.999-0.4.trunk.20130509
changelog:
  - Simplified the BuildRequires
  - Added a clarification for the combined license
  - Added conflicts for mingw{32,64}-headers versions which also provide pthread headers


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 3.9.999-0.1.trunk.git.b08afb.20140912
changelog:
  - Update to 20140912 snapshot (git rev b08afb)
  - Bump version as upstream released mingw-w64 v3.2.0 recently (which is not based on the trunk branch)


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-18
changelog:
  - Cannot copy current directory into itself, so fix the copy command
    which creates 'x' subdirectory.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.5-1
changelog:
  - Update to 1.2.5
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage
  - Use correct %defattr tag
  - Merged the changes from the native Fedora package


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.5-7
changelog:
  - Rebuild against the mingw-w64 toolchain
  - Use the correct RPM macros
  - Fix FTBFS against the latest binutils caused by the use of an invalid .def file


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.2.5-10
changelog:
  - Added win64 support
  - Simplified the build process by using autotools and a hacked version of libtool
  - Made the package compliant with the new MinGW packaging guidelines


author: Simo Sorce <simo@redhat.com> 1.1.0-1
changelog:
  - New minor release 1.1.0
  - New feature: Basic Auth support
  - Improvements: Better crypto for sesison cookies


author: Simo Sorce <simo@redhat.com> 1.2.0-1
changelog:
  - New minor release 1.2.0
  - Adds delegation support on Basic Auth
  - Response fix, send last auth token on successful auth


author: Simo Sorce <simo@redhat.com> 0.7.0-0
changelog:
  - Initial Fedora release based on version 0.7.0
  - Based on an old spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>


author: Simo Sorce <simo@redhat.com> 0.7.0-3
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.


author: John Dennis <jdennis@redhat.com> - 0.11.0-3
changelog:
  - Fix the following warning that appears in the Apache log
    lasso-CRITICAL **: lasso_provider_get_metadata_list_for_role: assertion '_lasso_provider_get_role_index(role)' failed


author: John Dennis <jdennis@redhat.com> - 0.12.0-1
changelog:
  - Update to new upstream 0.12.0
  - [CVE-2016-2145] Fix DOS attack (Apache worker process crash) due to
    incorrect error handling when reading POST data from client.

  - [CVE-2016-2146] Fix DOS attack (Apache worker process crash /
    resource exhaustion) due to missing size checks when reading
    POST data.

  In addition this release contains the following new features and fixes:

  - Add MellonRedirectDomains option to limit the sites that
    mod_auth_mellon can redirect to. This option is enabled by default.

  - Add support for ECP service options in PAOS requests.

  - Fix AssertionConsumerService lookup for PAOS requests.


author: John Dennis <jdennis@redhat.com> - 0.12.0-2
changelog:
  - Resolves: bug #1332729, mellon conflicts with mod_auth_openidc
  - am_check_uid() should be no-op if mellon not enabled


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1702695 - fresh install of mod_auth_mellon shows rpm
                             verification warnings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: John Dennis <jdennis@redhat.com> - 1.8.8-2
changelog:
  - Add missing unpackaged files/directories

    Add to doc: README.md, DISCLAIMER, AUTHORS
    Add to httpd/conf.d: auth_openidc.conf
    Add to /var/cache: /var/cache/httpd/mod_auth_openidc/cache
                       /var/cache/httpd/mod_auth_openidc/metadata


author: John Dennis <jdennis@redhat.com> - 1.8.10.1-3
changelog:
  - Resolves: #1423956 fails to build with openssl 1.1.x
    Also rolls up all fixes to jose library before the change over to cjose


author: <jdennis@redhat.com> - 2.3.7-3
changelog:
  - Resolves: rhbz# 1614977 - fix unit test segfault,
    the problem was not limited exclusively to s390x, but s390x provoked it.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-5
changelog:
  - Resolves: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes
  - Resolves: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-6
changelog:
  - Fix the previous backport
  - Related: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes
  - Related: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in
        oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference
        when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.1.0-1
changelog:
  - Logging improvements; success logging moved from notice to info level.
  - Fix redirect for AuthPAMExpiredRedirect with Basic Auth.
  - Fix AuthPAMExpiredRedirect %s escaping on Apache 2.2.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7.0-2
changelog:
  - Fix apr Conflicts syntax in -libs.
  - Fix obsolete chown syntax in subversion.conf.
  - Fix use of spaces vs tabs in specfile.


author: Joe Orton <jorton@redhat.com> - 1.7.3-2
changelog:
  - add upstream test suite fixes for APR hash change (r1293602, r1293811)
  - use ruby vendorlib directory (#798203)
  - convert svnserve to systemd (#754074)


author: Vít Ondruch <vondruch@redhat.com> - 1.7.8-6
changelog:
  - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0
  - Drop Ruby version checks from configuration script.
  - Fix and enable Ruby test suite.


author: Joe Orton <jorton@redhat.com> - 1.7.9-2
changelog:
  - try harder to avoid svnserve bind failures in ruby binding tests
  - enable verbose output for ruby binding tests


author: Joe Orton <jorton@redhat.com> - 1.8.13-7
changelog:
  - move svnauthz to -tools; make svnauthz-validate a symlink
  - move svnmucc man page to -tools
  - restore dep on systemd (#1183873)


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.9.4-1
changelog:
  - Update to 1.9.4 (#1331222) CVE-2016-2167 CVE-2016-2168
  - Move tools in docs to tools subpackage (rhbz 1171757 1199761)
  - Disable make check to work around FTBFS


author: Joe Orton <jorton@redhat.com> - 1.9.6-1
changelog:
  - update to 1.9.6 (#1467890)
  - update to latest upstream psvn.el
  - move libsvnjavahl to -libs, build -javahl noarch
  - fix javahl Requires


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.9.7-2
changelog:
  - Python 2 binary package renamed to python2-subversion
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Joe Orton <jorton@redhat.com> - 1.14.0~rc2-2
changelog:
  - switch subpackages to lock-step requires on -libs rather than subversion
  - fixed the build-requires (Jitka Plesnikova)


author: Paul Howarth <paul@city-fan.org> 1.09-5
changelog:
  - Use correct handler name in fcgid.conf
  - Conflict with mod_fastcgi
  - Create directory %{_localstatedir}/run/mod_fcgid for sockets


author: Paul Howarth <paul@city-fan.org> 1.09-6
changelog:
  - Instead of conflicting with mod_fastcgi, don't add the handler for .fcg etc.
    if mod_fastcgi is present


author: Paul Howarth <paul@city-fan.org> 1.09-7
changelog:
  - Add SELinux policy module and README.Fedora
  - Conflict with selinux-policy versions older than what we're built on


author: Paul Howarth <paul@city-fan.org> 1.09-8
changelog:
  - Change default context type for socket directory from var_run_t to
    httpd_fastcgi_sock_t for better separation


author: Paul Howarth <paul@city-fan.org> 1.09-10
changelog:
  - SELinux policy update:
    * allow httpd to read httpd_fastcgi_content_t without having the
    | httpd_builtin_scripting boolean set
    * allow httpd_fastcgi_script_t to read /etc/resolv.conf without
    | having the httpd_can_network_connect boolean set


author: Paul Howarth <paul@city-fan.org> 1.10-3
changelog:
  - Adjust buildreqs for FC6 onwards
  - Figure out where top_dir is dynamically since the /etc/httpd/build
    symlink is gone in FC6


author: Paul Howarth <paul@city-fan.org> 1.10-4
changelog:
  - SELinux policy packages moved from %{_datadir}/selinux/packages/POLICYNAME
    to %{_datadir}/selinux/POLICYNAME
  - hardlink identical policy module packages together to avoid duplicate files


author: Paul Howarth <paul@city-fan.org> 1.10-5
changelog:
  - Split off SELinux module into separate subpackage to avoid dependency on
    the selinux-policy package for the main package


author: Paul Howarth <paul@city-fan.org> 2.1-1
changelog:
  - Update to 2.1
  - Update documentation and patches
  - Rename some source files to reduce chances of conflicting names
  - Include SharememPath directive in conf file to avoid unfortunate upstream
    default location


author: Paul Howarth <paul@city-fan.org> 2.1-3
changelog:
  - Major update of SELinux policy, supporting accessing data on NFS/CIFS shares
    and a new boolean, httpd_fastcgi_can_sendmail, to allow connections to SMTP
    servers
  - Fix for SELinux policy on Fedora 7, which didn't work due to changes in the
    permissions macros in the underlying selinux-policy package


author: Paul Howarth <paul@city-fan.org> 2.1-5
changelog:
  - Update source URL to point to downloads.sf.net rather than dl.sf.net
  - Upstream released new tarball without changing version number, though the
    only change was in arch/win32/fcgid_pm_win.c, which is not used to build the
    RPM package
  - Clarify license as GPL (unspecified/any version)
  - Unexpand tabs in spec
  - Add buildreq of gawk


author: Paul Howarth <paul@city-fan.org> 2.2-3
changelog:
  - Update SELinux policy to fix occasional failures on restarts
    (move shared memory file into /var/run/mod_fcgid directory)


author: Paul Howarth <paul@city-fan.org> 2.2-6
changelog:
  - SELinux policy module rewritten to merge fastcgi and system script domains
    in preparation for merge into main selinux-policy package (#462318)
  - Try to determine supported SELinux policy types by reading /etc/selinux/config


author: Paul Howarth <paul@city-fan.org> 2.2-7
changelog:
  - SELinux policy module no longer built for Fedora 8 onwards as it is
    obsoleted by the main selinux-policy package
  - Conflicts for selinux-policy packages older than the releases where mod_fcgid
    policy was incorporated have been added for Fedora 8, 9, and 10 versions, to
    ensure that SELinux support will work if installed


author: Paul Howarth <paul@city-fan.org> 2.2-10
changelog:
  - EL 5.3 now has SELinux support in the main selinux-policy package so handle
    that release as per Fedora >= 8, except that the RHEL selinux-policy package
    doesn't Obsolete/Provide mod_fcgid-selinux like the Fedora version, so do
    the obsoletion here instead


author: Paul Howarth <paul@city-fan.org> 2.2-11
changelog:
  - Follow link /etc/httpd/run and make our "run" directory a subdir of wherever
    that leads (#501123)


author: Paul Howarth <paul@city-fan.org> 2.2-12
changelog:
  - Don't use /etc/httpd/run as basis of "run" directory as its DAC permissions
    are not permissive enough in F-11 onwards; instead, revert to
    /var/run/mod_fcgid and tweak default config accordingly (#502273)


author: Paul Howarth <paul@city-fan.org> 2.3.1-1.20090923svn817978
changelog:
  - Update to post-2.3.1 svn snapshot
  - Upstream moved to apache.org
  - License changed to ASL 2.0
  - Use FCGID-prefixed config file options (old ones deprecated)
  - Lots of documentation changes
  - Renumber sources
  - Don't defer to mod_fastcgi if both are present
  - Drop gawk buildreq
  - Add patches fixing RPM build issues (DESTDIR support, header detection)


author: Paul Howarth <paul@city-fan.org> 2.3.1-2.20090925svn818270
changelog:
  - Update to svn revision 818270
  - DESTDIR and header detection patches upstreamed
  - Build SELinux policy module for EL-5; support in EL-5.3 is incomplete and
    will be fixed in EL-5.5 (#519369)
  - Drop aliases httpd_sys_content_r{a,o,w}_t -> httpd_fastcgi_content_r{a,o,w}_t
    from pre-2.5 SElinux policy module as these types aren't defined there


author: Paul Howarth <paul@city-fan.org> 2.3.4-1
changelog:
  - Update to 2.3.4 (configuration directives changed again)
  - Add fixconf.sed script for config file directives update


author: Paul Howarth <paul@city-fan.org> 2.3.4-2
changelog:
  - Add fixes from upstream svn for a number of issues, most notably that the
    fixconf script had an error in the regexp, which resulted in a prefix of
    "FcgidFcgid" on the updated directives


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Paul Howarth <paul@city-fan.org> - 2.3.9-7
changelog:
  - Use /usr/bin/sed rather than /bin/sed for fixconf script on modern releases
  - Drop %defattr, redundant since rpm 4.4
  - Use %license where possible


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
  - 1109923 - Fix module loading/configuration for Apache 2.4.
  - Document the runtime dependency on pam_authenticate_with_login_password.
  - Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Michael Fleming <mfleming+rpm@enlartenment.com> 1.8.7-4
changelog:
  - Add Requires: httpd-mmn to get the appropriate "module magic" version
    (thanks Ville Skytta)
  - Disabled an overly-agressive rule or two..


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.0-1
changelog:
  - New major release - 2.1.0
  - Fix CVE-2007-1359 with a local rule courtesy of Ivan Ristic
  - Addition of core ruleset
  - (Build)Requires libxml2 and pcre added.


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.0-3
changelog:
  - Automagically configure correct library path for libxml2 library.
  - Add LoadModule for mod_unique_id as the logging wants this at runtime


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.1-1
changelog:
  - New upstream release
  - Drop ASCIIZ rule (fixed upstream)
  - Re-enable protocol violation/anomalies rules now that REQUEST_FILENAME
    is fixed upstream.


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.5.6-1
changelog:
  - Update to upstream 2.5.6
  - Remove references to mlogc, it no longer ships in the main tarball.
  - Link correctly vs. libxml2 and lua (bz# 445839)
  - Remove bogus LoadFile directives as they're no longer needed.


author: Michael Fleming <mfleming+rpm@thatfleminggent.com> - 2.5.12-1
changelog:
  - Update to latest upstream release
  - SECURITY: Fix potential rules bypass and denial of service (bz#563576)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-1
changelog:
  - Update to 2.7.1
  - Remove libxml2 build patch (upstreamed)
  - Update spec since upstream moved to github


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
  - Add some missing directives RHBZ #569360
  - Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
    (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Matthias Saou <http://freshrpms.net/> 0.60-0.1.beta2
changelog:
  - Initial RPM release, now that mpg123 is maintained again and went GPL/LGPL.
  - Audio output type is not (yet?) plugin-based, so use libao (for ALSA).


author: Matthias Saou <http://freshrpms.net/> 0.60-1
changelog:
  - Update to 0.60 final.
  - Add support for all available compatible outputs, unfortunately it's a build
    time choice, so default to alsa.
  - Obsolete mpg321 up to the last know package version.


author: Matthias Saou <http://freshrpms.net/> 1.4.2-1
changelog:
  - Update to 1.4.2.
  - Obolete mpg321 up to last known version, as it's pretty much dead.
  - Add libtool-ltdl-devel build req, without a copy is installed.
  - Add scriplets for new library.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-1
changelog:
  - Update to 1.12.1
  - Put libmpg123 into its own package
  - Put some less often used output plugins into their own mpg123-plugins-extras
    package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-2
changelog:
  - Add arts-devel BuildRequire and add the arts output plug-in to the
    mpg123-plugins-extras package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-3
changelog:
  - Move mpg123 (and its manpage) to mpg123.bin and use alternatives, so as to
    peacefully co-exist with mpg321 (rf#1278)


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.13.7-1
changelog:
  - New upstream bugfix release 1.13.7
  - Properly build and install development documentation (rf#2257)


author: Richard Shaw <hobbes1069@gmail.com> - 1.14.3-1
changelog:
  - Update to latest upstream release.
  - Move README and README.remote to correct package. Fixes #1898.


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.15.1-1
changelog:
  - New upstream release 1.15.1 (rf#2716)
  - Drop obsolete esound and arts plugins from mpg123-plugins-extras


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.19.0-1
changelog:
  - Update to 1.19.0
  - Enable (optional) use of NEON on arm
  - Add missing %{?_isa} to libmpg123 Requires in -devel (rf#3194)


author: Igor Gnatenko <ignatenko@redhat.com> - 1.23.4-1
changelog:
  - Update to 1.23.4
  - Use weak and rich deps for plugins
  - rename libmpg123 to mpg123-libs
  - Drop usage of alternatives (nothing uses it actually)
  - Correct license


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Deji Akingunola <dakingun@gmail.com> - 1.4.1-1
changelog:
  - Update to 1.4.1 final
  - Drop the mpd subpackage, the PM is no longer supported upstream
  - Fix undefined symbols in libmpichcxx (again) (#732926)


author: Orion Poplawski <orion@cora.nwra.com> - 1.4.1p1-9
changelog:
  - Install module file in mpi subdirectory and conflict with other mpi modules
  - Leave existing module file location for backwards compatibility for a while


author: Orion Poplawski <orion@cora.nwra.com> - 1.5-1
changelog:
  - Update to 1.5
  - Drop destdir-fix and mpicxx-und patches
  - Update rpm macros to use the new module location


author: Orion Poplawski <orion@cora.nwra.com> - 3.1.4-1
changelog:
  - Update to 3.1.4
  - Own and set PKG_CONFIG_DIR (bug #1113627)
  - Do not ship old modulefile location (bug #921534)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.1.4-6
changelog:
  - Use .pth files to set the python path (https://fedorahosted.org/fpc/ticket/563)
  - Cleanups to the spec file


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.1.4-8
changelog:
  - Move fortran .mod files to %{_fmoddir}/mpich (#1154991)
  - Move man pages to arch-specific dir (#1264359)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.1-2
changelog:
  - Update $modincdir in mpifort after moving .mod files (#1301533)
  - Move compiler wrappers to mpich-devel (#1353621)
  - Remove bogus rpath (#1361586)


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Bo Ren <rb01097748@alibaba-inc.com> - 3.4.2-1.0.1
changelog:
  - Do not require valgrind for loongarch64 (geliwei@openanolis.org)
  - Add -fallow-argument-mismatch for compatible with gcc10 build (zhouwt@linux.alibaba.com)


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Arne Coucheron <arneco@online.no>
changelog:
  [2.5.3-1]
  - using %{name} and %{version} macros
  - using %defattr macro in filelist
  - using install -d in various places instead of cp
  - added -q parameter to %setup
  - removed older changelogs


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.6.4]
  - removed mrtg-squid (specific OIDS)
  - cfgmaker and indexmaker now /usr/bin
  - libgd must be >= 1.3


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  [2.7.4-1]
  - changed Perl module installation to be version independent
  - changed libgd dependency to gd
  - changed URL
  - strip binaries
  - include contrib directory as documentation


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.4-2]
  - set perl path for contribs
  - set SNMP's perl to /usr/lib/perl5/site_perl (clean for RH5.x and RH6.0)


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.5]
  - removed gd-devel requires, RH5.x use libgd-devel and RH6 gd-devel.
  - removed CR from perl files in contrib.
  - added cfgmaker_ip in binaries.
  - rework modules install/de-install for RH5.x/6.0 compat


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.4]
  - mrtg could use now png instead of gif via gd1.6.1
    but since gd1.6.1 remove all gif reference it could
    break your dependencies, so we don't use it for now.


