# changelog

author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-13
changelog:
  - add patch to fix reachable assertion abort in function sox_append_comment (CVE-2017-15371)
  - resolves #1500570, #1510918


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-14
changelog:
  - add patch to fix the heap-based buffer overflow in the ImaExpandS function (CVE-2017-15370)
  - resolves #1500554, #1510917
  - sanitized macro-in-comment rpmlint warnings


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-15
changelog:
  - added patch that fixes stack-overflow vulnerability in lsx_ms_adpcm_block_expand_i (CVE-2017-15372)
    + resolves #1500553, #1510919
  - added patch that fixes use-after-free in lsx_aiffstartread (CVE-2017-15642)
    + resolves #1510923
  - added patch that fixes incorrect FSF address in src/ladspa.h
  - added patch that introduces SOX_PLUGINS environment variable that overrides
    standard sox location for plugins
  - added patch that inserts $(DESTDIR) before ${bindir} in src/Makefile.am
    installcheck target
  - added tests that checks if previously fixed bugs remain fixed in newer releases
  - spec file changes:
    + suppressed rpmlint warning about bad Source URL
    + added comments to security patches
    + in %description: added missing sentence period
    + in %prep: suppressed "%setup is not quite" rpmlint warning
    + in %install: removed redundant slashes before %{_libdir}
    + added %check section


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-16
changelog:
  - added patch that disables hcom conversion tests on big endian architectures
    due to SIGABRT issues


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-17
changelog:
  - SOX_PLUGINS environment variable is now used only while running %check
    during the package building; SOX_PLUGINS are now no longer available to
    users


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-19
changelog:
  - CVEs presence tests beakerized and moved to tests/ directory as CI tests
  - %check section: creating of additional binaries for testing was replaced
    by the libsox binary patch workaround hack; during the testing the hardcoded
    path to the directory with sox plugins is replaced for non-root alternative
    and hence running the tests under the mock is possible (before the binary
    patching, the backup of libsox is made, and at the end of tests it is
    restored); this decrease the build time of the package, but may increase the
    fragility of the package build process (future features in gcc toolchain may
    make the binary patching impossible/not working)


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-20
changelog:
  - added patch that fixes WAV to HCOM conversion abortion on 64 bit big endian
    machines
    + resolves #1558887


author: Kevin Fenzi <kevin@scrye.com> - 3.4.1-9
changelog:
  - Add perl-Razor-Agent and perl-Net-Patricia To Requires, they might help processing. Fixes bug #1337924
  - Add patch for netdns 1.0.1+ dns lookups.


author: Kevin Fenzi <kevin@scrye.com> - 3.4.1-17
changelog:
  - Add upstream patch to stop sa-learn warnings. Fixes bug #1505317
  - Add upstream patch to stop DNS warnings. Fixes bug #1364932


author: Christophe Fergeau <cfergeau@redhat.com> 0.13.1-1
changelog:
  - Update to 0.13.1 release. This is a development release, but by the
    time Fedora 25 gets released, a stable 0.14.0 should be released.


author: Christophe Fergeau <cfergeau@redhat.com> 0.32-2
changelog:
  - Add upstream patches fixing USB event thread leak
    Resolves: rhbz#1217202 (virt-manager)
    May help with rhbz#1338042 (gnome-boxes)


author: Cole Robinson <crobinso@redhat.com> - 0.33-5
changelog:
  - channel-usbredir: Fix crash on channel-up. Resolves: rhbz#1399838
  - usbutils no longer ships usb.ids, it is hwdata now, set path manually.
  - Backport fixes for "Couldn't find current GL or GLX context" Resolves: rhbz#1461802


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Petr Kubat <pkubat@redhat.com> - 3.19.3-1
changelog:
  - Updated to version 3.19.3 (https://sqlite.org/releaselog/3_19_3.html)
  - Better detection of CVE-2017-10989 (#1469673)


author: Petr Kubat <pkubat@redhat.com> - 3.20.0-1
changelog:
  - Updated to version 3.20.0 (https://sqlite.org/releaselog/3_20_0.html)
  - Fixes CVE-2017-7000 (#1478785)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Switch to meson build system
  - Add support for non-DNS subjectAlternativeName values (issue #4)


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-4
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3562 - Use-after free if more sudo requests run and one
                              of them fails, causing a fail-over to a next server
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1479283 - proxy to files does not work with
                             implicit_files_domain
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-6
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Dmitry V. Levin <ldv@altlinux.org> - 4.14-1
changelog:
  - v4.13 -> v4.14:
    + added printing of the mode argument of open and openat syscalls
      when O_TMPFILE flag is set (#1377846).


author: Paul Wouters <pwouters@redhat.com> - 5.6.0-1
changelog:
  - Updated to 5.6.0
  - Fixup configure arguments, enabled a bunch of new features
  - Added new BuildRequires:
  - Fixup Obsolete/Conflicts, use license macro
  - Don't require autoconf/autotools for non-snapshots
  - Remove macro overuse, remove fedora/rhel checks and sysvinit support
  - Make listings/grouping of all plugins/libs to reduce file listing


author: Neal Gompa <ngompa@datto.com> - 5.40-1
changelog:
  - New upstream release 5.40
  - Properly mark license files
  - Rebase patches
  - Eliminate unnecessary Provides
  - Small spec cleanups and fixes