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.8]
  - important release since rrd support is added
    It came from Rainer Bawidamann work. If you have rrdtool RPM
    installed, just add UseRRDTool: Yes in your config files.
  - added latest patch for mrtg-rrd.
  - to convert your mrtg logs to rrd format, use log2rrd.pl
    you can found on rrdtool package.


author: Henri Gomez <hgomez@slib.fr>
changelog:
  [2.9.2]
  - clean up spec file for 2.9 release
    (no .gif, cfgmaker_ip removed)
  - mrtg 2.9 look for .pm in /usr/lib/mrtg2, so no more need
    to relocate .pm at post time.
  - mrtg config (mrtg.cfg) goes now in /etc/mrtg/
  - added manual to rpm
  - spec file adapted to RH 7.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set LIBS=-lfreetype and LDFLAGS="-lgd -lpng -lfreetype -lm" to link the gd
    support with freetype, which it needs
  - remove Packager: tag (was Packager: Tim Verhoeven <dj@sin.khk.be>)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-1
changelog:
  - update to 2.9.17
  - use FHS macros
  - install the .gif files as well
  - copyright: distributable -> license: GPL


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-13
changelog:
  - move crontab data to /etc/cron.d
  - add trigger to remove crontab data from /etc/crontab on removal of
    older versions


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.28-4
changelog:
  - disable use of RPM's internal dependency generator so that we can filter out
    requirements of the contrib scripts included in the docs directory


author: Miloslav Trmac <mitr@redhat.com> - 2.10.15-1
changelog:
  - Update to 2.10.15
  - Use a more generic URL
  - Don't link rateup statically
  - Move threshold and log files to /var/lib/mrtg, lock files to /var/lock/mrtg


author: Jindrich Novy <jnovy@redhat.com> 2.10.15-2
changelog:
  - remove bogus characters from man pages to prevent
    man displaying the page is in wrong encoding (#139341)


author: Miloslav Trmac <mitr@redhat.com> - 2.11.0-1
changelog:
  - Update to mrtg-2.11.0
  - Don't install HTML documentation to /var/www/mrtg
  - Clean up %install a bit


author: Miloslav Trmac <mitr@redhat.com> - 2.12.1-1
changelog:
  - Update to mrtg-2.12.1
  - Remove unnecessary BuildRequires, Requires
  - Don't link rateup to libpng and libz


author: Miloslav Trmac <mitr@redhat.com> - 2.12.2-2
changelog:
  - Add LANG and LC_ALL definition to cron script for easier copying to command
    line (#167530)
  - Don't ship MANIFEST and a very obsolete version of 14all.cgi
  - Fix rewriting of perl paths to /usr/bin/perl in contrib scripts
  - Make contrib scripts unexecutable to avoid unnecessary rpm dependencies;
    remove unnecessary entries from filter-requires-mrtg.sh


author: Miloslav Trmac <mitr@redhat.com> - 2.15.0-1
changelog:
  - Update to mrtg-2.15.0
  - Don't use Prereq: for /sbin/service
  - Use (sed -i) instead of perl to make the regexps more readable


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.3-2
changelog:
  - Fix 'undefined subroutine &SNMP_Session::inet_ntop called at
    /usr/bin/../lib64/mrtg2/SNMP_Session.pm line 549.' error


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-7
changelog:
  - The upstream tarball as provided is broken.  Clean up the tarball so
    the package builds properly


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Yaakov Selkowitz <yselkowi@redhat.com> - 3.0-0.8.g6961daa.1
changelog:
  - Fix FTBFS with -Werror=format-security (#1037207, #1106248)
  - ExcludeArch: %arm aarch64
  - Cleanup spec


author: Doug Ledford <dledford@redhat.com> - 4.1.0-0.46.gb1cdaf7.1
changelog:
  - Update to latest upstream sources (enables ConnectX-4 support)
  - Drop patch that no longer applies


author: Honggang Li <honli@redhat.com> - 4.6.0-1
changelog:
  - Rebase to latest upstream release 4.6.0.
  - Update mstflint package from github.
  - Resolves: bz1423970


author: Honggang Li <honli@redhat.com> - 4.10.0.2
changelog:
  - Rebase to latest upstream release v4.10.0-2
  - Fix license issue of mtcr_ul.c
  - Resolves: bz1541741


author: Andrea Borgia <borgia@cs.unibo.it>
changelog:
  - updated to version 0.5
  - removed the touch to force the build: no binaries are included!
  - added to the docs: README.stinit, stinit.def.examples
  - made buildroot capable


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Kenneth Porter <shiva@well.com>
changelog:
  - 1.2.6
  - Fixed 'eepos' stuff to use | rather than || (whoops!)
  - Accept a 4-byte element descriptor for the robot arm for certain older
  - autochangers.


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-5
changelog:
  - dead code elimination
  - updated spec link to recent source
  - removed spec link to obsolete URL
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-8
changelog:
  - fix type confusion in SCSI_writet(), SCSI_readt(), slow_memcopy()
    and slow_bzero()
  - rebuilt with gcc4


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-2
changelog:
  - Correct License to GPLv2+
  - Move man3 pages to the devel package.
  - Remove +x bit from create-munge-key source.
  - Preserve timestamps when installing files.
  - ldconfig not needed on -devel package.
  - Do a condrestart when upgrading.
  - Remove redundant files from docs.
  - chmod /var/lib/munge /var/log/munge and /etc/munge to 700.
  - Apply patch to not error when GPL_LICENSED is not set.
  - Patch service script to print error on if munge.key not present
    on start only and with a better error. 
  - Remove dont-exit-form-lib.patch. munge is expecting munge to
    do this.
  - Remove libgcrypt-devel from BuildRequires, uses openssl by
    default anyway.
  - Mark the munge.key as a ghost file.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-4
changelog:
  - Expand defattr with 4th argument for default directory perms.
  - Explict attr for non 0644 files and 0755 directories.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-6
changelog:
  - Patch for rhbz #525732 - Loads /etc/sysconfig/munge 
    correctly.
  - Mark pid file as ghost file on oses that support that.
  - Permisions on pid directory to 755


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-7
changelog:
  - rhbz#530128 Move runtime libs to a new -libs package.
    ldconfig moved to new -libs package as a result.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-8
changelog:
  - Requirment on munge removed from munge-libs.
  - Explicit exact requirment on munge-libs for munge and munge-devel
    added.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.9-2
changelog:
  - Remove initd-pass-rpmlint.patch, has been applied upstream.
  - Remove remove-GPL_LICENSED-cpp.patch, has been applied upstream.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.10-1
changelog:
  - Upstream to 0.5.10
  - Add _isa tags to all build requires.
  - Remove unused patch munge-correct-service-name.patch, upstream fixed.
  - Update and add check-key-exists.patch back.
  - Revert back to default CFLAGS. _GNU_SOURCE not needed any more.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.11-1
changelog:
  - Upstream 0.5.11
  - Use upstream's systemd files.
  - Fix incorrect dates in changelogs.
  - Fix systemd scriptlets #850219
  - Use buildroot macro everywhere.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-8
changelog:
  - Removed ca-bundle.crt since it is outdated (rhbz#734379)
  - Build with gpgme support by default (rhbz#748337)
  - Fixed segmentation fault during messages removal in thread mode
    (rhbz#674271)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-12
changelog:
  - Fix segmentation fault while syncing mailbox
    (rhbz#691719)
  - Fix unhandled strchr output
    (rhbz#833044)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.22-1
changelog:
  - new release (Resolves: #1034263)
  - use inline sed instead of nodotlock patch
  - patches removed: testcert, hdrcnt, certscomp, updating, pophash,
    notation, writehead, tmpdir, verpeers, tlsv1v2
  - manhelp patch adjusted (only DEBUG logging capability was left)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.23-1
changelog:
  - Resolves: #1034263 (new version due to CVE)
  - patch cleanup (upstream fixes)
  - add html documentation (in addition to the current txt one)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.24-1
changelog:
  - Updated to 1.5.24 (Resolves: rhbz#1259332)
  - Utilize system-wide crypto-policies (Resolves: rhbz#1179324)


author: Adam Jackson <ajax@redhat.com> 3.4.1-3
changelog:
  - mutter-never-slice-shape-mask.patch, mutter-use-cogl-texrect-api.patch:
    Fix window texturing on hardware without ARB_texture_non_power_of_two
    (#813648)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.92-2
changelog:
  - Update the description and URL
  - Tighten -devel subpackage deps with _isa
  - Use the make_install macro


author: Hans de Goede <hdegoede@redhat.com> - 3.13.90-3
changelog:
  - Add a patch from upstream fixing gnome-shell crashing non stop on
    multi monitor setups (rhbz#1103221)


author: Ray Strode <rstrode@redhat.com> 3.15.3-2
changelog:
  - Add specific BuildRequires for wayland bits, so we don't
    get wayland support by happenstance.
  - Add BuildRequires for autogoo since ./autogen.sh is run as part of
    the build process


author: Ray Strode <rstrode@redhat.com> 3.18.1-4
changelog:
  - Force the cursor visible on vt switches after setting
    the crtc to workaround that qxl bug from before in a
    different situation
    Related: #1273247


author: David Herrmann <dh.herrmann@gmail.com> - 3.30.1-2
changelog:
  - Reduce 'dbus-x11' dependency to 'dbus'. The xinit script are no longer the
    canonical way to start dbus, but the 'dbus' package is nowadays required to
    provide a user and system bus to its dependents.


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-4
changelog:
  - Backport a patch to prevent crash during animations
  - See upstream issue https://gitlab.gnome.org/GNOME/mutter/issues/815


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-5
changelog:
  - Backport fix for dual special modifier keys bug (#1754867)
  - Backport fix that enables core dumps (#1748145)


author: Adam Williamson <awilliam@redhat.com> - 3.34.1-2
changelog:
  - Backport multiple fixes for F31 FE/blocker bugs:
    MR #832 for #1749433 (also needs change in gnome-shell)
    MR #840 for #1760254
    MR #848 for #1751646 and #1759644
    MR #842 for #1758873


author: Florian Müllner <fmuellner@redhat.com> - 3.35.1-3
changelog:
  - Enable sysprof support
    The required dependency was missing from rawhide when the feature
    landed, but there's no reason for keeping it disabled nowadays


author: Bastien Nocera <bnocera@redhat.com> - 3.35.92-2
changelog:
  + mutter-3.35.92-2
  - Fix wayland session not starting up, see https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/1103


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0~alpha.1.1-3
changelog:
  - Add build dependency on Xwayland-devel package (from Xwayland standalone)
  - Do not explicitly disable initfd support.


author: Kalev Lember <klember@redhat.com> - 40.0-4
changelog:
  - Fix enter, space, backspace keys not working with input methods (#1942294)
  - Drop old obsoletes and conflicts


author: Jarod Wilson <jarod@redhat.com> 2.3-1
changelog:
  - Update to upstream v2.3 release
  - Initial build for RHEL-8, featuring v2.3 only
  - Resolves: #1483744


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works.
  - make mysql dir world readable to they can access the
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability.
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus,
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.28-2
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Rebase patches to not leave backup files when not applied smoothly
  - Use --no-backup-if-mismatch to prevent including backup files


author: Tom Lane <tgl@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.29-2
changelog:
  - Provide own symbols with real- prefix to distinguish packages from other
    MySQL implementations unambiguously


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.30-4
changelog:
  - Allow server to be installed without client side
  - Separate -lib and -common sub-packages
  - Fix some path issues in tests


author: Honza Horak <hhorak@redhat.com> 5.5.30-5
changelog:
  - Renaming package MySQL to community-mysql to handle issues
    introduced by case-insensitive operations of yum and for proper
    prioritizing mariadb over community-mysql


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-31.html


author: Honza Horak <hhorak@redhat.com> 5.5.31-5
changelog:
  - Remove mysql provides from devel sub-packages to not build against
    community-mysql if mysql-devel is specified


author: Honza Horak <hhorak@redhat.com> 5.5.31-7
changelog:
  - Use /var/tmp as default tmpdir to prevent potential issues
    Resolves: #905635
  - Fix test suite requirements
  - Fix for CVE-2013-1861 backported from MariaDB
    Resolves: #921836


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html


author: Honza Horak <hhorak@redhat.com> 5.5.32-4
changelog:
  - Remove external man pages, upstream fixed man pages license
  - Apply fixes found by Coverity static analysis tool


author: Honza Horak <hhorak@redhat.com> 5.5.32-10
changelog:
  - Copy some generated files in order find-debuginfo.sh finds them
    Related: #729040
  - Fix systemd and perl requirements


author: Honza Horak <hhorak@redhat.com> 5.5.33-1
changelog:
  - Update to MySQL 5.5.33, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-33.html


author: Honza Horak <hhorak@redhat.com> 5.6.14-1
changelog:
  - Update to MySQL 5.6.14, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-14.html
  - Incorporate changes done by Bjorn Munch <bjorn.munch@oracle.com>


author: Honza Horak <hhorak@redhat.com> 5.6.15-1
changelog:
  - Update to MySQL 5.6.15, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-15.html


author: Honza Horak <hhorak@redhat.com> 5.6.15-3
changelog:
  - Disable tests for ppc(64) and s390(x):
    innodb.innodb_ctype_ldml main.ctype_ldml main.ps_ddl main.ps_ddl1
    Related: #1056972


author: Honza Horak <hhorak@redhat.com> 5.6.15-4
changelog:
  Fix for CVE-2014-0001
    Resolves: #1059545
  - Don't test EDH-RSA-DES-CBC-SHA cipher, it seems to be removed from openssl
    which now makes mariadb/mysql FTBFS because openssl_1 test fails
    Related: #1044565


author: Bjorn Munch <bjorn.munch@oracle.com> 5.6.16-1
changelog:
  - Update to MySQL 5.6.16, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-16.html
  - Patches now upstream: tmpdir, cve-2013-1861, covscan-signexpr,
    covscan-stroverflow
  - Fixed upstream: innodbwarn
  - ldconfig needed in embedded subpackage
  - Remove unused generate-tarball.sh from tree
  - Rediff mysql-install patch
  - Make symvers 18 default, provide symvers 16 for backward compat
    (bz #1045013)
  - Man page patch disabled due too many conflicts
  - Memcached build patched to not remove -Werror=<something> in CFLAGS


author: Bjorn Munch <bjorn.munch@oracle.com> 5.6.17-1
changelog:
  - Update to MySQL 5.6.17, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-17.html
  - libmysqld built as shared lib now supported upstream
  - Remove patches now upstream: truncate-file, rhbz1059545, ssltest
    and regex-werror
  - Use more standard (and tested) build flags, while still respect
    optflags and hardened_build
  - libmysqlclient_r* symlinks are fixed upstream
  - Remove sysv to systemd logic
  - Rework skipping of arch specific tests
  - Multiple mtr sessions are supported by default


author: Bjorn Munch <bjorn.munch@oracle.com> - 5.6.19-1
changelog:
  - Update to MySQL 5.6.19, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-19.html
  - outfile_loaddata resolved on all archs
  - Solaris files not installed, no need to remove
  - Simplify multilib install
  - Use install's -D option some places
  - Add explicit conflict with mariadb-galera-server


author: Honza Horak <hhorak@redhat.com> - 5.6.19-3
changelog:
  - Add mysql-compat-server symbol, common symbol for arbitrary MySQL
    implementation
  - Require /etc/my.cnf instead of shipping it
  - Server requires any compatible mysql-compat-client package


author: Honza Horak <hhorak@redhat.com> - 5.6.19-4
changelog:
  - Port some latest changes from MariaDB package to sync those packages
  - Error messages now provided by a separate package (thanks Alexander Barkov)


author: Honza Horak <hhorak@redhat.com> - 5.6.19-5
changelog:
  - Hardcoded paths removed to work fine in chroot
  - Spec rewrite to be more similar to oterh MySQL implementations
  - Include SysV init script if built on older system
  - Add possibility to not ship some sub-packages
  - Port scripts for systemd unit from MariaDB


author: Bjorn Munch <bjorn.munch@oracle.com> - 5.6.20-1
changelog:
  - Update to MySQL 5.6.20, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-20.html
  - Rebase install and pluginerrmsg patch
  - Drop dos2unix from buildreq, files fixed upstream
  - No need to add -O3, it's default
  - LDFLAGS is passed by cmake option, not from environment
  - Using __requires_exclude in conditional don't seems to work, swap
    to dist macros
  - Avoid unwanted dtrace dep
  - Fix mysql.init and mysql-prepare-db-dir
  - Logfile name must match value from /etc/my.cnf (and be known
    by SELinux policy)


author: Honza Horak <hhorak@redhat.com> - 5.6.20-5
changelog:
  - Fix paths in mysql_install_db script
    Related: #1134328
  - Use %cmake macro
  - Install systemd service file on RHEL-7+
    Server requires any mysql package, so it should be fine with older client


author: Honza Horak <hhorak@redhat.com> - 5.6.20-1
changelog:
  - Update to MySQL 5.6.21, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-21.html


author: Honza Horak <hhorak@redhat.com> - 5.6.21-3
changelog:
  - Check upgrade script added to warn about need for mysql_upgrade
  - Move mysql_plugin into base and errmsg-utf8.txt into -errmsg to correspond
    with MariaDB upstream packages
  - Add with_debug option


author: Bjorn Munch <bjorn.munch@oracle.com> - 5.6.23-1
changelog:
  - Update to MySQL 5.6.23, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-23.html
  - Expired certs patch now obsolete
  - Fixed changelog
  - Refreshed file contents patch
  - Man pages fixed upstream
  - Fix typo in server.cnf.in


author: Honza Horak <hhorak@redhat.com> - 5.6.23-3
changelog:
  - Expand paths in perl scripts in mysql-test
  - Use correct path in install_db script warning
  - Use --no-defaults when checking server status before starting


author: Honza Horak <hhorak@redhat.com> - 5.6.23-4
changelog:
  - Do not use scl prefix more than once in paths
    Based on https://www.redhat.com/archives/sclorg/2015-February/msg00038.html
  - Check permissions when starting service on RHEL-6
    Resolves: #1194699
  - Wait for daemon ends
    Related: #1072958


author: Honza Horak <hhorak@redhat.com> - 5.7.10-2
changelog:
  - Use mysqld instead of mysqld_safe (mysqld_safe not necessary for 5.7)
    Use mysqld --initialize-insecure instead of mysql_install_db
    Create /var/lib/mysql-files (used by secure-file-priv)
      http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_secure_file_priv
    Remove unnecessary Perl dependencies (mysqlhotcopy was removed in 5.7)
    Thanks Norvald H. Ryeng


author: Honza Horak <hhorak@redhat.com> - 5.7.11-1
changelog:
  - Update to 5.7.11
    Thanks to Norvald H. Ryeng
    Removing tar ball with boost and using mysql tar ball with boost bundled


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.13-1
changelog:
  - Update to MySQL 5.7.13, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-13.html


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.14-1
changelog:
  - Update to MySQL 5.7.14, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-14.html
  - Remove patches for bugs fixed upstream
  - Fix for bug #79378 (buf_block_align)
  - Fix for bug #82426 (build failure with system liblz4)
  - Further reduce list of tests known to fail on certain platforms
  - Set check_testsuite to 0 to make sure the build fails if any tests fail


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.15-1
changelog:
  - Update to MySQL 5.7.15, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-15.html
  - Remove patches now upstream (buf_block_align,  lz4)
  - perl(JSON) needed for tests
  - Adjust list of problematic tests


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.16-1
changelog:
  - Update to MySQL 5.7.16, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-16.html


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.17-1
changelog:
  - Update to MySQL 5.7.17, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
  - Add new plugin: connnection_control.so
  - Add MySQL Group Replication: group_replication.so
  - Add numactl-devel to buildreq and enable NUMA support (if available)
  - Simplify boost path
  - Build compat-openssl10 in rawhide for now
  - Reqs. in -devel packages was incomplete


author: Michal Schorm <mschorm@redhat.com> - 5.7.17-4
changelog:
  - Fix of broken cross mysql-mariadb dependecies
  - Fix of community-mysql server-client dependecy
  - Testsuite retry count lifted to 3 tries


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.18-1
changelog:
  - Update to MySQL 5.7.18, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-18.html
  - Remove patch for test fix now upstream
  - Sample my-*.cnf is gone


author: Michal Schorm <mschorm@redhat.com> - 5.7.18-2
changelog:
  - 'force' option for 'rm' removed in specfile
  - CVEs fixed by previous commit, #1443407:
    CVE-2017-3308 CVE-2017-3309 CVE-2017-3329 CVE-2017-3450
    CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462
    CVE-2017-3463 CVE-2017-3464 CVE-2017-3599 CVE-2017-3600


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.19-1
changelog:
  - Update to MySQL 5.7.19, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-19.html
  - Use new --report-unstable-tests to handle unstable tests
  - Prefer /run over /var/run (#1462688)
  - Resolves: #1462688; /run
                                      - CVE fixes: #1472716
              CVE-2017-3633, CVE-2017-3634, CVE-2017-3635, CVE-2017-3641, CVE-2017-3647
              CVE-2017-3648, CVE-2017-3649, CVE-2017-3651, CVE-2017-3652, CVE-2017-3653


author: Michal Schorm <mschorm@redhat.com> - 5.7.19-2
changelog:
  - Replication tests in the testsuite enabled, they don't fail anymore
  - Retry count in the testsuite dropped to 0


author: Honza Horak <hhorak@redhat.com> - 5.7.19-5
changelog:
  - Allow to use MD5 in FIPS mode
    Related: #1449689
  - Remove snippets from mysql-preparep-db-dir.sh that could have security impact
    Do not run parts of SysV init script as root if possible
    Related: CVE-2017-3312
  - Include mysqld@.service file and do not run start scripts in the unit file as root


author: Honza Horak <hhorak@redhat.com> - 5.7.19-6
changelog:
  - Add bundled(boost) virtual provide
  - Support --defaults-group-suffix option in systemd unit file
    Related: #1400702


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.20-1
changelog:
  - Update to MySQL 5.7.20, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html
  - Move all test binaries to -test package
  - Dont ship unneeded man pages on systemd platforms
  - Remove mysql_config_editor from -devel package, shipped in client
  - CVE fixes: #1503701
              CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279
              CVE-2017-10283 CVE-2017-10286 CVE-2017-10294 CVE-2017-10314 CVE-2017-10378
              CVE-2017-10379 CVE-2017-10384


author: Michal Schorm <mschorm@redhat.com> - 5.7.20-4
changelog:
  - Provide subackage with a client static library
    Needed by mysql-connector-odbc package
  - Remove Group tag as it shouldn't be used anymore


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 5.7.21-1
changelog:
  - Update to MySQL 5.7.21, for various fixes described at
    https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-21.html
  - Add rpcgen to buildrep
  - Add support for libtirpc
  - Fix for various CVEs listed on
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
  - Add fix for libxcrypt - do not assume "crypt()" function is provided by glibc
    Resolves: #1536881
  - Fix obsoletes using isa macro, remove the line entirely
    Resolves: #1537210


author: Fedora Release Engineering <releng@fedoraproject.org> - 5.7.21-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  - Removed 'static' library subpackage


author: Michal Schorm <mschorm@redhat.com> - 5.7.22-1
changelog:
  - Rebase to 5.7.22 version
  - CVE fixes: #1568963
              CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762
              CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775
              CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779 CVE-2018-2780
              CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2786 CVE-2018-2787
              CVE-2018-2810 CVE-2018-2812 CVE-2018-2813 CVE-2018-2816 CVE-2018-2817
              CVE-2018-2818 CVE-2018-2819 CVE-2018-2839 CVE-2018-2846


author: Norvald H. Ryeng <norvald.ryeng@oracle.com> - 8.0.11-2
changelog:
  - MySQL 8.0 has notify support
  - SQL restart command needs MYSQLD_PARENT_PID=1
  - Increase LimitNOFILE
  - Disable symbolic links is default (and option deprecated)
  - Move mysqld to /usr/bin, with mysqld_safe gone there no reason
    to have mysqld in libexec
  - FIPS mode is now supported:
     https://dev.mysql.com/doc/refman/8.0/en/fips-mode.html
  - Remove legacy embedded refs from cnf files
  - Clean up patches: re-numbering and removing
  - Recommend to use systemctl edit to modify service files


author: Honza Horak <hhorak@redhat.com> - 8.0.11-5
changelog:
  - Move log file to a directory owned by mysql user
    Resolves: #1590369
  - Use explicitly openssl-devel as dependency for -devel sub-package


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-1
changelog:
  - Rebase to MySQL 8.0.12
  - Fix the SYS_NICE capabilities
  - Add requires for the semanage binary
  - CVEs fixed: CVE-2018-3054 CVE-2018-3056 CVE-2018-3060 CVE-2018-3062
    CVE-2018-3064 CVE-2018-3065 CVE-2018-3077 CVE-2018-3081 CVE-2018-3067
    CVE-2018-3073 CVE-2018-3074 CVE-2018-3075 CVE-2018-3078 CVE-2018-3079
    CVE-2018-3080 CVE-2018-3082 CVE-2018-3084


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-3
changelog:
  - Add bundled ICU version
  - Add a patch for the 'mysql_com.h' header file
  - Use system mecab tool
  - Use RPATH for mysqld, so we can later set capabilities


author: Michal Schorm <mschorm@redhat.com> - 8.0.12-6
changelog:
  - Fix the default configuration of the server, so it uses same authentication
    method as MySQL 5.7
    Resolves: #1631400


author: Michal Schorm <mschorm@redhat.com> - 8.0.13-1
changelog:
  - Rebase to 8.0.13
  - ICU patch removed; upstreamed
  - Patch for MySQL Router introduced. Do not build it.
  - Fixes for annocheck hardening
    Resolves: #1624148
  - CVEs fixed:
    CVE-2018-3276 CVE-2018-3200 CVE-2018-3137 CVE-2018-3284 CVE-2018-3195
    CVE-2018-3173 CVE-2018-3212 CVE-2018-3279 CVE-2018-3162 CVE-2018-3247
    CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3174 CVE-2018-3282
    CVE-2018-3285 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144 CVE-2018-3145
    CVE-2018-3170 CVE-2018-3186 CVE-2018-3182 CVE-2018-3133 CVE-2018-3143
    CVE-2018-3283 CVE-2018-3171 CVE-2018-3251 CVE-2018-3286 CVE-2018-3185
    CVE-2018-3280 CVE-2018-3203 CVE-2018-3155


author: Matej Mužila <mmuzila@redhat.com> - 8.0.17-1
changelog:
  - Rebase to 8.0.17
  - Resolves: #1732043
  - CVEs fixed:
    CVE-2019-2737 CVE-2019-2738 CVE-2019-2739 CVE-2019-2740 CVE-2019-2741
    CVE-2019-2743 CVE-2019-2746 CVE-2019-2747 CVE-2019-2752 CVE-2019-2755
    CVE-2019-2757 CVE-2019-2758 CVE-2019-2774 CVE-2019-2778 CVE-2019-2780
    CVE-2019-2784 CVE-2019-2785 CVE-2019-2789 CVE-2019-2791 CVE-2019-2795
    CVE-2019-2796 CVE-2019-2797 CVE-2019-2798 CVE-2019-2800 CVE-2019-2801
    CVE-2019-2802 CVE-2019-2803 CVE-2019-2805 CVE-2019-2808 CVE-2019-2810
    CVE-2019-2811 CVE-2019-2812 CVE-2019-2814 CVE-2019-2815 CVE-2019-2819
    CVE-2019-2822 CVE-2019-2826 CVE-2019-2830 CVE-2019-2834 CVE-2019-2879


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.21-1
changelog:
  - Rebase to 8.0.21
  - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0
  - Check that we have correct versions in bundled(*) Provides
  - Remove re2 bundled dependency


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.22-1
changelog:
  - Update to MySQL 8.0.22
  - mysql-certs-expired.patch patched by upstream
  - New zlib_decompress binary file in test package


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: zhangbinchen <zhangbinchen@openanolis.org> - 8.0.30-1.0.1
changelog:
  - remove check_testsuite 
  - redefine ignore_testsuite_result
  - Support loongarch64 platform (liwei.glw@openanolis.org)


author: zhangbinchen <zhangbinchen@openanolis.org> - 8.0.32-1.0.1
changelog:
  - remove check_testsuite
  - redefine ignore_testsuite_result
  - Support loongarch64 platform (liwei.glw@openanolis.org)
  - skip have_32bits_time test on loongarch64 (liwei.glw@openanolis.org)
  - fix main.derived_condition_pushdown test (rb01097748@alibaba-inc.com)
  - fix loaddata_special test for loongarch64 (rb01097748@alibaba-inc.com)


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves:             #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves:             #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves:             #193559
  - Adjust link options for BDB module
  Resolves:             #199368


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related:              #221085
  - Fix unsafe use of install-info
  Resolves:             #223713
  - Cope with new automake in F7
  Resolves:             #224171


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves:             #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves:             #205630


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related:              #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves:             #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves:             #246535
  - Move mysql_config's man page to base package
  Resolves:             #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves:             #241912


author: Tom Lane <tgl@redhat.com> 5.0.45-6
changelog:
  - Back-port upstream fixes for CVE-2007-5925, CVE-2007-5969, CVE-2007-6303.
  Related:              #422211


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related:              #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related:              #435494


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves:             #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves:             #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related:              #450178


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves:             #149829


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related:              #477624


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves:             #502966


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related:              #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves:             #533736


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related:              #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves:             #540735


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves:             #547485


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related:              #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves:             #560181
  - Revert broken upstream fix for their bug 45058
  Resolves:             #566547


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related:              #557711
  Related:              #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves:             #592862
  Resolves:             #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related:              #594155


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves:             #597390
  - Fix broken "federated" storage engine plugin
  Related:              #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related:              #598656


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related:              #614214


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related:              #609734


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves:             #646569


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves:             #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves:             #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.9-2
changelog:
  - Disable a regression test that is now showing platform-dependent results
  Resolves:             #674253


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves:             #658938


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves:             #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related:              #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related:              #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-3
changelog:
  - Convert to systemd startup support (no socket activation, for now anyway)
  Related:              #714426


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves:             #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves:             #661265


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves:             #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves:             #547007


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves:             #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves:             #785243


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves:             #789530


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related:              #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves:             #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves:             #799735


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves:             #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves:             #832029


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related:              #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves:             #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves:             #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves:             #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related:              #855704


author: Tom Lane <tgl@redhat.com> 5.5.28-2
changelog:
  - Add patch for CVE-2012-5611
  Resolves:             #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related:              #877124


author: Tom Lane <tgl@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves:             #890535


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Trond Eivind Glomsrød <teg@redhat.com> 0.98.32-1
changelog:
  - 0.98.32
  - Various doc files have changed names/been removed/added
  - New download location (after the license change, it's at sourceforge)
  - The new version is LGPL
  - Only build on x86 (#65255)


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Petr Machata <pmachata@redhat.com> - 0.98.39-5
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names
  - port bogus elf patch to new nasm version and turn it on again


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Gregory Leblanc <gleblanc@grego1.cu-portland.edu>
changelog:
  - Added BuildRequires lines
  - Changed Source to point to ftp.gnome.org instead of just the tarball name
  - Moved %description sections closer to their %package sections
  - Moved %changelog to the end, where so that it's not in the way
  - Changed configure and make install options to allow moving of
    libraries, includes, binaries more easily
  - Removed hard-coded paths (don't define %prefix or %docdir)
  - replace %{prefix}/bin with %{_bindir}
  - replace %{prefix}/share with %{_datadir}
  - replace %{prefix}/lib with %{_libdir}
  - replace %{prefix}/include with %{_includedir}


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move to a CVS snapshot of nautilus for now
    (Darin is my hero for having distcheck work out of CVS)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.0.4, removes eazel services icon and wizard page
  - Eazel logo is still in startup wizard for now, needs fixing


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Change default background and rubberband color.
  - Use the sidebar tabs from the default theme
  - BuildDepend on fam-devel, depend on fam
  - Disable the eazel update pages in the first-time druid.
  - Remove the eazel logo from the first-time druid


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Make the fam dependency a real runtime dependency
  - by linking to libfam (nautilus-1.0.4-fam-lib.patch)
  - Cleaned up specfile.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update to my latest 'cvs diff -u' (adds default 
    Start Here link, displays .directory name in sidebar)
  - include /etc/X11/* links (starthere, sysconfig, serverconfig)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move first time druid patch into my "CVS outstanding" patch
  - try to really remove Help/Feedback
  - try to really fix Help/Community Support
  - try again to get Start Here in the Go menu
  - try again to get Start Here on the desktop
  - don't show file sizes for .desktop files


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add BuildRequires (#49539, 49537)
  - Fix %post, %postun (#49720)
  - Background efficiency improvements and hacks


author: Havoc Pennington <hp@redhat.com>
changelog:
  - sync new tarball from our CVS branch, 
    fixes some drag-and-drop, changes URI scheme names,
    etc.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Fix crash-on-startup showstopper
  - Fix can't-find-images bug (this one was only showing up
    when built with debug symbols, since it was an uninitialized memory
    read)


author: Alexander Larsson <alexl@redhat.com> 1.0.4-21
changelog:
  - Remove the "don't run as root" warning.
  - Remove eazel from bookmarks
  - langified (again? did someone change it?)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Sync our CVS version; fixes some MUSTFIX
    (the one about drawing background on startup, 
     properly translate desktop files, etc.)


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Changed starthere .desktop files to be links instead
  - of spawning a new nautilus. This makes start-here:
  - much faster.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with missing desktop starthere.desktop file
  - New snapshot from our branch, fixes:
    - On upgrade, icons migrated from GNOME desktop are not properly lined up
      (#51436)
    - icons dropped on the desktop don't end up where dropped. (#51441)
    - Nautilus shouldn't have fam monitor read-only windows. This
      keeps CDROMS from being unmounted until you close all

      nautilus windows pointing to them. (#51442)
    - Warnings about 'cannot statfs...' when moving items to trash.
  - Use separate start-here.desktop for panel, since the one used
    for the root window only works from Nautilus.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make start here icon work again
  - kill some warning spew, #51661
  - cache getpwnam() results to speed things up a bit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make Programs icon into a link, to match the other .desktop files
  - own various directories #51164
  - web page titles in Japanese, #51709
  - tree defaults to only directories #51850


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix bug causing 32000 stats or so in large directories, 
    should speed things up somewhat
  - fix #52104 via gruesome kdesktop-detection hack and setting
    window type hint on our desktop window
  - fix so Start Here icon displays in sidebar
  - don't load non-local .desktop files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - I screwed up the build yesterday, so it didn't actually contain the
    fixes mentioned. This build should contain them.