author: Kevin Howell <khowell@redhat.com> 1.20.5-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Cockpit - listing of installed products using patternfly-react
    (jhnidek@redhat.com)
  - 1508457: Bump versions in python-rhsm obsoletes (khowell@redhat.com)
  - Implement fallback for settimeout on old m2crypto (khowell@redhat.com)
  - Cockpit: reconcile translated strings (khowell@redhat.com)
  - Cockpit: use translations from root dir (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.6-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - 1514067: Call virt-what using absolute path (jhnidek@redhat.com)
  - 1487688: Load config settings for cockpit plugin (khowell@redhat.com)
  - Added dependencies to cockpit-bridge and cockpit-shell. (jhnidek@redhat.com)
  - 1462456: Flush stdout and stderr on more places (jhnidek@redhat.com)
  - 1491842: fixed typo in man page. (jhnidek@redhat.com)
  - 1508591: Removed python-rhsm from subscription-manager version
    (jhnidek@redhat.com)
  - 1421010: Subman-GUI shows error dialog (wrong proxy settings)
    (jhnidek@redhat.com)
  - 1500106: subscription-manager status --ondate do not ignore date
    (jhnidek@redhat.com)
  - 1506970: Fixed default custom URL in cockpit plugin (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.8-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Add parameter to D-Bus API to pass locale for localization of errors
    (jhnidek@redhat.com)
  - 1463765: Fix wrong Indic-language translations (khowell@redhat.com)
  - 1487600: Cockpit - Save configuration from register dialog
    (jhnidek@redhat.com)
  - 1464571: Improve multiple product certs errors (khowell@redhat.com)
  - Replace cockpit-subscriptions (khowell@redhat.com)
  - 1507158: Provide Host: in http CONNECT header (jhnidek@redhat.com)
  - 1319927: Remove newline from auto enable message (khowell@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.1-1
changelog:
  - Do not enable gpgcheck if the only a metadata gpg key is configured
    (git@PaulSD.com)
  - 1448313: Do not log error, when rhsmcertd is restarted (jhnidek@redhat.com)
  - Support configuration of a repo metadata signing key (git@PaulSD.com)
  - Generate bin scripts via setuptools entry_points (khowell@redhat.com)
  - 1304056: Fix D-Bus path of com.redhat.RHSM1.Facts (jhnidek@redhat.com)
  - 1516439: Cockpit reports error during unregister when candlepin unavailable
    (jhnidek@redhat.com)
  - 1510727: Enable starting of subman GUI, when consumer has been deleted
    (jhnidek@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.2-1
changelog:
  - 1547354: Add missing requires for python-kitchen (awood@redhat.com)
  - 1528625: Prevent dmidecode failure from returning None (awood@redhat.com)
  - 1543639: Properly encode package profile data (jturel@redhat.com)
  - 1527396: Subman cockpit plugin - fix registration using act. keys
    (jhnidek@redhat.com)
  - 1535974: Close register dialog, when status is changed (jhnidek@redhat.com)
  - Add start date to available pool listing (wpoteat@redhat.com)
  - Condition requiring --after and --all is unnecessary (wpoteat@redhat.com)
  - 1510024: Handle rhel-alt product tags properly (khowell@redhat.com)
  - 1540204: Raise RateLimitExceededException with headers (jhnidek@redhat.com)
  - 1533905: Remove dependency on yum and chkconfig. (jhnidek@redhat.com)
  - 1479353: Add --after option to list command (csnyder@redhat.com)
  - 1537473: Subman rpm requires python-setuptools (jhnidek@redhat.com)
  - 1525238: Do not protect rhel prod. cert with special case
    (jhnidek@redhat.com)
  - 1526622: Do not delete product certificates in protected directory
    (jhnidek@redhat.com)
  - 1519512: Handle non-UTF8 RPM vendors (khowell@redhat.com)
  - 1487600: Fix registration success detection (khowell@redhat.com)
  - 1527813: subman-gui use new URL of Online Documentation (jhnidek@redhat.com)
  - 1527392: Clear credential data in register dialog (jhnidek@redhat.com)
  - rct cat-manifest: show Web and API urls from consumer.json (evgeni@golov.de)
  - Use dnf on RHEL or Fedora w/ using Python 3 (khowell@redhat.com)
  - 1507030: RestlibExceptions should show they originate server-side
    (awood@redhat.com)
  - Package for Python 3 on Fedora (khowell@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.2-2
changelog:
  - Remove %clean section (ignatenkobrain@fedoraproject.org)
  - Remove BuildRoot definition (ignatenkobrain@fedoraproject.org)


author: Joe Orton <jorton@redhat.com> - 1.9.6-1
changelog:
  - update to 1.9.6 (#1467890)
  - update to latest upstream psvn.el
  - move libsvnjavahl to -libs, build -javahl noarch
  - fix javahl Requires


author: Radovan Sroka <rsroka@redhat.com> 1.8.19-0.1.20160923git90e4538
changelog:
  - we were not able to update from rc and beta versions to stable one
  - so this is a new snapshot package which resolves it


author: Jiri Vymazal <jvymazal@redhat.com> - 1.8.20-0.1.b1
changelog:
  - update to latest development version 1.8.20b1
  - added sudo to dnf/yum protected packages
    Resolves: rhbz#1418756


author: Guido Aulisi <guido.aulisi@gmail.com> - 0.8.4-1
changelog:
  - Update to 0.8.4
  - Use hardened LDFLAGS
  - Remove deprecated Groups tags
  - Enable Qt5 Support
  - Use license macro


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.17-1
changelog:
  - New upstream release 5.1.17.
  - Check signature on the tarball before unpacking it.
  - Remove patches, all upstream.


author: Steve Grubb <sgrubb@redhat.com> 3.2-1
changelog:
  - New upstream feature release
  - Rotate /var/log/suricata/eve.json (#1396151)
  - Fix ownership of /run/suricata (#1396150)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - add libinput as dependency
  - add dbus as build dependency for tray icon support
  - remove -Wno-error flag


author: Fabio Valentini <decathorpe@gmail.com> - 0.8.7-3
changelog:
  - Skip tests for now, since they are failing randomly.
  - Build with correct ldflags to fix debug packages.
  - Add user-preset disabling the service by default, just to be safe.