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - require Mozilla 0.9.7
  - Add patch that puts mozilla profile startup before embedding is initialized


author: Havoc Pennington <hp@redhat.com>
changelog:
  - drop Milan-specific features, including png10 and ac25 patches
  - copy in 1.0.5 help component to avoid large risky patch
  - remove .la files
  - drop mozilla from ia64 again
  - remove oaf file from nautilus-mozilla that was also in the base 
    package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Relibtoolize to fix relink problems for solib components
  - Add LANG=en_US to %makeinstall as well
  - Back out previous change, force locale to en_US to prevent UTF-8 problems
  - Add workaround for intltool-merge bug on ia64


author: Havoc Pennington <hp@redhat.com>
changelog:
  - ignore the "add_to_session" preference as it only broke stuff
  - pad the left margin a bit to cope with poor word wrapping


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a simple patch so that redhat-config-packages can disable 
    the new window behavior for mounted CDs behavior.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require newer redhat-artwork, -menus, eel2, gnome-vfs2 to avoid
    bogus bug reports
  - add hack for HTML mime type handling in a web browser, not 
    nautilus


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put button press mask in triple-click patch, maybe it will work
  - remove html-hack patch as it does nothing useful


author: Alexander Larsson <alexl@redhat.com> 2.1.5-2
changelog:
  - Add cdburn patch.
  - Remove nautilus-1.1.19-starthere-hang-hackaround.patch
  - Require nautilus-cd-burner


author: Havoc Pennington <hp@redhat.com>
changelog:
  - perl-munge the icon names in a couple desktop files
    to find redhat-network-server.png and redhat-file-manager.png.
    Upstream icon names here were weird and seem broken.


author: Alexander Larsson <alexl@redhat.com> 2.2.0.2-1
changelog:
  - Update to 2.2.0.2, fixes bg crasher
  - parallelize build
  - Added patch from cvs that fixes password hang w/ smb


author: Alexander Larsson <alexl@redhat.com> 2.2.1-2
changelog:
  - Add a patch to fix the forkbomb-under-kde bug (#81520)
  - Add a patch to fix thumbnail memory leak
  - require libXft.so.2 instead of Xft, since that changed in the XFree86 package


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Update to the latest bugfixes from cvs.
  - Fixes #84291 for nautilus, context menu duplication and some other small bugs.


author: Alexander Larsson <alexl@redhat.com> 2.3.9-1
changelog:
  - update
  - Add patch to ignore kde desktop links
  - Re-enable kdesktop detection hack.
    kde doesn't seem to support the manager selection yet


author: Mike A. Harrisn <mharris@redhat.com> 2.5.91-2
changelog:
  - Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
  - Fixed BuildRoot to use _tmppath instead of /var/tmp


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-2
changelog:
  - Fix open with menu on mime mismatch
  - Create desktop links ending with .desktop (#125104)
  - Remove old cruft from specfile


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-3
changelog:
  - Slightly less bad error dialog when there is no handler for a file.
    Not ideal, but this change doesn't change any strings.


author: David Zeuthen <davidz@redhat.com> 2.10.0-3
changelog:
  - Include patches for desktop background memory saving (GNOME bug #169347)
  - Obsoletes: nautilus-media (#153223)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-6
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Alexander Larsson <alexl@redhat.com> - 2.16.2-7
changelog:
  - Look for beagle before tracker, because tracker autostarts
    This lets us support having both installed at the same time.
  - Remove buildreqs for beagle, as they are not necessary with
    the dynamic work.


author: - Bastien Nocera <bnocera@redhat.com> - 2.20.0-6
changelog:
  - Fix audio preview command-line to use decodebin so playbin doesn't
    pop up a window for videos detected as audio


author: Tomas Bzatek <tbzatek@redhat.com> - 2.21.92-2
changelog:
  - Change libbeagle .so name for libbeagle-0.3.0 in nautilus-2.21.1-dynamic-search-r2.patch (#434722)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.22.0-2
changelog:
  - Don't create application/x-ext-<extension> types for known mimetypes (patch from head)
  - Fix a crash in the Properties dialog while changing owner (patch from head)


author: David Zeuthen <davidz@redhat.com> - 2.22.2-3
changelog:
  - Revert Fedora livecd mount (fix is in latest gvfs packages) and
    add a patch to avoid trying to autorun mounts that are mounted
    from outside Nautilus (#442189)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.1-3
changelog:
  - Mask file moving to nautilus-cd-burner window as copy operation (#443944)
  - Don't allow recursive move/copy into itself (gnomebz #530720)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.2-3
changelog:
  - Add DnD support to drop files onto archive files with help 
    of file-roller (gnomebz #377157)
  - Add fix preventing crash on bad GFileInfos (gnomebz #519743)


author: Alexander Larsson <alexl@redhat.com> - 2.24.1-2
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.25.1-4
changelog:
  - Properly open new windows after long mount operation
  - Fix callback connection to the GtkMountOperation dialog


author: Matthias Clasen <mclasen@redhat.com> - 2.25.2-1
changelog:
  - Update to 2.25.2
  - Clean up Requires
  - Obsolete eel2
  - Drop hard dependency on gvfs backends. 
    These are pulled in by comps, anyway


author: Colin Walters <walters@verbum.org> - 2.91.93-2
changelog:
  - Drop --vendor from nautilus.desktop
    Vendor prefixes are pointless, and in this case breaks upstream
    components trying to reference each other via .desktop file, such
    as GNOME Shell having nautilus.desktop in its default favorite
    list.


author: David King <amigadave@amigadave.com> - 3.15.4-1
changelog:
  - Update to 3.15.4
  - Use pkgconfig for BuildRequires
  - Update man page globs in files section
  - Use license macro for license texts


author: Kalev Lember <klember@redhat.com> - 3.18.0-1
changelog:
  - Update to 3.18.0
  - Don't pull in all of nautilus for the -extensions subpackage
  - Tighten a dep with the _isa macro
  - Drop ancient obsoletes


author: Kalev Lember <klember@redhat.com> - 3.21.91.1-1
changelog:
  - Update to 3.21.91.1
  - Filter private libgd from provides and requires
  - Use upstream defaults for OnlyShowIn


author: Kalev Lember <klember@redhat.com> - 3.37.92-1
changelog:
  - Update to 3.37.92
  - Switch to tracker3
  - Tighten nautilus-extensions soname glob
  - Fix directory ownership for /usr/lib/nautilus/extensions-3.0 directory


author: Paul W. Frields <stickster@gmail.com> - 0.4-3
changelog:
  - Rearrange Requires and BuildRequires for subpackages
  - Include default Evolution plugin in main package


author: Alexander Larsson <alexl@redhat.com> - 0.4-5
changelog:
  - Build in Core
  - Move gaim plugin into main package
  - Fix up some build requirements
  - No bluetooth on s390*


author: Matthew Barnes <mbarnes@redhat.com> - 0.8-2
changelog:
  - Update BuildRequires for evolution-data-server-devel.
  - Rebuild against evolution-data-server-1.9.1.


author: Bastien Nocera <bnocera@redhat.com> 1.1.5-2
changelog:
  - Disable the evolution plugin, it will be in Evo itself in 2.27.x
    See http://bugzilla.gnome.org/show_bug.cgi?id=579099


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.3-1
changelog:
  - New upstream version 1.1.3 which fixes some test problems.
  - Disable tests because Rawhide kernel is broken (RHBZ#991808).
  - Remove a single quote from description which confused emacs.
  - Remove patch, now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.5-2
changelog:
  - New upstream version 1.1.5.
  - Enable the new Python plugin.
  - Perl plugin man page moved to section 3.
  - Perl now requires ExtUtils::Embed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-3
changelog:
  - Backport some upstream patches, fixing a minor bug and adding more tests.
  - Enable the tests since kernel bug is fixed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.9-2
changelog:
  - New upstream version 1.1.9.
  - Add the streaming plugin.
  - Include fix for streaming plugin in 1.1.9.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.11-5
changelog:
  - Don't run tests on x86, because kernel is broken there
    (https://bugzilla.redhat.com/show_bug.cgi?id=1302071)


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.12-1
changelog:
  - New upstream version 1.1.12
  - Enable Ruby plugin.
  - Disable tests on Rawhide because libvirt is broken again (RHBZ#1344016).


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.13-1
changelog:
  - New upstream version 1.1.13.
  - Remove patches which are all upstream.
  - Remove grubby hack, should not be needed with modern supermin.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.16-2
changelog:
  - New upstream version 1.1.16.
  - Disable python3 plugin on RHEL/EPEL <= 7.
  - Only ship on x86_64 in RHEL/EPEL <= 7.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.18-3
changelog:
  - New upstream version 1.1.18.
  - Add NBD forwarding plugin.
  - Add libselinux-devel so that SELinux support is enabled in the daemon.
  - Apply all patches from upstream since 1.1.18.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.19-1
changelog:
  - New upstream version 1.1.19.
  - Combine all the simple plugins in %{name}-basic-plugins.
  - Add memory and null plugins.
  - Rename the example plugins subpackage.
  - Use %license instead of %doc for license file.
  - Remove patches now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.23-1
changelog:
  - New upstream version 1.1.23.
  - Add example4 plugin.
  - Python3 tests require libguestfs so disable on s390x.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-1
changelog:
  - New stable version 1.2.3.
  - Add patch to work around libvirt problem with relative socket paths.
  - Add patch to fix the xz plugin test with recent guestfish.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-1
changelog:
  - New stable version 1.2.4.
  - Remove upstream patches.
  - Enable tarball signatures.
  - Add upstream patch to fix tests when guestfish not available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - change category to Applications/File, to match
    gzip and bzip2 
  - rename the spec file to ncompress.spec
  - add ppc to the bigendian arch list


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - Make it support large files (structs, stats, opens and of course:
    _don't use signed longs for file size before and after compression_.)
    This should fix #39470


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Jeff Johnson <jbj@redhat.com> 0.23.9-2
changelog:
  - force expat, include neon-config, for subversion build.
  - do "make check" (but ignore failure for now)


author: Joe Orton <jorton@redhat.com> 0.24.4-3
changelog:
  - use BuildRequires not BuildPrereq, drop autoconf, libtool;
    -devel requires {openssl,zlib}-devel (#116744)


author: Joe Orton <jorton@redhat.com> 0.25.5-6
changelog:
  - remove trailing dot in -devel Summary
  - use standard BuildRoot
  - change Group to System Environment/Libraries
  - drop Prefix


author: Joe Orton <jorton@redhat.com> - 0.30.2-6
changelog:
  - fix implicit writev declaration (Mattias Ellert, #1572180)
  - add build conditional for tests
  - use ldconfig_scriptlets macro


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-10
changelog:
  - moved agentxtrap utility to net-snmp subpackage,
    it needs libraries provided by net-snmp-agent-libs.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-13
changelog:
  - set permissions of snmpd.conf and snmptrapd conf to 0600 to prevent
    users from reading passwords and community strings.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-16
changelog:
  - Fixed snmpd crashing when AgentX subagent disconnects in the middle of
    request processing (#1038011)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed CVE-2014-3565
  - Fixed net-snmp-cert tool, now it does not depend on net-snmp-devel (#1134475)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-13
changelog:
  - net-snmp.redhat.conf: update default configuration to conform to the best practices (#1359123)
  - nmp_transport.c: use strtok_r for strtok to avoid a race condition (#1366282)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-15
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  - Add support for new version of OpenSSL library (#1423984)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-19
changelog:
  - Fix issue with undefined symbol my_progname when try to load NetSNMP::TrapReceiver in perl script. (#1470004)


author: Adam Williamson <awilliam@redhat.com> -1:5.7.3-20
changelog:
  - Edit fix of issue with undefined symbol my_progname when try to load
    NetSNMP::TrapReceiver in perl script (#1470004)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:5.7.3-26
changelog:
  - Python 2 binary package renamed to python2-net-snmp
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-30
changelog:
  - remove Group tag
  - remove sysvinit package and init files (no longer needed)
  - fix python2 references and dependencies in spec file


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-33
changelog:
  - Fix strstr() crash when looking for RPM Group tag
  - Fix wrong usage of structure iterator
  - Fix issue with statistics from autofs


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for config files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Laine Stump <laine@redhat.com> - 0.1.6-1
changelog:
  - New version
  - Remove patch n0001-src-dutil.c-add-missing-includes-for-stat.patch,
    included upstream


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - Rebase to netcf-0.1.8
  - new transactional change APIs: ncf_change_(begin|commit|rollback)
  - add stdout/stderr to error text when an external program fails
  - make error reporting of failed execs more exact/correct
  - Remove unnecessary "Requires" of libxml2 and augeas from pkgconfig file
    to pulling in extra packages when building an application that uses netcf.


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - Rebase to netcf-0.1.9
  - always add <bridge> element to bridge, even if there is no physdev present
  - don't log error if interface isn't found in kernel during status report
  - allow building with C++
  - update gnulib


author: Laine Stump <laine@redhat.com> - 0.2.1-1
changelog:
  - Rebase to netcf-0.2.1
  - update gnulib to fix broken build on systems with nwer glibc (which no
    longer provides gets()).
  - add ncftool manpage
  - interfaces are only "active" if both UP and RUNNING.
  - add "bundled(gnulib)" to specfile to indicate that we use a local
    copy of gnulib sources (used by Fedora/RHEL when determining the scope
    of security bugs).
  - Fix ipcalc_netmask, which was trimming off the last digit in
    character representations of full-length netmasks (all 4 octets
    having 3 chars each)
  - other minor bugfixes


author: Laine Stump <laine@redhat.com> - 0.2.2-1
changelog:
  - Rebase to netcf-0.2.2
  - specfile: require libnl3-devel for rpm builds on Fedora 18+ and
    RHEL7+. Likewise, force libnl1 for F17- and RHEL6.x-, even if
    libnl3-devel is installed.


author: Laine Stump <laine@redhat.com> - 0.2.3-1
changelog:
  - Rebase to netcf-0.2.3
  - eliminate calls to nl_cache_mngt_provide(), to avoid
    non-threadsafe code in libnl (and because it isn't needed
    anyway) (This non-threadsafe code could lead to a segfault)
  - portability fixes for FreeBSD
  - fix bug when a config file has two config parameters with
    identical names
  - add HACKING document
  - always bail immediately if get_augeas fails (doing otherwise
    could lead to a segfault)


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - avoid use of uninitialized data when getting mac address
     (fixes https://bugzilla.redhat.com/show_bug.cgi?id=1046594 )
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Laine Stump <laine@redhat.com> - 0.2.5-1
changelog:
  - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces


author: Laine Stump <laine@redhat.com> - 0.2.7-1
changelog:
  - rebase to netcf-0.2.7
   - resolve CVE-2014-8119
   - support multiple IPv4 addresses in interface config (redhat driver)
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - recognize IPADDR0/NETMASK0/PREFIX0
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - miscellaneous systemd service fixes
   - use git to apply patches in rpm specfile
   - revert the 0.2.6-2 specfile patch mentioned below (now fixed properly)


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.35-8
changelog:
  - remove bogus man pages (#220112, #220113)
  - overflow2() no more conflicts with libgd.so (#216116)
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 10.35.32-1
changelog:
  - remove .svn directories from tarball to reduce its size
  - update fixes rhbz#337181 and likely others


author: Jindrich Novy <jnovy@redhat.com> 10.35.48-1
changelog:
  - update to 10.35.48
  - fixes buffer overrun in pamperspective and pngtopnm output format
  - update .security2 patch so that it applies with fuzz==0


author: Jindrich Novy <jnovy@rehdat.com> 10.35.49-1
changelog:
  - update to 10.35.49
  - fixes crash in pamcut when cutting a region entirely to the
    left or right of the input image, with -pad


author: Jindrich Novy <jnovy@redhat.com> 10.35.51-1
changelog:
  - update to netpbm-10.35.51
  - make it actually compilable by removing duplicated function
    in pamcomp.c


author: Jindrich Novy <jnovy@rehdat.com> 10.35.54-1
changelog:
  - update to 10.35.54
  - adds better randomization for ppmforge, pgmnoise, pgmcrater
  - fixes array bounds violation in pnm_createBlackTuple() with PBM, PGM
  - fixes crash in pnmtoddif with any PGM input


author: Jindrich Novy <jnovy@redhat.com> 10.35.57-3
changelog:
  - unbreak ppmshadow and ppmrainbow (#476989)
  - pnmmontage won't crash because of uninitialized memory usage


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-1
changelog:
  - update to 10.35.38
  - fixes crashes in picttoppm, pbmtomrf, mrftopbm
  - fixes bugs in leaftoppm, ilbmtoppm


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-3
changelog:
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-4
changelog:
  - fix segfault in ximtoppm (#482891), the utility lacked the
    command line parsing initialization code


author: Jindrich Novy <jnovy@redhat.com> 10.35.59-1
changelog:
  - update to 10.35.59
  - fixes array bound violation in ilbmtoppm
  - fixes garbage output when input in fitstopnm is little endian
    floating point FITS


author: Jindrich Novy <jnovy@redhat.com> 10.35.60-1
changelog:
  - update to 10.35.60
  - update .security patch, minor cleanup
  - fixes xwdtopnm for at least some direct color 24/32 images
  - fixes memory leak and out of memory crash in libpammap


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-1
changelog:
  - update to 10.35.61
  - upstream fixes array bound violation in pbmtog3
  - drop .pbmtog3segfault patch, we fixed this some time ago already
    and it is in upstream now
  - use saner exit status in ppmfade


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-2
changelog:
  - remove two hunks from security patch breaking pbmclean and pbmlife (#493015)
  - fix ppmdfont and svgtopnm, thanks to Jiri Moskovcak


author: Jindrich Novy <jnovy@redhat.com> 10.35.62-1
changelog:
  - update to 10.35.62
  - upstream fixes pamstereogram
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise
    so that they match their man pages (#483011, #483070, #483243, #483245)
  - avoid clashes with getline() from glibc


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.47.06-1
changelog:
  - update to 10.47.06 - fixes the dumb pamtosvg mistake in 10.47.05
  - pnmmargin won't create leftovers in /tmp (#547888)


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-1
changelog:
  - update to 10.47.09, fixes occassional crash in pamtosvg
  - fix documentation
  - fix ppmfade exit status


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-3
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - link against -lz (#564649)


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-2
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-3
changelog:
  - package docs in separate netpbm-doc package (#492437)
  - don't package patch backups in documentation
  - netpbm-progs package requires ghostscript


author: Jindrich Novy <jnovy@redhat.com> 10.47.12-3
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)
  - fix documentation for pamperspective and pbmtoepson


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - update to 0.9.5.95 (0.9.6-rc1)  snapshot
  - editor: fixed UI mnemonics
  - editor: fix defaults for PPP echo values
  - applet: various crash and stability fixes
  - applet: show IPv6 addressing page for VPN plugins that support it
  - applet: port to GSettings and split out 0.8 -> 0.9 migration code into standalone tool


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - lib: recognize PKCS#12 files exported from Firefox
  - lib: fix some wireless dialog crashes


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.7.997 (0.9.8-beta2)
  - editor: better handling of gateway entry for IPv4
  - editor: fix some mnemonics (rh #893466)
  - editor: fix saving connection when ignoring CA certificate
  - editor: enable Bridge connection editing
  - editor: hide widgets not relevant for VPN connections


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - Updated translations
  - editor: don't overwrite bridge/bond master interface name with UUID
  - applet: fix WWAN PIN dialog invalid "label1" entry widget
  - editor: fix allowed values for VLAN ID and MTU
  - editor: preserve existing PPP connection LCP echo failure and reply values
  - editor: ensure changes to the STP checkbox are saved
  - editor: hide BSSID for AdHoc connection (rh #906133)
  - editor: fix random data sneaking into IPv6 route gateway fields
  - editor: fix handling of initial entry for MAC address widgets


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-3.git20130430
changelog:
  - editor: fix possible crash canceling connection edit dialog
  - applet: only request secrets from the user when allowed to
  - applet: fix signal icons with newer libpng
  - applet: fix possible crash getting secrets with libsecret


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-5.git20130906
changelog:
  - editor: fix missing user/password when re-editing a connection (rh #1000564)
  - editor: fix handling of missing CA certificate prompts (rh #758076) (rh #809489)
  - editor: fix handling of bonding modes (rh #953076)
  - applet/editor: add InfiniBand device support (rh #867273)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-6.git20130906
changelog:
  - libnm-gtk: fix for enabling the Apply button for PEAP and TTLS (rh #1000564)
  - libnm-gtk: only save CA certificate ignored value when connection is saved
  - editor: fix display of VLAN parent interface


author: Dan Winship <danw@redhat.com> - 0.9.9.0-7.git20131028
changelog:
  - update to latest git snapshot
  - re-enable nm-applet on certain non-GNOME-Shell desktops (rh #1017471)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-8.git20140123
changelog:
  - update to latest git snapshot (git20140123 sha:5d4f17e)
  - applet: fix crash when "CA certificate is not required" (rh #1055535)


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20150903git807cbdf
changelog:
  - Update to 1.2 git snapshot:
  - Add libnma subpackages
  - Add support for libnm-based properties plugins


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-2
changelog:
  - editor: fix crash when destroying 802.1x page (rh #1458567)
  - po: update Japanese translation (rh #1379642)


author: Thomas Haller <thaller@redhat.com> - 1.8.10-2
changelog:
  - fix double-free handling VPN data in nm-applet (rh #1541565)
  - fix certificate chooser for no available modules (bgo #785674)


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.7.65-1
changelog:
  - Update to new stable 0.7.65
  - change ownership of logdir to root:root
  - add support for ipv6 (bug #561248)
  - add random_index_module
  - add secure_link_module


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.8.53-3
changelog:
  - Change ownership of /var/log/nginx to be 0700 nginx:nginx
  - update init script to use killproc -p
  - add reopen_logs command to init script
  - update init script to use nginx -q option


author: Keiran "Affix" Smith <fedora@affix.me> - 1.0.10-1
changelog:
  - Bugfix: a segmentation fault might occur in a worker process if resolver got a big DNS response. Thanks to Ben Hawkes.
  - Bugfix: in cache key calculation if internal MD5 implementation wasused; the bug had appeared in 1.0.4.
  - Bugfix: the module ngx_http_mp4_module sent incorrect "Content-Length" response header line if the "start" argument was used. Thanks to Piotr Sikora.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.12-2
changelog:
  - update upstream URL
  - replace %define with %global
  - remove obsolete BuildRoot tag, %clean section and %defattr
  - remove various unnecessary commands
  - add systemd service file and update scriptlets
  - add Epoch to accommodate %triggerun as part of systemd migration


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-1
changelog:
  - update to upstream release 1.0.15
  - no need to apply auto-cc-gcc patch
  - add %global _hardened_build 1


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-4
changelog:
  - add nginx-upgrade to replace functionality from the nginx initscript
    that was lost after migration to systemd
  - add README.fedora to describe usage of nginx-upgrade
  - nginx.logrotate: use built-in systemd kill command in postrotate script
  - nginx.service: start after syslog.target and network.target
  - nginx.service: remove unnecessary references to config file location
  - nginx.service: use /bin/kill instead of "/usr/sbin/nginx -s" following
    advice from nginx-devel
  - nginx.service: use private /tmp


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.4-1
changelog:
  - update to upstream release 1.2.4
  - introduce new systemd-rpm macros (#850228)
  - link to official documentation not the community wiki (#870733)
  - do not run systemctl try-restart after package upgrade to allow the
    administrator to run nginx-upgrade and avoid downtime
  - add nginx man page (#870738)
  - add nginx-upgrade man page and remove README.fedora
  - remove chkconfig from Requires(post/preun)
  - remove initscripts from Requires(preun/postun)
  - remove separate configuration files in "/etc/nginx/conf.d" directory
    and revert to upstream default of a centralized nginx.conf file
    (#803635) (#842738)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-2
changelog:
  - send correct kill signal and use correct file permissions when rotating
    log files (#888225)
  - send correct kill signal in nginx-upgrade


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-5
changelog:
  - uncomment "include /etc/nginx/conf.d/*.conf by default but leave the
    conf.d directory empty (#903065)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.0-1
changelog:
  - update to upstream release 1.4.0
  - enable SPDY module (new in this version)
  - enable http gunzip module (new in this version)
  - enable google perftools module and add gperftools-devel to BR
  - enable debugging (#956845)
  - trim changelog


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.1-1
changelog:
  - update to upstream release 1.4.1 (#960605, #960606):
    CVE-2013-2028 stack-based buffer overflow when handling certain chunked
    transfer encoding requests


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.1-1
changelog:
  - update to upstream release 1.6.1
  - (#1126891) CVE-2014-3556: SMTP STARTTLS plaintext injection flaw


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.2-2
changelog:
  - create nginx-filesystem subpackage (patch from Remi Collet)
  - create /etc/nginx/default.d as a drop-in directory for configuration files
    for the default server block
  - clean up nginx.conf


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-4
changelog:
  - add TimeoutStopSec=5 and KillMode=mixed to nginx.service
  - set worker_processes to auto
  - add some common options to the http block in nginx.conf
  - run nginx-upgrade on package update
  - remove some redundant scriptlet commands
  - listen on ipv6 for default server (#1217081)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-8
changelog:
  - replace /bin/kill with /usr/bin/systemctl kill in logrotate script (#1231543)
  - remove After=syslog.target in nginx.service (#1231543)
  - replace ExecStop with KillSignal=SIGQUIT in nginx.service (#1231543)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-14
changelog:
  - consistently use '%global with_foo' style of logic
  - remove PID file before starting nginx (#1268621)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.1-1
changelog:
  - update to upstream release 1.8.1
  - CVE-2016-0747: Insufficient limits of CNAME resolution in resolver
  - CVE-2016-0746: Use-after-free during CNAME response processing in resolver
  - CVE-2016-0742: Invalid pointer dereference in resolver


author: Björn Esser <besser82@fedoraproject.org> - 1:1.12.1-5
changelog:
  - Add patch to apply glibc bugfix if really needed only
  - Disable strict symbol checks in the link editor


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Renbo <rb01097748@alibaba-inc.com> - 1:1.20.1-1.0.1
changelog:
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - Update html pages (geliwei@openanolis.org)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: Liwei Ge <geliwei@openanolis.org> - 1:1.22.1-1.0.1
changelog:
  - Update html pages
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - add LSE compiling optimization and O3 (fuyuan.wh@alibaba-inc.com)


author: Ben Boeckel <mathstuf@gmail.com> - 0-0.5.20120709gitb90d038
changelog:
  - Preserve timestamps on install
  - Install as ninja-build to avoid conflicts with the ninja IRC package
  - Update snapshot


author: Dan Horák <dan[at]danny.cz> - 1.3.4-2
changelog:
  - workaround possible too low limits for number of processes and open files,
    fixes build on ppc/ppc64 and s390(x)


author: Ben Boeckel <mathstuf@gmail.com> - 1.7.1-1
changelog:
  - update to 1.7.1
  - fix bash completion for the binary rename (#1352330)
  - disable test which fails to koji rlimit settings


author: Akira TAGOH <tagoh@redhat.com> 2.03-1
changelog:
  - New upstream release.
  - converted Japanese nkf.1 to UTF-8. (#105762)
  - nkf-1.92-glibc2290.diff: removed.


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
      http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
      read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
      prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
      CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
      many files/dirs
  - added desktop entry for gnome


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: DengXiewei <dengxiewei@linux.alibaba.com> - 3:7.91-12.0.1
changelog:
  - Add doc sub package
  - Add versioned obsoletes for ease upgrading in future releases (fundawang@yeah.net)


author: Till Maas <opensource@till.name> - 0.0.4-2
changelog:
  - Sync with upstream spec
  - Use Recommends for NetworkManager
  - Add Suggests for NetworkManager-ovs
  - package examples as doc


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.2.0-1
changelog:
  - Update to v8.2.0
  - https://nodejs.org/en/blog/release/v8.2.0/
  - Update npm to 5.3.0
  - Adds npx command


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:8.3.0-1
changelog:
  - Update to v8.3.0
  - https://nodejs.org/en/blog/release/v8.3.0/
  - update V8 to 6.0
  - update minimal gcc and g++ requirements to 4.9.4


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:8.4.0-1
changelog:
  - Update to v8.4.0
  - https://nodejs.org/en/blog/release/v8.4.0/
  - http2 is now supported, add bundled nghttp2
  - remove openssl 1.0.1 patches, we won't be using them in fedora


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.9.3-2
changelog:
  - Update to 8.9.3
  - https://nodejs.org/en/blog/release/v8.9.3/
  - https://nodejs.org/en/blog/release/v8.9.2/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:9.6.1-1
changelog:
  - Update to 9.6.1
  - https://nodejs.org/en/blog/release/v9.6.1/
  - https://nodejs.org/en/blog/release/v9.6.0/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:9.11.1-1
changelog:
  - Update to 9.11.1
  - https://nodejs.org/en/blog/release/v9.11.0/
  - https://nodejs.org/en/blog/release/v9.11.1/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.0.0-1
changelog:
  - Update to 10.0.0
  - https://nodejs.org/en/blog/release/v10.0.0/
  - Drop workaround patch
  - Temporarily drop node_g binary due to
    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85587


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.4.1-1
changelog:
  - Update to 10.4.1 to address security issues
  - https://nodejs.org/en/blog/release/v10.4.1/
  - Resolves: rhbz#1590801
  - Resolves: rhbz#1591014
  - Resolves: rhbz#1591019


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.7.0-2
changelog:
  - Update to 10.7.0
  - https://nodejs.org/en/blog/release/v10.7.0/
  - https://nodejs.org/en/blog/release/v10.6.0/


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.7.0-5
changelog:
  - Import sources from fedora
  - Allow using python2 at %build and %install
  - turn off debug for aarch64


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.13.1-1
changelog:
  - Resolves: RHBZ# 1773503, update to 12.13.1
  - minor clean up and sync with Fedora spec
  - turn off debug builds


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1934566, RHBZ#1934598
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-2
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Fix typo, BR systemtap-sdt-level always, remove y18n patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1945512, RHBZ#1945286
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - Resolves CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988596, RHBZ#1993814, RHBZ#1993808, RHBZ#1993094
  - Resolves: RHBZ#1986742, RHBZ#1993946, RHBZ#1993939, RHBZ#1989426


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.12-1
changelog:
  - Resolves: RHBZ#2084651
  - Resolves: #2086773, #2086777, #2086781, #2086786, #2086790
  - Resolves: #2086795, #2086799, #2086804, #2086809, #2086813
  - Rebase to last v12.x release
  - Remove patch for CVE-2021-23343


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.15.4-1
changelog:
  - Security rebase to 14.15.4
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913001, RHBZ#1912953
  - Resolves: RHBZ#1912636, RHBZ#1898602, RHBZ#1898768, RHBZ#1893987, RHBZ#1893184


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.16.0-1
changelog:
  - Resolves CVE-2021-22883 CVE-2021-22884
  - Resolves: RHBZ#1934566, RHBZ#1934599
  - Rebase, remove ini patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-1
changelog:
  - Resolves: RHBZ#1979844, RHBZ#1977829
  - Resolves: RHBZ#1842826
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.3-3
changelog:
  - Resolves: RHBZ#1945513, RHBZ#1945287
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Bump for missing mentions of CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2026325
  - Resolves: RHBZ#2014130, RHBZ#2014124, RHBZ#2013826, RHBZ#2024921
  - Rebase to new version to fix CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest version
  - Resolves: RHBZ#2106367
  - CVE fixes for CVE-2022-32212/3/4/5
  - Resolves: #2109576, #2109579, #2109582, #2109585


author: Zuzana Svetlikova <zsvetlik@redhat.com - 1:14.20.0-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping
  - Resolves: RHBZ#2111417


author: Jan Staněk <jstanek@redhat.com> - 1:14.18.2-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest release
  - Resolves: #2106281, #2108056, #2108061, #2108066, #2108071, #2108139
  - Remove libs patch
  - Build without corepack


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.1-2
changelog:
  - Apply upstream fix for CVE-2022-24999
    Resolves: CVE-2022-24999
  - Record CVEs fixed by current or previous upstream releases
    Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153712
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.1.0-1
changelog:
  - Resolves: RHBZ#1953991
  - Rebase to v16.x
  - Update version of gcc and gcc-c++ needed
  - Remove libs conditionals
  - Remove unused patches
  - Bundle nghttp3 and ngtcp2


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.4.2-1
changelog:
  - Resolves: RHBZ#1979847
  - Resolves CVE-2021-22918(libuv)
  - Use system cipher list(1842826, 1952915)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.7.0-2
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939,
  - CVE-2021-22940, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1988608, RHBZ#1993816, RHBZ#1993810
  - Resolves: RHBZ#1993097, RHBZ#1993948, RHBZ#1993941, RHBZ#1994963
  - fix python3 in gyp


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.8.0-1
changelog:
  - Resolves CVE-2021-32803, CVE-2021-32804, CVE-2021-37701, CVE-2021-37712
  - Resolves: RHBZ#1993948, RHBZ#1993941, RHBZ#2000151, RHBZ#2002176


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.13.1-1
changelog:
  - Resolves: RHBZ#2014132, RHBZ#2014126, RHBZ#2013828, RHBZ#2024920
  - Resolves: RHBZ#2026329
  - Rebase to LTS release and to fix multiple low and medium CVEs


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.16.0-1
changelog:
  - Rebase to latest version
  - Resolves: RHBZ#2106369
  - CVE fixes for CVE-2022-32212/3/4/5
  - Resolves: #2109578, #2109581, #2109584, #2109588


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.17.1-1
changelog:
  - Rebase to version 16.17.1
  - Resolves: CVE-2022-35255 CVE-2022-35256
  - Resolves: #2132004, #2130552
  - Resolves #2121095


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.16.0-1
changelog:
  - Resolves: #2104754, #2108057, #2108062, #2108067, #2108072
  - Resolves CVE-2022-29244, CVE-2022-32212/3/4/5
  - Resolves: #2106285
  - Rebase to latest release


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.17.1-1
changelog:
  - Rebase to version 16.17.1
  - Resolves: CVE-2022-35255 CVE-2022-35256
  - Resolves: #2130553
  - Resolves #2132003
  - Resolves #2121095


author: Jan Staněk <jstanek@redhat.com> - 1:16.18.1-2
changelog:
  - Record CVE references already addressed in this or previous upstream versions
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
    Resolves: rhbz#2153713
    Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
    Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188289
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222288


author: Dominik Rehák <drehak@redhat.com> - 1:16.20.2-1
changelog:
  - Rebase to 16.20.2
    Resolves: rhbz#2231866
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1:16.20.1-2.0.2
changelog:
  - Remove loongarch64 arch
  - Update requires and recommands
  - Fixes CVE-2022-25883 (liubo03@inspur.com)


author: Jan Staněk <jstanek@redhat.com> - 1:18.6.0-1
changelog:
  - Rebase to version 18.6.0
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178087
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 1:18.14.2-3
changelog:
  - update cares to 1.19.1
  - fix CVE-2022-4904 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147
    CVE-2023-32067


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2178086
  - Resolves: CVE-2022-25881, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.14.2-3
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2022-4904
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188290 rhbz#2166926
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222287


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228939
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.18.2-1
changelog:
  - Rebase to 18.18.2 (Security release)
  - Switch icu from zip to tgz
  - Fixes #2228925, CVE-2023-45143, CVE-2023-44487, CVE-2023-38552, CVE-2023-39333


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-3
changelog:
  - Repackage the source tar ball as nspr-4.10.0.tar.bz2
  - Ensure client packages dependency resolution succeeds


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to NSPR_4_10_2_RTM
  - Avoid unsigned integer wrapping in PL_ArenaAllocate
  - Resolves: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> - 4.10.4-2
changelog:
  - Resolves: Bug 1083725 - Add ppc64le support to nspr
  - Use a patch by Ulrich Weigand already applied upstream


author: Elio Maldonado <emaldona@redhat.com> - 4.10.10-2
changelog:
  - Use __isa_bits macro instead of list of 64-bit architectures
  - Patch contributed by Marcin Juszkiewicz <mjuszkiewicz@redhat.com>
  - Resolves: Bug 1258425


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180)
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792)
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scripts on account of a shallower source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.2
changelog:
  - Fix incorrect path that hid failed test from view
  - Add ocsp to the test suites to run but ...
  - Temporarily disable the ocsp stapling tests
  - Do not treat failed attempts at ssl pkcs11 bypass as fatal errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix errors in the man pages
  - Resolves: rhbz#984106 - Add missing option descriptions to man pages for {cert|cms|crl}util
  - Resolves: rhbz#982856 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Resolves: rhbz#985114 - Provide man pages for the nss configuration files


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Cleanup spec file to address most rpmlint errors and warnings
  - Using double percent symbols to fix macro-in-comment warnings
  - Ignore unversioned-explicit-provides nss-system-init per spec comments
  - Ignore invalid-url Source0 as it comes from the git lookaside cache
  - Ignore invalid-url Source12 as it comes from the git lookaside cache


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Resolves: rhbz#996639 - Minor bugs in nss man pages
  - Fix some typos and improve description and see also sections


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-7
changelog:
  - Update pem sources to pick up a patch applied upstream which a faulty merge had missed
  - The pem module should not require unique file basenames


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Update to NSS_3_15_2_RTM
  - Update iquote.patch on account of modified prototype on cert.h installed by nss-devel


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Use the full sources from upstream
  - Bug 1019245 - ECDHE in openssl available -> NSS needs too for Firefox/Thunderbird


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws
  - Fix option descriptions for setup-nsssysinit manpage
  - Fix man page of nss-sysinit wrong path and other flaws
  - Document email option for certutil manpage
  - Remove unused patches


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3.1-1
changelog:
  - Update to nss-3.15.3.1 (hg tag NSS_3_15_3_1_RTM)
  - Resolves: Bug 1040282 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)
  - Resolves: Bug 1040192 - nss-3.15.3.1 is available


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-1
changelog:
  - Update to nss-3.15.4 (hg tag NSS_3_15_4_RTM)
  - Resolves: Bug 1049229 - nss-3.15.4 is available
  - Update pem sources to latest from the interim upstream for pem
  - Remove no longer needed patches
  - Update pem/rsawrapr.c patch on account of upstream changes to freebl/softoken
  - Update iquote.patch on account of upstream changes


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem fixes verified on RHEL and applied upstream
  - Fix a problem where same files in two rpms created rpm conflict
  - Move some nss-sysinit manpages tar archives to the %files the
  - All man pages are listed by name so there shouldn't be wildcard inclusion
  - Add support for ppc64le, Resolves: Bug 1052545


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Revert previous change that moved some sysinit manpages
  - Restore nss-sysinit manpages tar archives to %files sysinit
  - Removing spurious wildcard entry was the only change needed


author: Elio Maldonado <emaldona@redhat.com> - 3.15.5-1
changelog:
  - Update to nss-3.15.5
  - Temporarily requiring only nss_softokn_version >= 3.15.4
  - Fix location of sharedb files and their manpages
  - Move cert9.db, key4.db, and pkcs11.txt to the main package
  - Move nss-sysinit manpages tar archives to the main package
  - Resolves: Bug 1066877 - nss-3.15.5 is available
  - Resolves: Bug 1067091 - Move sharedb files to the %files section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.0-1
changelog:
  - Update to nss-3.16.0
  - Cleanup the copying of the tools man pages
  - Update the iquote.patch on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Update to nss-3.16.1
  - Update the iquote patch on account of the rebase
  - Improve error detection in the %section
  - Resolves: Bug 1094702 - nss-3.16.1 is available


author: Jaromir Capik <jcapik@redhat.com> - 3.16.1-2
changelog:
  - Replacing ppc64 and ppc64le with the power64 macro
  - Related: Bug 1052545 - Trivial change for ppc64le in nss spec