author: Fabio Valentini <decathorpe@gmail.com> - 0.8.7-4
changelog:
  - Add links to compatibility bug report and pull request.
  - Fix wrong access permissions on patch.
  - Remove Supplements: syncthing.


author: Ding-Yi Chen <dchen@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Fixes Bug 1476515 - AppStream metadata for Synergy package are missing
  - The real executable is now "synergy-core",
    "synergy" is now a symlink to synergy-core
  - cmake3 is now BuildRequired
  - syntool is removed by upstream


author: Ding-Yi Chen <dchen@redhat.com> - 2.0.0-2
changelog:
  - Restore Program /usr/bin/synergy
  - Fixes Bug 1542286 synergy-2.0.0 should not have been pushed anywhere except rawhide
  - Fixes Bug 1541640 - synergy.desktop file useless


author: Xavier Bachelot <xavier@bachelot.org> 1.0.5-1
changelog:
  - Update to 1.0.5.
  - Fix conditional around ExclusiveArch.
  - Restore EL6 support, luajit (RHBZ#1432377) and python-cram (RHBZ#1432378) are
    currently missing though.


author: Xavier Bachelot <xavier@bachelot.org> 1.0.6-1
changelog:
  - Update to 1.0.6.
  - Use bundled cram for EL6.
  - Tweak conditionals.
  - Remove --with-gcc-arch=native hack on arm.


author: Robert Scheck <robert@fedoraproject.org> - 6.04-0.3
changelog:
  - Own %{_datadir}/syslinux/diag directory (#894529)
  - Allow rebuilding on RHEL/CentOS 6 and 7 (#1291428)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-1
changelog:
  - New upstream release (#1416201, #1405439, #1420753, many others)
  - New systemd-tests subpackage with "installed tests"


author: Michal Sekletar <msekleta@redhat.com> - 233-3
changelog:
  - Backport bugfixes from upstream
  - Don't return error when machinectl couldn't figure out container IP addresses (#1419501)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-4
changelog:
  - Backport a bunch of small fixes (memleaks, wrong format strings,
    man page clarifications, shell completion)
  - Fix systemd-resolved crash on crafted DNS packet (CVE-2017-9217, #1455493)
  - Fix systemd-vconsole-setup.service error on systems with no VGA console (#1272686)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-7
changelog:
  - systemd-detect-virt QEMU CPUID logic update
  - Fix cryptsetup devices disappearing when used for btrfs
  - Fix rfkill on some thinkpads
  - Extend dbus timeouts to handle slow dbus daemon startup
  - Fix systemd-resolved DOS with crafted NSEC packets (LP#1725351)
  - Backport /etc/crypttab _netdev feature from upstream
    (v2, with crypttab _netdev units using remote-fs-pre.target)
  - Update hwdb


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-6
changelog:
  - fix --files-from and -T cooperation (rhbz#1230762)
  - avoid two testsuite false alarms related to --files-from option


author: Pavel Raiskup <praiskup@redhat.com> - 1.29-3
changelog:
  - revert back some docs
  - fix --create to use --xattrs-include/exclude (rhbz#1341787)
  - don't hang with '-x --skip-old-files --xattrs' (rhbz#1399036)


author: Roman Tsisyk <roman@tarantool.org> 1.7.2.4-1
changelog:
  - Vinyl - a new write-optimized storage engine, allowing the amount of
    data stored to exceed the amount of available RAM 10-100x times.
  - A new binary protocol command for CALL, which no more restricts a function
    to returning an array of tuples and allows returning an arbitrary
    MsgPack/JSON result, including scalars, nil and void (nothing).
  - Automatic replication cluster bootstrap; it's now much easier to configure
    a new replication cluster.
  - New indexable data types: unsigned, integer, number and scalar.
  - memtx snapshots and xlog files are now compressed on the fly using the
    fast ZStandard compression algorithm. Compression options are configured
    automatically to get an optimal trade-off between CPU utilization and disk
    throughput.
  - fiber.cond() - a new synchronization mechanism for fibers.
  - Tab-based autocompletion in the interactive console.
  - A new implementation of net.box improving performance and solving
    problems with the garbage collection of dead connections.
  - Native systemd integration alongside sysvinit.
  - A ready-to-use 'example.lua' instance enable by default.
  - Dozens of bugfixes:
     https://github.com/tarantool/tarantool/issues?q=milestone%3A1.7.2+is%3Aclosed


author: Roman Tsisyk <roman@tarantool.org> 1.7.2.396-1
changelog:
  - Add `tarantoolctl cat/play` commands and `xlog` Lua module.
  - Add Lua library to manipulate environment variables.
  - Allow DML requests from on_replace triggers.
  - Allow UPSERT without operations.
  - Improve support for the large number of active network clients.
  - Fix race conditions during automatic cluster bootstrap.
  - Fix calculation of periods in snapshot daemon.
  - Fix handling of iterator type in space:pairs() and space:select().
  - Fix CVE-2016-9036 and CVE-2016-9037.
  - Dozens of bug fixes to Vinyl storage engine.
  - Remove broken coredump() Lua function.