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Remove unwanted source directories at end of %prep so it truly does it
  - Skip the cipher suite already run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-2
changelog:
  - Install pp man page in alternative location
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-3
changelog:
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer
  - Install pp man page in %{_datadir}/doc/nss-tools/pp.1
  - Use %{_mandir} instead of /usr/share/man as more generic


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-2
changelog:
  - Disable SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-3
changelog:
  - Commented out the export NSS_NO_SSL2=1 line to not disable ssl2
  - Backing out from disabling ssl2 until the patches are fixed


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-5
changelog:
  - Disable export suites and SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.19.2-3
changelog:
  - Create on the fly versions of sslcov.txt and sslstress.txt that disable tests for SSL2 and EXPORT ciphers


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-3
changelog:
  - Fix patches that disable ssl2 and export cipher suites support
  - Fix libssl patch that disable ssl2 & export cipher suites to not disable RSA_WITH_NULL ciphers
  - Fix syntax errors in patch to skip ssl2 and export cipher suite tests
  - Turn ssl2 off by default in the tstclnt tool
  - Disable ssl stress tests containing TLS RC4 128 with MD5


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-5
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Implement corrections requested in code review


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-6
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Split the enabling patch in two for easier maintenance
  - Remove unused patches rendered obsolete by prior rebase


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.21.1-2
changelog:
  - Update to NSS 3.21
  - Package listsuites as part of the unsupported tools set
  - Resolves: Bug 1279912 - nss-3.21 is available
  - Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit
  - Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Update %{nss_util_version} and %{nss_softokn_version} to 3.21.0
  - Resolves: Bug 1284095 - all https fails with sec_error_no_token


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite
  - Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built
  - Use %define when specifying the nss_tests to run


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-5
changelog:
  - Load policy file if /etc/pki/nssdb/policy.cfg exists
  - Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-7
changelog:
  - Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
  - Regenerate the check policy patch with hg to provide more context


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.1
changelog:
  - Rebase to NSS 3.24.0
  - Restore setting the policy file location
  - Make ssl tests scripts aware of policy
  - Ajust tests data expected result for policy


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.2
changelog:
  - Allow application requests to disable SSL v2 to succeed
  - Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.3
changelog:
  - Apply the patch that was last introduced
  - Renumber and reorder some of the patches
  - Resolves: Bug 1342158


author: Elio Maldonado <emaldona@redhat.com> - 3.25.0-5
changelog:
  - Add support for conditionally ignoring the system policy (#1157720)
  - Remove unneeded test scripts patches in order to run more tests
  - Remove unneeded test data modifications from the spec file


author: Daiki Ueno <dueno@redhat.com> - 3.26.0-2
changelog:
  - Rebase to NSS 3.26.0
  - Update check policy file patch to better match what was upstreamed
  - Remove conditionally ignore system policy patch as it has been upstreamed
  - Skip ectest as well as ecperf, which are built as part of nss-softokn
  - Fix rpmlint error regarding %define usage


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-4
changelog:
  - Add "Conflicts" with older firefox packages which don't have support
    for smaller curves added in NSS 3.28.1


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-5
changelog:
  - Disable TLS 1.3
  - Add "Conflicts" with packages using older Mozilla codebase, which is
    not compatible with NSS 3.28.1
  - Remove NSS_ECC_MORE_THAN_SUITE_B setting, as it was removed in upstream


author: Daiki Ueno <dueno@redhat.com> - 3.31.0-3
changelog:
  - Move signtool to %_libdir/nss/unsupported-tools, for:
    https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation


author: Kai Engert <kaie@redhat.com> - 3.33.0-4
changelog:
  - Update tests to be compatible with default NSS DB changed to sql
    (the default was changed in the nss-util package).


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-6
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka


author: Kai Engert <kaie@redhat.com> - 3.35.0-4
changelog:
  - Fix a compiler error with gcc 8, mozbz#1434070
  - Set NSS_FORCE_FIPS=1 at %build time, and remove from %check.


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-1.0
changelog:
  - Update to NSS 3.36.0
  - Add gcc-c++ to BuildRequires (C++ is needed for gtests)
  - Make test failure detection robuster


author: Daiki Ueno <dueno@redhat.com> - 3.36.1-1.0
changelog:
  - Update to NSS 3.36.1
  - Remove nss-3.14.0.0-disble-ocsp-test.patch
  - Fix partial injection of LDFLAGS
  - Remove NSS_NO_PKCS11_BYPASS, which is no-op in upstream


author: Kai Engert <kaie@redhat.com> - 3.36.1-1.2
changelog:
  - Backport upstream addition of nss-policy-check utility, rhbz#1428746,
    includes required fixes for mozbz#1296263 and mozbz#1474875


author: Daiki Ueno <dueno@redhat.com> - 3.38.0-1.1
changelog:
  - Install crypto-policies configuration file for
    https://fedoraproject.org/wiki/Changes/NSSLoadP11KitModules
  - Port enable-fips-when-system-is-in-fips-mode.patch from RHEL-7
  - Use %ldconfig_scriptlets
  - Remove needless use of %defattr, by Jason Tibbitts


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.2
changelog:
  - Update nss-dsa.patch to not advertise DSA signature algorithm
  - Update PayPal test certs for testing


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.3
changelog:
  - Backport upstream fixes for rhbz#1649026, rhbz#1608895, rhbz#1644854
  - Document PKCS #11 URI
  - Add warning when adding module with modutil while p11-kit is enabled


author: Bob Relyea <rrelyea@redhat.com> - 3.39.0-1.4
changelog:
  - Support for IKE/IPsec typical PKIX usage so libreswan can use nss
    without rejecting certs based on EKU


author: Daiki Ueno <dueno@redhat.com> - 3.41.0-3
changelog:
  - Fix the last change
  - Add --no-reload option to update-crypto-policies to avoid
    unnecessary restart of daemons


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Update to NSS 3.44
  - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
  - Use %autosetup
  - Clean up manual pages generation
  - Clean up %check
  - Remove prelink dependency, which is not available in RHEL-8
  - Remove upstreamed patches


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set
  - Revert the change to use XDG basedirs (mozilla#818686)


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-6
changelog:
  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
changelog:
  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-12
changelog:
  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-2
changelog:
  - Fix regression in MD5 disablement (#1849938)
  - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
  - Adjust for update-crypto-policies packaging change (#1848649)
  - Fix compilation with -Werror=strict-prototypes (#1843417)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-7
changelog:
  - Fix attribute decryption issue where the private key components
    integrity check on private attributes where not being checked.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-11
changelog:
  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79
  - Set FIPS Module ID
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm
  - add dbtool to nss-tools


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-11
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Nalin Dahyabhai <nalin@redhat.com> 0.6.8-1
changelog:
  - bump release number to 1 (part of #491767)
  - fix which group we check for during %pre (part of #491767)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mitchell Berger's patch to clean up the init script, use %{_initddir},
    and correct the %post so that it only thinks about turning on nslcd when
    we're first being installed (#522947)
  - tell status() where the pidfile is when the init script is called for that


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available on
    systems that are using nss-pam-ldapd; otherwise it's usually optional


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592411)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-2
changelog:
  - make inclusion of the .so symlink conditional on being on a sufficiently-
    new Fedora where pam_ldap isn't part of the nss_ldap package, so having
    this package conflict with nss_ldap doesn't require that pam_ldap be
    removed (#596691)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-3
changelog:
  - don't accidentally set multiple 'gid' settings in nslcd.conf, and try to
    clean up after older versions of this package that did (#608314)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.9-2
changelog:
  - when creating /var/run/nslcd in the buildroot, specify that 0755 is a
    permissions value and not another directory name (#636880)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-3
changelog:
  - add a tmpfiles configuration to ensure that /var/run/nslcd is created when
    /var/run is completely empty at boot (#656643)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-7
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822)
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870), then
    modify the default again to also allow shorter and shorter names to pass
    muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-8
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the same conditional test for deciding when to create the .so symlink as
    we do later on for deciding when to include it in the package (#757004)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.16-2
changelog:
  - backport upstream revision r1659 related to broken pipe when
    requesting a large group
  - use grep -E instead of egrep to avoid rpmlint warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-1
changelog:
  - update to 0.8.12 (#846793)
  - make building pam_ldap conditional on the targeted release
  - add "After=named.service dirsrv.target slapd.service" to nslcd.service,
    to make sure that nslcd is started after them if they're to be started
    on the local system (#832706)
  - alter the versioned Obsoletes: on pam_ldap to include the F18 package
  - use %{_unitdir} when deciding where to put systemd configuration, based
    on patch from Václav Pavlín (#850232)
  - use new systemd macros for scriptlet hooks, when available, based on
    patch from Václav Pavlín (#850232)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - in %post, attempt to rewrite any instances of "map group uniqueMember ..."
    to be "map group member ..." in nslcd.conf, as the attribute name changed
    in 0.8.4 (via freeipa ticket #3589)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.14-2
changelog:
  - where we check for USELDAP=yes in /etc/sysconfig/authconfig as an indication
    of nss_ldap being in use, to decide whether to enable the nslcd service or
    not, also check for USELDAPAUTH=yes, which indicates pam_ldap is being used


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.14-7
changelog:
  - move the packaged tmpfiles.d file from /etc/tmpfiles.d to %{_tmpfilesdir},
    per heads-up from Ville Skyttä on devel@


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.14-12
changelog:
  - Get rid of all conditions that are always true for both EPEL-7 and Fedora
    as it's quite unlikely we'd use this specfile on EPEL-6
  - Remove the sysvinit script and all the scriptlets around it
  - Unconditionally use systemd scriptlet macros and systemd_requires
  - Unconditionally build the PAM module as the PADL module is long dead
  - Remove the auto-migration of settings from nss_ldap as it's been
    long gone from Fedora
  - Don't check /etc/sysconfig/authconfig as authconfig is on its way
    out from Fedora
  - Use only spaces, not tabs, to stop my editor from looking like a
    Christmas tree
  - Remove the obsolete Group stanza
  - Make nscd Recommended, not Required


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-1
changelog:
  - Upgrade to the latest upstream
    - Disable the python utilities
    - Don't bother with failing pylint test as we don't ship the python
      utilities
  - Drop unused validname and exitcode patches, port strtoid overflow
    patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-2
changelog:
  - Apply a patch by Lukas Slebodnik to allow root to write to the
    /var/run/nslcd directory
  - Resolves: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                             with SELinux enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-3
changelog:
  - Also change the pemissions on tmpfiles
  - Related: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                            with SELinux enabled


author: Tomas Halman <thalman@redhat.com> - 0.9.9-4
changelog:
  - moving temp files from /var/run to /run
  - Resolves: rhbz#1969826 - tmpfiles snippet needs updated path for
                             nss-pam-ldapd


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: Michael Adam <madam@redhat.com> - 1.0.3-2
changelog:
  - Fix format of changelog entries.
  - Require cmake.
  - Don't own _libdir/pkgconfig, and require pkgconfig instead.


author: Andreas Schneider <asn@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
    * Added support for initgroups()
    * Added support for shadow files (getspnam(), etc.)
    * Improved support for multi address handling in getaddrinfo()
    * Improved file parser
    * Fixed compilation on machines without IPv4 support
    * Fixed service string sanity check in getaddrinfo() (bso #11501)
    * Fixed AI_NUMERICHOST handling in getaddrinfo() (bso #11477)


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * Added support for BSD 'struct passwd' members
    * Replaced strcpy() with snprintf()
    * Fixed segfault while reloading hosts file
    * Fixed issue where are not fault tolerant if an alias has already
      been added
    * Fixed nss_wrapper build on Solaris


author: Andreas Schneider <asn@redhat.com> - 1.1.12-1
changelog:
  - resolves: rhbz#2139665 - Rebase to version 1.1.12
  - resolves: rhbz#2124635 - Reduce dependencies of the package


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-2
changelog:
  - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-3
changelog:
  - Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349


author: Jarod Wilson <jwilson@redhat.com> 1.0.2-2
changelog:
  - Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).


author: Jon Ciesla <limb@jcomserv.net> 1.2.0-1
changelog:
  - New upstream release, added python-nose BR. BZ 465999.
  - Using atlas blas, not blas-devel. BZ 461472.


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.6.0-0.1.b1
changelog:
  - Update to 1.6.0b1
  - Build python3  module with python3
  - Add patch from upstream to fix build time import error


author: David Malcolm <dmalcolm@redhat.com> - 1:1.6.2-5
changelog:
  - rework patches for 3.3 to more directly reflect upstream's commits
  - re-enable test suite on python 3
  - forcibly regenerate Cython .c source to avoid import issues on Python 3.3


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.7.0-0.1.b1
changelog:
  - Update to 1.7.0b1
  - Rebase python 3.3 patchs to current git master
  - Drop patches applied upstream


author: Orion Poplawski <orion@nwra.com> - 1:1.7.0-0.3.b1
changelog:
  - Add patch from github pull 371 to fix python 3.3 pickle issue
  - Remove cython .c source regeneration - fails now


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Fix rpmlint warnings
  - Update License
  - Apply patch: change shebang of f2py to use binary directly


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1:1.15.1-2
changelog:
  - Switch to pytest for running tests during check
  - Stop ignoring failures when running tests
  - Set PATH in check so that f2py tests work
  - Update docs to match release
  - Remove outdated workaround from rhbz#849713


author: Toshio Kuratomi <toshio-tiki-lounge.com> - 3.08.3-4
changelog:
  - Fix for gcc4 and the 32 bit assembly in otherlibs/num.
  - Fix to allow compilation with RPM_OPT_FLAG defined -O level.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-5
changelog:
  - Don't include the release number in fedora-ocaml-release file, so
    that packages built against this won't depend on the Fedora release.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-6
changelog:
  - ocaml-runtime provides ocaml(runtime) = 3.10.0, and
    ocaml-find-requires.sh modified so that it adds this requires
    to other packages.  Now can upgrade base ocaml packages without
    needing to rebuild everything else.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-7
changelog:
  - Run chrpath to delete rpaths used on some of the stublibs.
  - Ignore Parsetree module in dependency calculation.
  - Fixed ocaml-find-{requires,provides}.sh regexp calculation so it doesn't
    over-match module names.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.2-3
changelog:
  - ocaml-ocamldoc provides ocamldoc (bz #449931).
  - REMOVED provides of labltk, camlp4.  Those are libraries and all
    packages should now depend on ocaml-labltk / ocaml-camlp4 / -devel
    as appropriate.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-1
changelog:
  - OCaml 3.11.1 (this is virtually the same as the release candidate
    that we were using for Fedora 12).


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-2
changelog:
  - ocaml-find-requires.sh: Calculate runtime version using ocamlrun
    -version instead of fedora-ocaml-release file.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-1
changelog:
  - New upstream version 3.12.0.
    http://fedoraproject.org/wiki/Features/OCaml3.12
  - Remove ppc64 support patch.
  - Rebase rpath removal patch.
  - ocamlobjinfo is now an official tool, so no need to compile it by hand.
    Add objinfo_helper.
  - Disable ocamlplugininfo.
  - Remove addlabels, scrapelabels.
  - Remove ocaml/stublibs/dlltkanim.so.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-2
changelog:
  - Try depending on OCaml BR to fix:
    /usr/lib/rpm/ocaml-find-provides.sh: /builddir/build/BUILDROOT/ocaml-3.12.0-1.fc15.i386/usr/bin/ocamlobjinfo: /usr/bin/ocamlrun: bad interpreter: No such file or directory


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-7
changelog:
  - Allow this package to be compiled on platforms without native
    support and/or natdynlink, specifically ppc64.  This updates (and
    hopefully does not break) DJ's previous *.cmxs change for arm.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-2
changelog:
  - add back ocaml-ppc64.patch for ppc secondary arch, drop .cmxs files
    from file list on ppc (cherry picked from F16 - this should have
    gone into Rawhide originally then been cherry picked back to F16)


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-3
changelog:
  - New ARM backend by Benedikt Meurer, backported to OCaml 3.12.1.
    This has several advantages, including enabling natdynlink on ARM.
  - Provide updated config.guess and config.sub (from OCaml upstream tree).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-6
changelog:
  - Move patches to external git repo:
    http://git.fedorahosted.org/git/?p=fedora-ocaml.git
    There should be no change introduced here.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-8
changelog:
  - Modify the ppc64 patch to reduce the delta between power64 and
    upstream power backends.
  - Clean up the spec file and bring it up to modern standards.
    * Remove patch fuzz directive.
    * Remove buildroot directive.
    * Rearrange source unpacking.
    * Remove chmod of GNU config.* files, since git does it.
    * Don't need to remove buildroot in install section.
    * Remove clean section.
    * git am </dev/null to avoid hang (thanks Adam Jackson).
  - Note there is no functional change in the above.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-9
changelog:
  - Include svn rev 12548 to fix invalid generation of Thumb-2 branch
    instruction TBH (upstream PR#5623, RHBZ#821153).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-10
changelog:
  - Include patch to link dllthreads.so with -lpthread explicitly, to
    fix problem with 'pthread_atfork' symbol missing (statically linked)
    on ppc64.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-11
changelog:
  - ppc64: Fix position of stack arguments to external C functions
    when there are more than 8 parameters.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-12
changelog:
  - ppc64: Include fix for minor heap corruption because of unaligned
    minor heap register (RHBZ#826649).
  - Unset MAKEFLAGS before running build.


author: Richard W.M. Jones <rjones@redhat.com> 4.00.0-0.3.beta2
changelog:
  - Upgrade to OCaml 4.00.0 beta 2.
  - The language is now officially called OCaml (not Objective Caml, O'Caml etc)
  - Rebase patches on top:
    . New ARM backend patch no longer required, since upstream.
    . Replacement config.guess, config.sub no longer required, since upstream
      versions are newer.
  - PPC64 backend rebased and fixed.
    . Increase the default size of the stack when compiling.
  - New tool: ocamloptp (ocamlopt profiler).
  - New VERSION file in ocaml-runtime package.
  - New ocaml-compiler-libs subpackage.
  - Rearrange ExclusiveArch alphanumerically.
  - alpha, ia64 native backends have been removed upstream, so they are
    no longer supported as native compiler targets.
  - Remove defattr.
  - Make OCaml dependency generator self-contained so it doesn't need
    previous version of OCaml around.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-1
changelog:
  - Update to new major version OCaml 4.01.0.
  - Rebase patches.
  - Remove bogus Requires 'ncurses-devel'.  The base ocaml package already
    pulls in the library implicitly.
  - Remove bogus Requires 'gdbm-devel'.  Nothing in the source mentions gdbm.
  - Use mkstemp instead of mktemp in ocamlyacc.
  - Add LICENSE as doc to some subpackages to keep rpmlint happy.
  - Remove .ignore file from some packages.
  - Remove period from end of Summary.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-4
changelog:
  - Add bundled(md5-plumb) (thanks: Tomas Mraz).
  - Add NON-upstream (but being sent upstream) patch to allow --flag=arg
    as an alternative to --flag arg (RHBZ#1028650).