author: Roman Tsisyk <roman@tarantool.org> 1.7.5.0-1
changelog:
  - Stabilization of Vinyl storage engine.
  - Improved MemTX TREE iterators.
  - Better replication monitoring.
  - WAL tracking for remote replicas on master.
  - Automatic snapshots every hour.
  - Lua API to create consistent backups.
  - Hot code reload for stored C procedures.
  - New built-in rocks: 'http.client', 'iconv' and 'pwd'.
  - Lua 5.1 command line options.
  - LuaRocks-based package manager.
  - Stack traces support in fiber.info().
  - New names for box.cfg() options.
  - Hot standy mode is now off by default.
  - Support for UNIX pipes in tarantoolctl.
  - Non-blocking syslog logger.
  - Improved systemd integration.
  - Hundrends of bugs fixed, see GitHub release notes for details:
    https://github.com/tarantool/tarantool/releases/tag/1.7.5


author: Tadej Janež <tadej.j@nez.si> 0.2.3-17
changelog:
  - Rebuild for libmicrohttpd soname bump
  - Drop conditional for compat-lua BuildRequires
  - Update SPEC file to follow the latest Packaging Guidelines:
    - Drop Group tag
    - Use %license macro to separate license files from documentation


author: Conrad Meyer <cemeyer@uw.edu> - 0.9.1-5
changelog:
  - Pull bugfix from terminology git to fix issue users may be hitting in the
    field: https://retrace.fedoraproject.org/faf/reports/997237/


author: Rex Dieter <rdieter@fedoraproject.org> - 2.11.2-2
changelog:
  - support out-of-tree builds
  - set USE_SYSTEM_HUNSPELL USE_SYSTEM_QUAZIP USE_SYSTEM_QTSINGLEAPPLICATION


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.6.4-4
changelog:
  - Add patch for fixing storage initilization on
    concurrent connections.
  - Add patch for fixing verified token removal


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.2-2
changelog:
  - Handle case where pkg-config fails (EL6 and EL5).  Might as well test those
    magic EPEL RPM macros.
  - Use License tag.
  - Remove useless delete of test-graph; hasn't done anything for ages.
  - Use %make_install.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.2-3
changelog:
  - Move the bash completion dir thing into a macro.  I will probably just make
    this a system-wide macro at some point.


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Kalev Lember <klember@redhat.com> - 1.5.4-3
changelog:
  - Update licensing breakdown (#1434003)
  - Add explicit dbus and hicolor-icon-theme deps for directory ownership


author: Samuel Rakitničan <samuel.rakitnican@gmail.com> 17.2-1
changelog:
  - Adjust according to Fedora Packaging Guidelines
  - Update to 17.2
  - Fix build error with newer Fedora releases that uses vala 0.36


author: Samuel Rakitničan <samuel.rakitnican@gmail.com> 18.1-1
changelog:
  - Update to 18.1
  - Revert wrong permissions for a ghost file from previous update
  - Correct the license


author: Leigh Scott <leigh123linux@googlemail.com> - 0.13.1-1
changelog:
  - New version 0.13.1
  - Fix un-owned directory
  - Remove 'create tint2 config directory' hack
  - Move sample configs from doc


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 1-1
changelog:
  - Release v1. Not ready for production. Following features are included.
  - Recording of user input, program output and window size changes.
  - Support for writing into syslog and files.
  - Tlog-rec configuration through system-wide configuration file
    /etc/tlog/tlog-rec.conf, environment variables and command line.
  - Very basic playback directly from ElasticSearch.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2-1
changelog:
  - Release v2. Not ready for production. Following features are added.
  - Fully-fledged command-line interface to tlog-play, along with config file
    and man pages.
  - Support for playback from file in tlog-play.
  - Make tlog-play follow mode controllable and off by default.
  - Get tlog-rec shell also from TLOG_REC_SHELL environment variable.
  - Support non-TTY stdin/stdout in tlog-rec, allowing its use with
    non-interactive SSH sessions.
  - Support building on and packaging for EPEL5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: David Timms <iinet.net.au@dtimms> - 1.4.14-1
changelog:
  - Update to release 1.4.14.
  - Includes security fixes for CVE-2017-6307, CVE-2017-6308,
    CVE-2017-6309, CVE-2017-6310.


author: David Timms <iinet.net.au@dtimms> - 1.4.14-2
changelog:
  - Update -dolphin to use the kf5 services directory.
  - Remove rpm clean section since it's taken care of automatically.


author: Marcel Härry <maha+fedora@scrit.ch> - 0.2.9.11-1
changelog:
  - update to upstream release 0.2.9.11 (SECURITY)
  - CVE-2017-0375 & CVE-2017-0376: denial of service (assertion
    failure and daemon exit) (#1461276) (#1461275)


author: Marcel Haerry <mh+fedora@scrit.ch> - 0.2.9.12-1
changelog:
  - update to upstream release 0.2.9.12 (SECURITY) (#1494860)
  - CVE-2017-0380 Stack disclosure in hidden services logs when
    SafeLogging disabled (#1493512) (#1493513)
  - Cleanup spec


author: Marcel Härry <mh+fedora@scrit.ch> - 0.3.1.9-1
changelog:
  - update to upstream release 0.3.1.9. Fixes:
  - CVE-2017-8819: Replay-cache ineffective for v2 onion services
  - CVE-2017-8820: Remote DoS attack against directory authorities
  - CVE-2017-8821: An attacker can make Tor ask for a password
  - CVE-2017-8822: Relays can pick themselves in a circuit path
  - CVE-2017-8823: Use-after-free in onion service v2


author: Marcel Härry <mh+fedora@scrit.ch> - 0.3.1.10-1
changelog:
  - Update to latest version. Security-Fixes TROVE-2018-001, TROVE-2018-002,
    TROVE-2018-003 and TROVE-2018-004


author: Zamir SUN <zsun@fedoraproject.org> - 2.6-2
changelog:
  - Add bz1386451-trace-cmd-record-crash-f-before-e.patch
  - Fix rpmlint error unstripped-binary-or-object
  - Resolves: rhbz#1386451


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry James <loganjerry@gmail.com> - 1.8-1
changelog:
  - New upstream version
  - Drop upstreamed -uio patch
  - Add -net-protocols patch to fix bz 1514786
  - Add -autofs patch to fix compilation under kernel 4.14+


author: Didier Fabert <didier.fabert@gmail.com> - 2.4.3.2-3
changelog:
  - Fix #1421468 by removing defattr macro in files section
  - Remove executable permission on 2 cpp files.


author: Didier Fabert <didier.fabert@gmail.com> - 2.4.3.4-1
changelog:
  - update to 2.4.3.4
  - Fix https://bugzilla.redhat.com/show_bug.cgi?id=1429542
  - Fix https://bugzilla.redhat.com/show_bug.cgi?id=1435181


author: Artur Iwicki <fedora@svgames.pl> 1.3.2-2
changelog:
  - Move the level packs out of -data into a -cclp subpackage
  - Add a .dac file that enables the CCLP2 level pack
  - Add icons and a .desktop file
  - Add an .appdata.xml file


author: Artur Iwicki <fedora@svgames.pl 1.3.2-3
changelog:
  - Fix license tags in appdata file
  - Add dependency on hicolor-icon-theme
  - Remove unnecessary slashes after buildroot macro in install section


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to version 1.2.0
    * Added privilege checks for all set*uid and set*gid functions.
    * Added a lot more and accurate tests which work as root.
    * Fixed some minor issues


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-2
changelog:
  - Python 2 binary package renamed to python2-unbound
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Wouters <pwouters@redhat.com> - 1.6.8-1
changelog:
  - Resolves rhbz#1483572 unbound-1.6.8 is available
  - Resolves rhbz#1507049 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records
  - Resolves rhbz#1536518 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records [fedora-all]


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-29
changelog:
  - added build parameter "-DNO_LCHMOD" because lchmod isn't provided on Linux
    system
    Resolves: #1350627


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-30
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
    so linking is now configurable from the spec file
  - define __global_ldflags on EL <= 7
  - set LFLAGS2 with __global_ldflags for hardened build
    Resolves: #1330519


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.1.20130726svn14389
changelog:
  - Update to upstream Subversion snapshot to get bug fixes
  - Apply autoconf patch to handle aarch64
  - Update spec to latest startup script handling, also conditionalize
    RHEL SysV init handle for EPEL to make it easier to handle both


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.8.20171022svn14722
changelog:
  - update to new upstream snapshot
  - fix SSL to build against newer OpenSSL (works with older too)
  - update default config to have Fedora SSL path
  - update systemd service file to restart on failure
  - sync Fedora and EPEL SRPMS, drop EPEL 5


author: Richard Hughes <rhughes@redhat.com> - 0.99.3-1
changelog:
  - New upstream release
  - Fix several crashes
  - Properly detect bluetooth mice and keyboards that are HID devices
  - Support Logitech Unifying in Linux 3.19
  - Work-around broken battery on the Onda v975w


author: Richard Hughes <rhughes@redhat.com> - 0.99.4-1
changelog:
  - New upstream release
  - Add support for Logitech G700s/G700 Gaming Mouse
  - Change the default low battery policy to percentage


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.10-18.20111215gite1a4227
changelog:
  - Python 2 binary package renamed to python2-urjtag
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - New version
    Resolves: rhbz#1326416
  - Switched to tgz suffix which seems to be the default
  - Dropped override-dirs-in-unattended-install patch (upstreamed)
  - Updated install-fix patch
  - Optimized patch numbering


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170317
changelog:
  - Update to latest git snapshot
  - Use --enable-werror configure option as the upstream default
    changed to not use -Werror.


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-1
changelog:
  - Update to 0.7.0
    - changed PresentDevicePolicy setting from keep to apply-policy
    - added AuditFilePath configuration option pointing to
      /var/log/usbguard/usbguard-audit.log file
    - install bash-completion script
    - use 0600 file permissions for usbguard-daemon.conf and rules.conf


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Don't use --enable-werror downstream
  - Removed patches related to compiler warnings


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Rex Dieter <rdieter@fedoraproject.org> - 2007f-14
changelog:
  - .spec cosmetics, %define -> %global, drop %clean
  - workaround el6 libc-client WONTFIX brokenness (#736120)
  - use compat-openssl10 on f26+ (#1424334)


author: Jorge A Gallegos <kad@blegh.net> - 2.0.16-1
changelog:
  - Conditionally disable router-access for tcp_wrappers deprecation (Jorge Gallegos)
  - Updated to 2.0.16 which includes fix for CVE-2018-6758 (Jorge Gallegos)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:6.2.91-2
changelog:
  - Python 2 binary package renamed to python2-v8
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Martin Gansser <martinkg@fedoraproject.org> - 1.3.0-0.1.20170415git3f1cd42
changelog:
  - Add LFLAGS flag to fix unused-direct-shlib-dependency warnings
  - Add %{name}-unbundle-qxtglobalshortcut.patch
  - Initial build


author: Martin Gansser <martinkg@fedoraproject.org> - 1.3.0-0.2.20171028git6b614da
changelog:
  - Update to 1.3.0-0.2.20171028git6b614da
  - Do not run update-desktop-database on Fedora 25+ as per packaging guidelines
  - Remove %dir %{_libdir}/%{name}/plugins, it's marked as listed twice


author: Martin Gansser <martinkg@fedoraproject.org> - 1.3.0-0.6.20180127git58ad802
changelog:
  - Update to 1.3.0-0.6.20180127git58ad802
  - Dropped %{name}-unbundle-qxtglobalshortcut.patch
  - Delete bundled qxtglobalshortcut sources


author: Mark Wielaard <mjw@fedoraproject.org> 3.13.0-4
changelog:
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-9
changelog:
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-12
changelog:
  - Add valgrind-3.13.0-s390-cgijnl.patch.
  - Use upstream version of valgrind-3.13.0-debug-alt-file.patch.