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-8
changelog:
  - Don't use ifarch around Patch lines, as it means the patch files
    don't get included in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-14
changelog:
  - Remove ExclusiveArch.
  - Add ocaml-srpm-macros subpackage containing arch macros.
  - See: RHBZ#1087794


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.1
changelog:
  - Update to 4.02.0-beta1 + patches from the upstream 4.02 branch.
  - REMOVED labltk and camlp4 packages, since these are now packaged
    separately upstream.
  - Upstream includes fix for stack alignment issues on i686, so remove hack.
  - Upstream now uses mkstemp where available, so patch removed.
  - Upstream includes Aarch64 backend, so remove our own backport.
  - Drop BR on ocaml-srpm-macros, since it is now included in Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.5
changelog:
  - Disable CSE optimization which is broken on armv7hl and aarch64.
  - Fix broken caml_callback2 on aarch64
    http://caml.inria.fr/mantis/view.php?id=6489


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-0.7
changelog:
  - Rebase on top of 4.02.0 beta commit c4f3a6c7.
  - Remove the patch to disable CSE, since that problem is fixed upstream.
  - Remove the patch fixing caml_callback2 on aarch64 since that patch is
    now upstream.
  - Make the compiler depend on ocaml-runtime explicitly.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-1
changelog:
  - New upstream OCaml 4.02.0 final.
  - Add patch for ocaml-camlimages
    (see http://caml.inria.fr/mantis/view.php?id=6517)


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.0-3
changelog:
  - Use -fno-strict-aliasing when building the compiler (RHBZ#990540).
  - ppc, ppc64, ppc64le: Mark stack as non-executable.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.1-3
changelog:
  - ppc, ppc64, ppc64le: Properly mark stack as non-executable.
    The upstream fix was not applied completely.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-0.rc1.1
changelog:
  - New upstream version: 4.02.2+rc1.
  - Dropped two aarch64 patches which are now included upstream.
  - Includes libasmrun_shared.so (RHBZ#1195025).


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-1
changelog:
  - New upstream version: 4.02.2.
  - No need for a mass rebuild, since this version is identical to RC1.


author: Richard W.M. Jones <rjones@redhat.com> - 4.02.2-4
changelog:
  - Couple of minor build fixes for ppc64 and ppc64le.
  - ppc64/ppc64le: Fix behaviour of Int64.max_int ÷ -1 (RHBZ#1236615).


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-0.1.beta2
changelog:
  - New upstream version 4.04.0+beta2.
  - Remove our downstream ppc64 backends, and switch to upstream power backend.
  - Use autopatch instead of git for patching.
  - Allow parallel builds again.
  - Restore ppc stack limits.
  - Remove ocamlbuild.
  - Add *.byte bytecode binaries.


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-3
changelog:
  - s390x: Fix address of caml_raise_exn in native dynlink modules.
    (https://caml.inria.fr/mantis/view.php?id=7405)


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-4
changelog:
  - riscv64: Fix intermediate operands.
    (https://github.com/nojb/riscv-ocaml/issues/1)
  - Temporarily disable emacs subpackage on riscv64.


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.2-1
changelog:
  - New upstream version 4.04.2.
  - Fix: ocaml: Insufficient sanitisation allows privilege escalation for
    setuid binaries (CVE-2017-9772) (RHBZ#1464920).


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-2
changelog:
  - New upstream version 4.05.0.
  - Disable parallel builds for now.
  - *.mli files are now included in ocaml-compiler-libs.
  - Add possible fix for aarch64 with new binutils.


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Add final upstream fix for aarch64/binutils relocation problems.
    https://github.com/ocaml/ocaml/pull/1330


author: Richard W.M. Jones <rjones@redhat.com> - 4.06.0-1
changelog:
  - New upstream version 4.06.0.
  - Enable parallel builds again.
  - Rebase patches.
  - New binary ocamlcmt.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.2pl1-10
changelog:
  - BR added ocaml-ocamldoc so that ocamlfind ocamldoc works.
  - Fix path of camlp4 parsers in Makefile.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-1
changelog:
  - New upstream version 1.3.1.
  - This is required for programs using findlib and OCaml 4.00.0.
  - Add small patch to fix build of topfind.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Remove patch for OCaml 4 which has been obsoleted by upstream changes.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4-1
changelog:
  - New upstream version 1.4.
  - Build debuginfo.
  - Add -g option when running ocamlopt to generate debuginfo.
  - Don't need anti-prelink / stripping hacks for modern OCaml.
  - Modernize spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.1-1
changelog:
  - New upstream version 1.5.1.
  - Disable labltk and camlp4.  We will reenable when they are added back
    into Fedora.
  - Remove findlib/make_wizard and findlib/make_wizard.pattern.


author: Richard W.M. Jones <rjones@redhat.com> - 8.06.0-1
changelog:
  - New upstream version 8.06.0.
  - Big jump in upstream version numbers to match Tk versions.
  - ocaml-4.02.1 rebuild.


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.3
  - fix build
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.7-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.7
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2123641


author: Dan Walsh <dwalsh@redhat.com> - 1:0.1.15-1.git
changelog:
  - Fix issue with oci-systemd-hook running in user namespaces
  - fix json file to run container with proper stage field.


author: Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
changelog:
  * Thu Sep 21 2017 Dan Walsh <dwalsh@redhat.com> - 2:2.2.0-2.git0a4dcd6
  - Add support for multiple configuration files.
    oci-umount will still read config file /etc/oci-umount.conf if it
    exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
    and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
    in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
  - Make Logs less noisy
  - Improve logs output, adding containier id, and needed file information
  - Add support for specifying submounts PATH/* will unmount all mountpoints 
    under PATH in a container
  - Support for oci configuration files to specify when to run the plugin


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.4-1.git20131001.4ee231e
changelog:
  - update to recent git-snapshot
  - general cleanup, squashed unneeded BuildRequires
  - cleanup the %doc mess.
  - add %check for running the testsuite


author: Björn Esser <fedora@besser82.io> - 2.2.8-3.git20151217.0122332
changelog:
  - add Requires for virtual Provides: opencl-icd (RHBZ #1317600)
  - add rubygems and rubypick to BuildRequires


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
  - break shared libraries and modules for PAM and python into a subpackage
    for better behavior on multilib boxes
  - if we're not building a sample subpackage, include the sample files in
    the right locations as %doc files


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-3
changelog:
  - prefer BuildRequires: to BuildPrereq (#176452)
  - require /sbin/service at uninstall-time, because we use it (#176452)
  - be more specific about when we require /sbin/chkconfig (#176452)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - fix some path mismatches in the sample configuration files
  - don't try to set a reconnect timeout until after we've connected


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - fix compilation against older versions of D-BUS if the
    GetConnectionSELinuxSecurityContext method turns out to be available


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24, fixing some build errors against D-BUS 0.30-0.33
  - require xmlto, because the generated HTML differs depending on whether
    or not we know how to enforce ACLs which include SELinux context info
  - build with DocBook 4.3


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25:
    - add introspection for parents of objects specified in the configuration
    - oddjobd can reload its configuration now
    - add -u (umask) and -s (skeldir) flags to the mkhomedir helper (#246681)


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26-1:
    - don't get confused when ACL entries for introspection show up in the
      configuration before we add the handlers for them
    - export $ODDJOB_CALLING_USER to helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - split off python subpackage, make -devel depend on -libs, let autodeps
    provide the main package's dependency on -libs (#228377)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - split off mkhomedir bits into a subpackage (#236820)
  - take a pass at new-init-ifying the init script (#247005)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29.1-1
changelog:
  - when we install the mkhomedir subpackage, if there's a running oddjobd, ask
    it to reload its configuration
  - fix missing bits from the namespace changes in configuration files
  - restart the service in %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/%{name} to
    %{_libexecdir}/%{name} to make the multilib configuration files agree
    (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30.2-1
changelog:
  - don't try to "close" our shared connection to the bus when the bus
    hangs up on us -- at some point libdbus started abort()ing when we try
    that (#634356)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30.2-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (same as #636876)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when the mkhomedir helper has to create intermediate directories, don't
    apply a umask that might have been supplied on its command line (#666418)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31-1
changelog:
  - require dbus-x11 so that the tests can use dbus-launch
  - try to read the default umask from /etc/login.defs (more of #666418)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.1-1
changelog:
  - also tell the system message bus to reload its configuration when we install
    a subpackage with a new service in it


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-1
changelog:
  - refer to $local_fs instead of $localfs in the init script (#802719)
  - install a systemd unit file instead of an init script on still-in-development
    releases (#820137,818963)
  - build binaries position-independent and marked for earliest-possible symbol
    resolution (#852800)
  - don't worry about moving things from /usr to / when they're the same (#852800)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> 0.32.1-1
changelog:
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097)


author: Nalin Dahyabhai <nalin@redhat.com> 0.33
changelog:
  - catch calls to the method invocation helper function that mistakenly
    didn't include the newly-required timeout value (#1089655,#1089656)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - open a connection to the bus for every service we're serving, instead of
    using just one for the lot of them, so that we can tell which service a
    client was attempting to contact if it sends a message to our unique
    connection address instead of a well-known name, like dbus-python does
  - tweak the logic for guessing which interface name is right when a request
    doesn't include one, so that it has a better chance of finding the right one
  - increase the initial size of the buffer that we pass to getpwnam_r in the
    pam_oddjob_mkhomedir module (#1198812)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.2-1
changelog:
  - fix a crasher in pam_oddjob_mkhomedir.so: remove an initialization step that
    should have been removed when the module was modified to accept larger
    replies (#1236970)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.3-1
changelog:
  - tweak initialization so that we set up for providing our D-Bus APIs before we
    register our names with the bus, so that we can handle any requests that
    arrive before the acknowledgement of that registration, which should make
    system activation a viable option


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-1
changelog:
  - when "prepend_user_name" is used, the user name is now added to the helper's
    command line after arguments that were specified in the helper "exec"
    attribute
  - resync with Fedora packaging


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-2
changelog:
  - Modified SPEC to follow the conventions and guidelines.
  - Addressed review comments from Mohamed El Morabity.
  - Added systemd script.
  - Verified and built the RPMS for Fedora 18.
  - Fixed rpmlint warnings.
  - Split the UX components in a separate package for desktops.
  - Split the help files in a separate package for help.
  - Split the guestlib headers in a separate devel package.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-3
changelog:
  - Applied review fixes patch from Simone Caronni.
  - Added missing *.a and *.so files for devel package.
  - Removed unnecessary *.la plugin files from base package.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-4
changelog:
  - Applied part of review fixes patch from Simone Caronni for systemd setup.
  - Replaced tabs with spaces all over.


author: Simone Caronni <negativo17@gmail.com> - 9.2.2-5
changelog:
  - Added RHEL 5/6 init script.
  - Renamed SysV init script / systemd service file to vmtoolsd.
  - Fixed ownership of files from review.
  - Moved api documentation in devel subpackage.
  - Removed static libraries.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-6
changelog:
  - Replaced vmtoolsd with a variable.
  - Changed summary for subpackages to be more specific.
  - Removed drivers.txt file as we don't really need it.
  - Fixed vmGuestLib ownership for devel package.
  - Removed systemd-sysv from Requires for Fedora 18+ and RHEL 7+.
  - Made all "if" conditions consistent.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-7
changelog:
  - Applied patch from Simone for removal of --docdir option from configure.
  - Removed unnecessary --enable-docs option from configure.
  - Removed doxygen dependency.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-8
changelog:
  - Removed FreeSans.ttf font file from packaging.
  - Added 'rm' command to remove font file in %check section because
    'make check' adds it back.
  - Added doxygen dependency back.


author: Simone Caronni <negativo17@gmail.com> - 9.2.2-9
changelog:
  - Removed rm command in %check section.
  - Remove blank character at the beginning of each changelog line.


author: Ravindra Kumar <ravindrakumar at vmware.com> - 9.2.2-10
changelog:
  - Addressed formal review comments from Simone Caronni.
  - Removed %check section because 'make check' brings font file back.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-12
changelog:
  - Removed %defattr and BuildRoot.
  - Added ExclusiveArch.
  - Replaced /usr/sbin/ldconfig with /sbin/ldconfig.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-1
changelog:
  - Package new upstream version open-vm-tools-9.2.3-1031360.
  - Removed configure options CUSTOM_PROCPS_NAME (for libproc) and
    -Wno-deprecated-declarations as these have been addressed in
    open-vm-tools-9.2.3-1031360.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-5
changelog:
  - Renamed source file open-vm-tools.service -> vmtoolsd.service
    to match it with the service name.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-10
changelog:
  - Added options for hardening build (bug 990549). 
  - Excluded unwanted file mount.vmhgfs from packaging (bug 990547).
  - Removed deprecated key "Encoding" from "Desktop Entry" (bug 990552).


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-1
changelog:
  - Package new upstream version open-vm-tools-9.4.0-1280544.
  - Added CUSTOM_PROCPS_NAME=procps and -Wno-deprecated-declarations
    for version 9.4.0.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-7
changelog:
  - Add -D_DEFAULT_SOURCE to suppress warning as suggested in
    https://sourceware.org/bugzilla/show_bug.cgi?id=16632


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-9
changelog:
  - Removed unnecessary package dependency on 'dbus'
  - Moved 'vm-support' script to /usr/bin
  - Added a call to 'tools.set.version' RPC to inform VMware
    platform when open-vm-tools has been uninstalled


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.6-1
changelog:
  - Package new upstream version open-vm-tools-9.4.6-1770165
  - Added "autoreconf -i" and its build dependencies (autoconf, automake and libtool)
    to generate configure script, this is required for version 9.4.6 as it does not
    have configure script bundled in the tar
  - Fix (sizeof_argument.patch) for bad sizeof argument error


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.0-1
changelog:
  - Package new upstream version open-vm-tools-9.10.0-2476743
  - New version requires adding a new service vgauthd
  - Removed old patches that are no longer needed
  - Fix (asm_x86.patch) for correct GCC version check
  - Fix (strerror_r.patch) for picking GNU signature of strerror_r
  - Fix (toolboxcmd.patch) for compiling toolboxcmd-shrink.c with gcc 5.0.1


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.0-2
changelog:
  - F23 has split gdk-pixbuf2-devel >= 2.31.3-5 into 3 packages, gdk-pixbuf2-devel,
    gdk-pixbuf2-modules-devel, and gdk-pixbuf2-xlib-devel. gtk2-devel does not depend
    on gdk-pixbuf2-xlib-devel. Therefore, we need to pull in gdk-pixbuf2-xlib-devel
    dependency ourselves.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.0-3
changelog:
  - Put Fedora 23 specific fix under a conditional, so that the change
    can be backported to other branches easily if required.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.2-1
changelog:
  - Package new upstream version open-vm-tools-9.10.2-2822639
  - Removed the patches that are no longer needed


author: Simone Caronni <negativo17@gmail.com> - 9.10.2-2
changelog:
  - Add license macro.
  - Remove initscripts requirement (#1226369).
  - Delete mount.vmhgfs instead of excluding from packaging, so the debug
    information is not included in the package (#1190540).
  - Be more explicit with configuration files, newer mock complains of files being
    listed twice.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.0.0-2
changelog:
  - Add -std=c++11 to CXXFLAGS for fixing the build issue,
    https://kojipkgs.fedoraproject.org//work/tasks/3685/11273685/build.log


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.0.0-3
changelog:
  - Replace -std=c++11 with -std=gnu++11 to get "linux" definitions work
    in order to fix the build issue,
    https://kojipkgs.fedoraproject.org//work/tasks/4823/11274823/build.log
  - Removed unused definitions for CFLAGS and CXXFLAGS