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1.91-1
changelog:
  - Update to 1.1.91
  - Switched to BR python2-devel according to Fedora Packaging guidelines for Python


author: Martin Gansser <martinkg@fedoraproject.org> - 0.3.0-17.20150211git894daa8
changelog:
  - rebuild for new git version
  - added Fedora %optflags for CFLAGS and CXXFLAGS
  - cleanup spec file
  - mark license files as %license where available


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.5-9.20170611git254122b
changelog:
  - Use mariadb-connector-c-devel instead of mariadb-devel only for f28,
    fixes (BZ#1493698).
  - Add BR openssl-devel


author: Martin Gansser <martinkg@fedoraproject.org> - 0.0.16-1
changelog:
  - rebuild for new release 0.0.16
  - cleanup spec file
  - mark license files as %license where available


author: Filipe Rosset <rosset.filipe@gmail.com> - 3.920-1
changelog:
  - 3.920 bump
  - Disabled tests until upstream fixes the issue
  - Added BR to fix EPEL7 build
  - Fixes rhbz #1250122 and rhbz #1494887


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1-3.20170830gitafc8ea9
changelog:
  - change license tag to GPLv2
  - fix warning _FORTIFY_SOURCE requires compiling with optimization (-O)


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.9.1-3
changelog:
  - Add tests and other corrections based on rhbz #1517006
  - update-desktop-database
  - preserve timestamps


author: Benjamin Gilbert <bgilbert@backtick.net> - 8.5.6-1
changelog:
  - New release
  - Rename Python packages per policy
  - Update project URLs
  - Rename pygobject3-base dependency to python-gobject-base
  - Switch python3-gobject dependency to python3-gobject-base
  - Add missing arch-specific Python provide
  - Drop Group tags


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-1
changelog:
  - New upstream version 1.18.
  - Update RPM description section with complete list of supported guests.
  - If ‘make check’ fails, dump ‘test-suite.log’.


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.0.0-0.13.git6a7d494
changelog:
  - Update to git snapshot, fixes many issues
  - Drop wayland and openal fixes (better fixes have been upstreamed)
  - Better workaround patch for sound syncing issue


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.0.13-1
changelog:
  - Update to version 2.0.13
  - Drop patches: voms-nossl3.patch, voms-tls1.patch, voms-gcc6.patch,
    voms-paren.patch, voms-comment-in-comment.patch and voms-doxygen.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.1.rc0
changelog:
  - Fix a few remaining OpenSSL 1.1 issues
  - Fix a GCC 7 compiler error
  - Create RFC proxies as default


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.3.rc0
changelog:
  - Update the "check if NID is defined" patch
  - Improve compatibility with the kerberos gssapi header file
  - Rebuild for gsoap 2.8.48 (Fedora 27)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.1.7-5
changelog:
  - Build using mariadb-connector-c for Fedora 28+
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-2
changelog:
  - Applied patches:
  - Readd seccomp disabled by default
  - vsftpd local_max_rate option doesn't work as expected
  - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d 
  - configuration
  - The vsftpd doesn't remove failed upload when the delete_failed_uploads is 
  - enabled and the network cable is unplagged
  - man pages bug
  - vsftpd segfaults in vsf_sysutil_strndup
  - Fix logging when syslog is used


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-3
changelog:
  - Review patches
  - Add TLSv1.{1,2} options
  - Fix question mark wildcard within a file name
  - Seccomp patch removed


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-8
changelog:
  - Build against OpenSSL 1.1
  - Redefine VSFTP_COMMAND_FD to 1 to get errors generated during
  - startup picked up by systemd
  - Resolves: rhbz#1443055


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Richard W.M. Jones <rjones@redhat.com> - 2.35-21
changelog:
  - Rebuild for OCaml 4.04.0.
  - Modify configure script to allow building with OCaml 4.04.
  - Modify configure script to use octMPQ library (part of Apron).


author: Hans de Goede <hdegoede@redhat.com> - 0.4.2-1
changelog:
  - New upstream release 0.4.2 (rhbz#1433550)
  - Fixes CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 (#1479315)


author: Marek Skalický <mskalick@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0
  - Enable build-time testing
  - Enable lz4 and zstd compressor extension
  - Enable aarch64 and ppc64le


author: Filipe Rosset <rosset.filipe@gmail.com> - 3.9.0-1
changelog:
  - Rebuilt for new upstream version 3.9.0 fixes rhbz #1091751
  - Fixes FTBFS in rawhide rhbz #1424545 + spec clean up


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-6
changelog:
  - Fix use-after-free when macsec secure channels are deleted
  - Fix segmentation fault in case macsec module is not loaded (rh#1428937)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:2.6-8
changelog:
  - OpenSSL: use system ciphers by default (rh #1462262)
  - OpenSSL: fix private key password callback (rh #1465138)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:2.6-11
changelog:
  - hostapd: Avoid key reinstallation in FT handshake (CVE-2017-13082)
  - Fix PTK rekeying to generate a new ANonce
  - Prevent reinstallation of an already in-use group key and extend
    protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
    (CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
    CVE-2017-13087, CVE-2017-13088)
  - Prevent installation of an all-zero TK
  - TDLS: Reject TPK-TK reconfiguration
  - WNM: Ignore WNM-Sleep Mode Response without pending request
  - FT: Do not allow multiple Reassociation Response frames


author: Jiří Klimeš <blueowl@centrum.cz> - 1:2.6-12
changelog:
  - Fix crash when using MACsec without loaded macsec.ko (rh #1497640)
  - Enable Fast BSS Transition for station mode (rh #1372928)


author: Scott Talbert <swt@techie.net> - 3.0.3-5
changelog:
  - Add upstream patch for avoiding destruction of TLWs that were never created
  - Fixes assert during Filezilla startup (#1484955)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.2.0-16
changelog:
  - Main Python 2 binary package renamed to python2-wxpython,
    and wxPython-webview renamed to python2-wxpython-webview.
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.4-5
changelog:
  - Python 2 binary package renamed to python2-xapian-bindings
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Patrick Monnerat <pm@datasphere.ch> 1.0.0-2
changelog:
  - Patch "nonstdext" avoids segfault when viewing cert with
    non-standard extension.
    https://bugzilla.redhat.com/show_bug.cgi?id=1164340


author: Patrick Monnerat <patrick.monnerat@dh.com> 1.3.2-1
changelog:
  - New upstream release.
  - Patch "oidfieldcursor" to restore normal cursor behavior on OID resolver
    input field.
  - Drop README.update.


author: Patrick Monnerat <patrick@monnerat.net> 1.4.0-1
changelog:
  - New upstream release 1.4.0.
  - Use qt5.
  - Remove obsolete rpm scriptlets.
  - Remove xca_db_stat from install.


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.2-6
changelog:
  - fix an issue in patch for [XSA-240, CVE-2017-15595] that might be a
  	security issue
  - fix for [XSA-243, CVE-2017-15592] could cause hypervisor crash (DOS)


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.2-8
changelog:
  - xen: various flaws (#1518214)
    x86: infinite loop due to missing PoD error checking [XSA-246, CVE-2017-17044]
    Missing p2m error checking in PoD code [XSA-247, CVE-2017-17045]


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.2-9
changelog:
  - another patch related to the [XSA-240, CVE-2017-15595] issue
  - xen: various flaws (#1525018)
    x86 PV guests may gain access to internally used page [XSA-248]
    broken x86 shadow mode refcount overflow check [XSA-249]
    improper x86 shadow mode refcount error handling [XSA-250]
    improper bug check in x86 log-dirty handling [XSA-251]


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.3-1
changelog:
  - update to xen-4.8.3
    (includes Xen page-table isolation (XPTI) mitigation for XSA-254)
    adjust xen.use.fedora.ipxe.patch, xen.gcc7.fix.patch
    and qemu.git-fec5e8c92becad223df9d972770522f64aafdb72.patch
    remove upstream patches


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.3-3
changelog:
  - update Xen page-table isolation (XPTI) mitigation
    and add Branch Target Injection (BTI) mitigation for XSA-254
  - DoS via non-preemptable L3/L4 pagetable freeing [XSA-252, CVE-2018-7540]
  	(#1549568)
  - grant table v2 -> v1 transition may crash Xen [XSA-255, CVE-2018-7541]
  	(#1549570)
  - x86 PVH guest without LAPIC may DoS the host [XSA-256, CVE-2018-7542]
  	(#1549572)


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.3-4
changelog:
  - Information leak via crafted user-supplied CDROM [XSA-258] (#1571867)
  - x86: PV guest may crash Xen with XPTI [XSA-259] (#1571878)


author: Michael Young <m.a.young@durham.ac.uk> - 4.8.3-5
changelog:
  - x86: mishandling of debug exceptions [XSA-260, CVE-2018-8897]
  	(with extra patches so it applies cleanly)
  - x86 vHPET interrupt injection errors [XSA-261, CVE-2018-10982] (#1576089)
  - qemu may drive Xen into unbounded loop [XSA-262, CVE-2018-10981] (#1576680)


author: Richard Shaw <hobbes1069@gmail.com> - 0.5.4-5
changelog:
  - Change temp directory from /tmp to /var/tmp as images can get quite big.
  - Modernize spec and bring up to current guidelines.


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.4.2-1
changelog:
  - Update to 1.4.2, fixes rhbz#1404980
  - Port to GtkApplication (this should help with keyboard shortcut issues)
  - Translation updates: Catalan, Croatian, Danish, Dutch (Flemish),
    Greek, Indonesian, Italian, Kazakh, Lithuanian, Norwegian Bokmal,
    Serbian, Thai


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 4.12.0-1
changelog:
  - Update latest stable release 4.12.0
  - spec cleanup
  - changed default background patch to sed
  - removed change backdrop patch (testing)


author: Greg Hellings <greg.hellings@gmail.com> - 4.0.4-4
changelog:
  - Moved appdata and desktop files to gtk2 build, allowing
    proper auto-discovery by gnome-software. BZ#1330096


author: Greg Hellings <greg.hellings@gmail.com> - 4.0.5-2
changelog:
  - Fix post install scripts for upgrades
  - Added obsoletes for xiphos-common to stop collision issues
  - Partially addresses BZ1448623


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-1
changelog:
  - Upgraded to 1.3.8 and updated existing patches still required
  - Fix kernel mode breaking the closing tunnels


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-2
changelog:
  - Very reluctantly add a Suggests: tag to work around dnf/kernel bug
  - Resolves: rhbz#1192189 Both kernel-debug-core and kernel-core are installed


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.14.1-1
changelog:
  - Update to latest upstream release
  - remove png patch that isn't needed any more
  - re-do configure patch
  - use upstream appdata, remove our bit


author: Björn Persson <Bjorn@Rombobjörn.se> - 2016-1
changelog:
  - Upgraded to the 2016 release.
  - Removed the irrelevant and FHS-violating manifest file.
  - The license has changed to GPLv3+.