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.0.0-5
changelog:
  - Setup and teardown Shared Folders mount point on VMs running
    on VMware Workstation or VMware Fusion.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.0.5-1
changelog:
  - Package new upstream version open-vm-tools-10.0.5-3227872.
  - Add a patch for fixing GCC 6 build issue (RHBZ#1305108).
  - Replace kill-werror.patch with no-unused-const.patch.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.1.0-1
changelog:
  - Package new upstream version open-vm-tools-10.1.0-4449150 (RHBZ#1408959).
  - Remove patches that are no longer needed.
  - Build with --enable-xmlsec1 to avoid dependency on xerces-c and xml-security-c.
  - Replace _prefix/lib/udev/rules.d/ with _udevrulesdir macro.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.1.10-1
changelog:
  - Package new upstream version open-vm-tools-10.1.10-6082533.
  - Remove the patches that are no longer needed.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.1.10-3
changelog:
  - Replaced 'net-tools' dependency with 'iproute' (RHBZ#1496134).
  - Added resolutionKMS-wayland-2.patch with some new fixes.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-1
changelog:
  - Package new upstream version open-vm-tools-10.2.0-7253323.
  - Remove the patches that are no longer needed.
  - New version builds with gtk3 by default.
  - Package vmware-user symlink in desktop.
  - Add a new test package for test utilities.
  - Pick a fix to a conditional from Miroslav Vadkerti <mvadkert@redhat.com>.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-3
changelog:
  - Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
  - gdk_set_allowed_backends() is available in version 3.10 and later only.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-1
changelog:
  - Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
  - Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
  - Removed wayland-crash.patch which is no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-1
changelog:
  - Rebase to 10.3.0 [bz#1626578]
  - Resolves: bz#1626578
    ([ESXi][RHEL8]Rebase open-vm-tools to 10.3.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el8
changelog:
  - ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1660713]
  - Resolves: bz#1660713
    ([ESXi][RHEL8.0]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-3.el8
changelog:
  - ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1602648]
  - ovt-Fix-memory-leak-in-GetFormattedCommandLine-function-.patch [bz#1602648]
  - ovt-Fix-a-leak-if-VGAuth-setup-fails.-Coverity-issue.patch [bz#1602648]
  - ovt-Fix-minor-leak-in-FileRotateByRenumber-Coverity-scan.patch [bz#1602648]
  - ovt-Fix-memory-leak-in-SNEBuildHash-function.patch [bz#1602648]
  - ovt-Fix-Coverity-reported-issues-in-i18n.c-code-VMTools-.patch [bz#1602648]
  - ovt-Fix-a-memory-leak-in-the-unicode-library.patch [bz#1602648]
  - ovt-Fix-a-trivial-Coverity-reported-memory-leak-in-vgaut.patch [bz#1602648]
  - ovt-Fixes-for-few-leaks-and-improved-error-handling.patch [bz#1602648]
  - ovt-Fix-Coverity-reported-double-memory-free-errors.patch [bz#1602648]
  - ovt-Fix-a-trivial-Coverity-reported-memory-leak.patch [bz#1602648]
  - ovt-Fix-RH-Covscan-Coverity-reported-memory-leaks-in-too.patch [bz#1602648]
  - ovt-Fix-Using-uninitialized-value-issue-reported-by-Cove.patch [bz#1602648]
  - ovt-copyPasteCompatX11.c-code-generating-unnecessary-Cov.patch [bz#1602648]
  - ovt-Fix-a-Coverity-issue-reported-in-vgauth-serviceImpl-.patch [bz#1602648]
  - ovt-Fix-two-coverity-issues-reported-by-a-customer.patch [bz#1602648]
  - Resolves: bz#1602648
    ([ESXi][RHEL8]Please review important issues found by covscan in "open-vm-tools-10.2.5-2.el8+7" package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-1.el8
changelog:
  - Rebase to 11.0.0 [bz#1754658]
  - Resolves: bz#1754658
    (Rebase open-vm-tools to 11.0 for 8.2.0)
  - Resolves: bz#1760891
    (Need to backport some severe memory leak fixes from upstream)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-3.el8
changelog:
  - ovt-Address-Coverity-issues-reported-in-bora-lib-file-fi.patch [bz#1769881]
  - ovt-Fix-a-potential-NULL-pointer-dereference-in-the-vmba.patch [bz#1769881]
  - ovt-Address-two-Coverity-reported-issues-in-hostinfoPosi.patch [bz#1769881]
  - ovt-Fix-a-resource-leak-issue-in-deployPkg.patch [bz#1769881]
  - Resolves: bz#1769881
    ([ESXi][RHEL8.2]Important issues found by covscan in "open-vm-tools-11.0.0-2.el8" package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
changelog:
  - ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
  - Resolves: bz#1800812
    ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
changelog:
  - Rebase to 11.0.5 (bz#1798285)
  - Resolves: bz#1798285
    ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
changelog:
  - ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
  - ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
  - ovt-add-appinfo-plugin.patch [bz#1809751]
  - Resolves: bz#1809751
    ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
  - Resolves: bz#1811729
    ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)


author: Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
changelog:
  - Rebase to 11.1.0 [bz#1806677]
  - Added open-vm-tools-sdmp package [bz#1833157)
  - Resolves: bz#1806677
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
  - Resolves: bz#1833157
    ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
changelog:
  - Remove net-tools dependency [bz#1849459]
  - Resolves: bz#1849459
    ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
changelog:
  - Rebase to 11.1.5 [bz#1870781]
  - Resolves: bz#1870781
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
changelog:
  - Rebase to 11.2.0 [bz#1890831]
  - Resolves: bz#1890831
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
changelog:
  - ovt-Fix-memory-leaks.patch [bz#1896804]
  - Resolves: bz#1896804
    ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
  - Resolves: bz#1935807
    ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
changelog:
  - Rebase to open-vm-tools 11.3.0 [bz#1974468]
  - Resolves: bz#1974468
    ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)


author: Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1.el9
changelog:
  - Rebase to open-vm-tools 11.3.5 [bz#2008244]
  - Resolves: bz#2008244
    ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 11.3.5-1.el8_6.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119283]
  - Resolves: bz#2119283
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to open-vm-tools 12.0.0 [bz#2061189]
  - Resolves: bz#2061189
    ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090273]
  - Resolves: bz#2090273
    ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
  - Resolves: bz#2119284
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
changelog:
  - Rebase to open-vm-tools 12.1.0
  - Resolves: bz#2121196
    ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2.el8_9
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236543]
  - Resolves: bz#2236543
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-3.el8_9
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2447]
  - Resolves: RHEL-2447
    ([RHEL8.9][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3.el8_9.1
changelog:
  - ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14648]
  - ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14682]
  - Resolves: RHEL-14648
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.9.0])
  - Resolves: RHEL-14682
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.9.0])


changelog: - Fixed bug 517973
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-8.487f0dde7593144ceabd817306500465caf7602agit


changelog: - Fixed version info
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.8.466-9.487f0dde7593144ceabd817306500465caf7602agit


author: Hans de Goede <hdegoede@redhat.com> - 1.9.563-1.d6e439244ae00a1750f0dc8b249f47efb4967a23git
changelog:
  - Update to 1.9.563 + some fixes from git
  - This fixes:
    - Not having any sound in chromium-bsu 
    - Various openal using programs hanging on exit


changelog: - Updatet to an newer git version because of some pulseaudio fixes.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-3.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed broken upgrade paths.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-4.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed small spec verion info.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-5.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Newer git version with more Pulseaudio fixes. Have fun.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-6.0ceaa01c3de75c946ff2e7591e7f69b28ec00409


changelog: - Newer git version that fix more problems with pulseaudio.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-7.931f5875cdc4ce0ac61a5110f11e962426e53d99


changelog: - Fixed Bug 567870
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.11.753-2.a9e0e57797c6f4321d5776e1f29bf1e75b11e6a1


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.5-5
changelog:
  - Disable LAPACKE support on distributions where it is not available due to
    a too old version of lapack.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.5-10
changelog:
  - Due to long standing bug, replace all OpenBLAS LAPACK functions with
    generic ones, so that package can finally be released in stable.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.9-1
changelog:
  - Increase maximum amount of cores from 32 to 128.
  - Add 64-bit interface support. (BZ #1088256)
  - Update to 0.2.9. (BZ #1043083)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.15-2
changelog:
  - Enable armv7hl and ppc64le architectures.
  - Build versions of the 64-bit libraries with an additional suffix
    (BZ #1287541).


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.18-3
changelog:
  - Enable ppc64 and ppc64p7 architectures
    based on Dan Horák's patch (BZ #1356189).
  - Supply proper make flags to the tests.


author: Tom Callaway <spot@fedoraproject.org> - 0.2.19-4
changelog:
  - build a copy of openblas that thinks it is Rblas
    There are no code changes, except for libname and soname, it is identical to libopenblas.so.0
    Unfortunately, while R itself is fine using a symlink from libopenblas.so.0 to libRblas.so
    the larger R ecosystem becomes unhappy in this scenario.


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 0.2.20-6
changelog:
  - Drop arch-dependent buildrequires (BZ #1545201); no changes to package
    (only affects packages custom built with --with system_lapack).


author: Nikola Forró <nforro@redhat.com> - 0.2.20-12
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Enable optimizations for all LAPACK sources
    resolves: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.2.20-13
changelog:
  - Fix detection of generic ARMv8 CPUs
  - Get rid of executable stack in libRblas.so
    related: #1624156


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Brad Hards <bradh@frogmouth.net> - 0:0.8-0.2.svnr674.fc10
changelog:
  - Bump version
  - Install documentation / man pages correctly
  - Remove epoch (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Remove %post and %postun (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Remove talloc dependency (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Take out libmapiproxy, because we aren't up to server side yet.


author: Simo Sorce <ssorce@redhat.com> - 0.10.9-2
changelog:
  - New snapshot that avoid bison issues.
  - Also add patch that fix build (previously erroneously preapplied in the
    snapshot tarball)
  - Fix timestamps in tarball
  - Fix specfile's install and files section to cope with newer version changes


author: Matthew Barnes <mbarnes@redhat.com> - 0.10.9-3
changelog:
  - Move libmapiproxy.so, libmapistore.so and mapistore backend libraries
    to the main package so the client subpackage is installable.


author: Matthew Barnes <mbarnes@redhat.com> - 0.10.9-4
changelog:
  - OpenChange relies on a private Samba 4 library (libsamba-util-common).
    Add extra linker flags to libmapi.pc to compensate.


author: Milan Crha <mcrha@redhat.com> - 0.11-1
changelog:
  - Update to OpenChange 0.11 Transporter upstream release
  - Remove unnecessary build modification patches.
  - Add patch to not use mapi_ctx->session as a TALLOC_CTX (OpenChange issue #366)
  - Add patch to read/write PidNameKeywords (OpenChange issue #367)


author: Milan Crha <mcrha@redhat.com> - 1.0-1
changelog:
  - Update to 1.0
  - Enable packages for server part and python bindings
  - Skip man3 pages, which are generated incomplete (use devhelp instead)


author: Milan Crha <mcrha@redhat.com> - 1.0-7
changelog:
  - Add patch to use system's popt.h
  - Add patch to compile only certain parts of the package
  - Disable openchange-server for rawhide too (due to samba4 changes)


author: Milan Crha <mcrha@redhat.com> - 1.0-8
changelog:
  - Add patch for OpenChange bug #397 (crash under MAPIUninitialize)
  - Disable build of python and mapiproxy


author: Dan Horák <dan[at]danny.cz> - 2.2-4
changelog:
  - Rebuild again for newer samba to workaround samba-4.2.0-0.1.rc3.fc22 < samba-4.2.0-0.2.rc2.fc22 situation in secondary koji


author: Milan Crha <mcrha@redhat.com> - 2.3-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
  - Add patch to build against new samba


author: Simon Perreault <nomis80@nomis80.org> - 0.9.7-3
changelog:
  - Removed useless sample compilation makefiles/project files and replaced them
    with one that works on Fedora Core.
  - Removed shellbang from Python modules.


author: Ralf Corsépius <rc040203@freenet.de> - 1.0.0-3
changelog:
  - Fix %{_datadir}/opencv/samples ownership.
  - Adjust timestamp of cvconfig.h.in to avoid re-running autoheader.


author: kwizart < kwizart at gmail.com > - 1.0.0-14
changelog:
  - Fix for gcc44
  - Enable BR jasper-devel
  - Disable ldconfig run on python modules (uneeded)
  - Prevent timestamp change on install


author: kwizart < kwizart at gmail.com > - 1.1.0-0.1.pre1
changelog:
  - Update to 1.1pre1
  - Disable CXXFLAGS hardcoded optimization
  - Add BR: python-imaging, numpy
  - Disable make check failure for now


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-8
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Nicolas Chauvet <kwizart@gmail.com> - 2.3.1-1
changelog:
  - Update to 2.3.1
  - Add BR openni-devel python-sphinx
  - Remove deprecated cmake options
  - Add --with cuda conditional (wip)
  - Disable make test (unavailable)


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.1-1
changelog:
  - Update to 2.4.1
  - Rework dependencies - rhbz#828087
    Re-enable using --with tbb,openni,eigen2,eigen3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.3-2
changelog:
  - Disable SSE3 and allow --with sse3 build conditional.
  - Disable gpu module as we don't build cuda
  - Update to 2.4.3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.4-0.1.beta
changelog:
  - Update to 2.4.4 beta
  - Drop python-imaging also from requires
  - Drop merged patch for additionals codecs
  - Disable the java binding for now (untested)


author: Sérgio Basto <sergio@serjux.com> - 2.4.11-4
changelog:
  - Enable-gpu-module, rhbz #1236417, thanks to Rich Mattes.
  - Deleted the global gst1 because it is no longer needed.


author: Sérgio Basto <sergio@serjux.com> - 2.4.11-5
changelog:
  - Use bcond tags to easily enable or disable modules.
  - Package review, more cleaning in the spec file.
  - Fixed unused-direct-shlib-dependency in cmake with global optflags.
  - Added README.md index.rst with references to online documentation.
  - Investigation on the documentation, added a few notes.


author: Sérgio Basto <sergio@serjux.com> - 2.4.12.3-1
changelog:
  - Update opencv to 2.4.12.3 (#1271460).
  - Add aarch64 and ppc64le to list of architectures where TBB is supported (#1262788).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-2
changelog:
  - Add BR:libwebp-devel .
  - Merge from 2.4.12.3 package: 
    Add aarch64 and ppc64le to list of architectures where TBB is supported (#1262788).
    Use bcond tags to easily enable or disable modules.
    Fix unused-direct-shlib-dependency in cmake with global optflags.
    Added README.md with references to online documentation.
    Investigation on the documentation, added a few notes.
  - Update to 3.1.0 (Fri Mar 25 2016 Pavel Kajaba <pkajaba@redhat.com> - 3.1.0-1)
  - Added opencv_contrib (Thu Jul 09 2015 Sérgio Basto <sergio@serjux.com> -
    3.0.0-2)
  - Update to 3.0.0 (Fri Jun 05 2015 Jozef Mlich <jmlich@redhat.com> - 3.0.0-1)


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-3
changelog:
  - Use always ON and OFF instead 0 and 1 in cmake command.
  - Remove BUILD_TEST and TBB_LIB_DIR variables not used by cmake.
  - Add BRs: tesseract-devel, protobuf-devel, glog-devel, doxygen,
    gflags-devel, SFML-devel, libucil-devel, qt5-qtbase-devel, mesa-libGL-devel,
    mesa-libGLU-devel and hdf5-devel.
  - Remove BR: vtk-devel because VTK support is disabled. Incompatible 
    combination: OpenCV + Qt5 and VTK ver.6.2.0 + Qt4
  - Enable build with Qt5.
  - Enable build with OpenGL.
  - Enable build with UniCap.
  - Also requires opencv-contrib when install opencv-devel (#1329790).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-4
changelog:
  - Put all idefs and ifarchs outside the scope of rpm conditional builds, rather
    than vice versa, as had organized some time ago, it seems to me more correct.
  - Remove SIFT/SURF from source tarball in opencv_contrib, due to legal concerns
  - Redo and readd OpenCV-2.4.4-pillow.patch .
  - Add OpenCV-3.1-pillow.patch to apply only opencv_contrib .
  - Add the %python_provide macro (Packaging:Python guidelines).


author: Sérgio Basto <sergio@serjux.com> - 3.1.0-5
changelog:
  - Don't clean unneeded symbols (as recommended by fedora-review), fix undefined
    symbol: cvLoadImage in Unknown on line 0 on php-facedetect package.


author: Josef Ridky <jridky@redhat.com> - 3.2.0-1
changelog:
  - Rebase to the latest version (3.2.0) - #1408880
  - Remove unused BuildRequires and patches
  - Remove copyrighted lena.jpg images and SIFT/SURF from tarball, due to legal concerns.
  - Disable dnn module from opencv_contrib, due missing BuildRequired package in Fedora (protobuf-cpp)
  - Disable tracking module from opencv_contrib, due disabling dnn module (is required by this module)
  - Disable CAROTENE in compilation (caused error on arm and ppc64le)
  - Fix syntax error in opencv_contrib test file (opencv-3.2.0-test-file-fix.patch)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.0-6
changelog:
  - Python 2 binary package renamed to python2-opencv
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Sérgio Basto <sergio@serjux.com> - 3.2.0-9
changelog:
  - Enable openni.
  - Enable eigen3 except in ppc64le because fails to build in OpenCL headers.
  - Documented why is not enabled atlas, openblas and vtk.


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-1
changelog:
  - Update to 3.3.1
  - Fix WARNING: Option ENABLE_SSE='OFF' is deprecated and should not be used anymore
  -          Behaviour of this option is not backward compatible
  -          Refer to 'CPU_BASELINE'/'CPU_DISPATCH' CMake options documentation
  - Fix WARNING: Option ENABLE_SSE2='OFF' is deprecated and should not be used anymore
  -          Behaviour of this option is not backward compatible
  -          Refer to 'CPU_BASELINE'/'CPU_DISPATCH' CMake options documentation
  - Update opencv to 3.3.0
  - Patch3 is already in source code
  - Fix WARNING: Option ENABLE_SSE3='OFF' is deprecated and should not be used anymore
  - Enable openblas
  - Add conditonal to build with_gdcm
  - Disable "Intel ITT support" because source is in 3rdparty/ directory


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-3
changelog:
  - Rename sub-package opencv-python3 to python3-opencv and other minor fixes in
    python packaging
  - Generate documentation
  - Rename sub-package devel-docs to doc
  - Cleanup some comments from opencv 2.4 packaging


author: Sérgio Basto <sergio@serjux.com> - 3.3.1-4
changelog:
  - Enable Pylint
  - Enable Clp (COIN-OR Linear Program Solver)
  - Enable VA (Video Acceleration API for Linux)
  - Enable OpenMP
  - Provides and obsoletes for opencv-devel-docs
  - BuildRequires perl-local do generate documentation without errors


author: Josef Ridky <jridky@redhat.com> - 3.4.1-1
changelog:
  - Spec clean up (remove Group tag, add ldconfig scriptlets, escape macros in comments)
  - Remove unused patch
  - Add gcc and gcc-c++ requirements
  - Rebase to version 3.4.1


author: Sérgio Basto <sergio@serjux.com> - 3.4.1-2
changelog:
  - Enable VA
  - Do not use -f on rm because it silences errors
  - Opencv sub-package don't need ldconfig because don't have any so


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Paul Wouters <paul@xelerance.com> - 1.3.2-1
changelog:
  - Updated to 1.3.2
  - Added dependancies on opencryptoki and softhsm
  - Don't install duplicate unreadable .sample files
  - Fix upstream conf.xml to point to actually used library paths


author: Paul Wouters <paul@xelerance.com> - 1.3.2-3
changelog:
  - Add ods user for opendnssec tasks
  - Added initscripts and services for ods-signerd and ods-enforcerd
  - Initialise OpenDNSSEC softhsm token on first install


author: Paul Wouters <pwouters@redhat.com> - 1.3.6-3
changelog:
  - Requires rubygem-soap4r when using ruby-1.9
  - Don't ghost /var/run/opendnssec
  - Converted initd to systemd


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a1
changelog:
  - The 1.4.x branch no longer needs ruby, as the auditor has been removed
  - Added missing openssl-devel BuildRequire
  - Comment out <SkipPublicKey/> so keys generated by ods can be used by bind


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a3.1
changelog:
  - Updated to 1.4.0a3
  - Patch to more aggressively try to resign
  - Patch to fix locking issue eating up cpu


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.b1.1
changelog:
  - Updated to 1.4.0b1
  - Patch for NSEC3PARAM TTL
  - Cron job to assist narrowing ods-enforcerd timing differences


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.3.b1
changelog:
  - Just an EVR fix to the proper standard
  - Cleanup of spec file
  - Introduce new systemd-rpm macros (rhbz#850242)


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.4.b1
changelog:
  - Added BuildRequires: procps-ng for bug OPENDNSSEC-345
  - Change RRSIG inception offset to -2h to avoid possible
    daylight saving issues on resolvers
  - Patch to prevent removal of occluded data


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.5.b2
changelog:
  - Updated to 1.4.0b2
  - All patches have been merged upstream
  - cron job should be marked as config file


author: Paul Wouters <pwouters@redhat.com> - 1.4.1-1
changelog:
  - Updated to 1.4.1. NSEC3 handling and serial number handling fixes
  - Add BuildRequire for systemd-units