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.2.11-25.20071117cvs
changelog:
  - Desktop entry: Add more module format associations, fix some warnings
  - Mark COPYING as %license where available


author: Tom Callaway <spot@fedoraproject.org> - 1:1.2.11-28.20071117cvs
changelog:
  - Add Provides for bundled libmpg123. xmms doesn't really have a good way to use
    a system copy here, because it is older than dinosaurs.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8-46
changelog:
  - Python 2 binary package renamed to python2-xmms2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.17.0-4
changelog:
  - Add Patch0: xneur-0.17.0-memory-misusages-fix.patch (bz#1175114) made by Alexey Radkov and sent upstream.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.20.0-1
changelog:
  - Update to version 0.20.0 (bz#1479874)
  - Upstream project moved to github
  - Drop Patch0: xneur-0.17.0-memory-misusages-fix.patch
  - Add BR intltool, libXtst-devel


author: Ben Rosser <rosser.bjr@gmail.com> 0.0.4-2
changelog:
  - Remove spurious rm -rf of the buildroot from install section.
  - Switch to make build/install macros.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.1-2
changelog:
  - Add a new option to provide a workaround for the slow pointer movement on
    hidpi displays (#1413306) .
    That's a fedora-only patch for now, no idea what the permanent upstream
    solution will be here.


author: Simone Caronni <negativo17@gmail.com> - 7.5-16
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Update xslclients to 1.1.3.
  - Simplify build requirements.


author: Simone Caronni <negativo17@gmail.com> - 7.5-18
changelog:
  - xlsfonts 1.0.5
  - xlsatoms 1.1.2
  - xev 1.2.2
  - xdpyinfo 1.3.2
  - Use git commit id for edid-decode-snapshot.


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.19-1
changelog:
  - Rebuilt for new upstream release 1.19, fixes rhbz #1401149
  - Do not use upstreamed patches (already in latest release)


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.6-2
changelog:
  - Allow oddjob-mkhomedir in SELinux policy (stolen from grishin-a)
  - Allow no new privileges transition in SELinux policy


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.6-3
changelog:
  - mark files in /etc/xrdp as configs
  - run ldconfig
  - remove chmod of certs/keys
  - fix script interpreter


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:4.7.1-1
changelog:
  - Update to version 4.7.1
  - Drop patch xrootd-signed-char.patch (accepted upstream)
  - Drop patch xrootd-dcache-compat.patch (previously backported)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.37-2
changelog:
  - Leave autostart stuff installed (at least useful for LXDE),
    but not show them by default for all DE
    (bug 1266521) for F-27+


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Oliver Haessler <oliver@redhat.com> - 0.38.2-3
changelog:
  - increment number, as bodhi has issues with the previous version,
  so fixing it by updating the minor version


author: Michal Ambroz <rebus at, seznam.cz> - 3.5.0-4
changelog:
  - package review - bugzilla #1362265
  - cosmetics of the changelog
  - using default spinx theme to remove the static fonts


author: Michal Ambroz <rebus at, seznam.cz> - 3.5.0-7
changelog:
  - Adding patch from pull request 627 until 3.5.1 is released
  - https://patch-diff.githubusercontent.com/raw/VirusTotal/yara/pull/627.patch
  - Fixes CVE-2016-10210 CVE-2016-10211 CVE-2017-5923 CVE-2017-5924


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:1.9.2-5
changelog:
  - Spec fixes for modern guidelines:
    remove BuildRoot tag, remove Group tags, remove defattr, no clean section,
    automatic buildroot clean in install section, use license macro
  - License is GPLv2+ / "GPL v2 (or later)".
  - Verbose build.log with V=1
  - Make base package deps arch-specific.


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Switch to cmake; upstream is deprecating qmake
  - and its rule for detecting Qt >= 5.5.1 breaks on F28's Qt 5.10


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.7.0-18
changelog:
  - Cleanup and modernise spec
  - Update systemd scriptlets to the latest standard
  - Update exclude arch


author: Karsten Hopp <karsten@redhat.com> 0.7.0-20
changelog:
  - only use execstack on archs with prelink
  - fix ppc64le detection as littleendian
  - use up2date config.{guess,sub} with ppc64le support


author: Richard Shaw <hobbes1069@gmail.com> - 0.1.5.9-13
changelog:
  - Rebuild for C++ abi breakage.
  - Only build documentation for non-rawhide builds due to bug in convert from
    the ImageMagick package (BZ#1217741).


author: Kamil Dudka <kdudka@redhat.com> - 5.3-2
changelog:
  - drop zsh-4.3.6-8bit-prompts.patch which was superseeded by an upstream patch
    (see http://www.zsh.org/mla/users/2007/msg00468.html for details)
  - drop undocumented zsh-test-C02-dev_fd-mock.patch


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 5.3.1-4
changelog:
  - Add build deps on gdbm-devel and pcre-devel.  Pass --enable-pcre to
    configure.  These should ensure that the pcre and gdbm modules are built.
    (#1438009)


author: Kamil Dudka <kdudka@redhat.com> - 5.3.1-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)


author: Raphael Groner <projects.rg@smart.ms> - 5.0.0-2.20160802git064e9db
changelog:
  - switch to git snapshot to include all latest upstream patches
  - unbundle lxqt-wallet
  - prepare to unbundle tcplay
  - drop hack for desktop-file-validate, upstream issue#42
  - add polkit
  - split cli into console subpackage
  - move licenses and general documentation into libs subpackage
  - fix incorrect desktop files
  - use BR: pkgconfig() where applicable
  - drop default dependencies
  - add scriptlets for MimeType key
  - drop scriptlets option -p to not confuse rpmlint
  - note Public Domain for bundled md5-openssl
  - note GPLv3+ and GPLv2+ partly in source files
  - fix find_lang
  - drop chrpath (previously commented)


author: Neal Gompa <ngompa13@gmail.com> - 1.13.19-1
changelog:
  - Update to 1.13.19
  - Bump required libzypp version
  - Backport patch from upstream to fix building tests


author: Neal Gompa <ngompa13@gmail.com> - 1.13.22-1
changelog:
  - Update to 1.13.22
  - Fix zypp-apt-get symlink
  - Add missing (Build)Requires for zypper-aptitude
  - Move bash completion file and add bash-completion Requires


