# changelog

author: Christine Caulfield <ccaulfie@redhat.com> - 1.25-1
changelog:
  Rebase to 1.25 for PMTUd fixes
    Resolves: rhbz#2161172

    * Wed Jul 27 2022 Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
    Don't run nozzle_up_down tests, as they don't work in RH CI
    Resolves: rhbz#2024095


author: Cestmir Kalina <ckalina@redhat.com> - 1.3-1
changelog:
  - Resolves: #1642134 Error restrict bugs to groups without permission while
    trying to submit RHEL8 symbols
  - New ksc reports will no longer be submitted under redhat bugzilla group.
  - At least one bugzilla group must be specified by a ksc user, otherwise ksc
    will terminate with an error.
  - Version bump to 1.3


author: Cestmir Kalina <ckalina@redhat.com> - 1.4-1
changelog:
  - Resolves: #1643187 ksc manpage lies -k can only be specified once
  - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect
  - Support for multiple -k arguments added
  - Man page reworded to match ksc behaviour


author: Čestmír Kalina <ckalina@redhat.com> - 1.5-1
changelog:
  - Resolves: #1647528 ksc add feature to copy justifications between ksc...
  - Resolves: #1648026 ksc add a non-processed .ko file
  - Resolves: #1647974 piped input causes ksc to fail when asking for user input
  - Add support for justification carry over.
  - Add support for symbol filtering using -K.
  - Fix input problems when piping through to ksc.
  - Extend manpage with EXAMPLES section.
  - Version bump fo 1.5.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-1
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - Add modinfo vermagic field to the output.
  - Add kmod (provides modinfo) to requires.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-2
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - (OSCI) Add kmod to Makefile-generated Requires


author: Čestmír Kalina <ckalina@redhat.com> - 1.7-1
changelog:
  - Resolves: #1886901 Avoid divisive language
  - Resolves: #1912506 File bugs with Tracking keyword by default


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-1
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Rebase to latest ksc release


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-2
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Use platform-python in place of python3


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.0-10
changelog:
  - backport crash fix recommended by upstream
  - cleanup macros
  - simplify %files
  - BR: bison flex (enables Survey targeting expressions support)
  - drop BR: qt5-qtbase-private-devel (no private api use detected)
  - drop non-autodetected runtime deps


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.0-11
changelog:
  - -console: uses qt5-qtcharts private api
  - -devel: use cmake-style deps instead of hard-coding qt5-qtbase


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.15.2-2
changelog:
  - Temporarily disable dark theme support to work around Wayland issue
  - switch to using SPDX license identifier


author: Richard Hughes <richard@hughsie.com> - 1.0-6
changelog:
  - Explode the metainfo files into the subpackages so they get added to the
    distro-specific AppStream metadata.
  - This allows us to add and remove languages in GNOME Software.


author: Mike FABIAN <mfabian@redhat.com> - 0.0.38-1
changelog:
  - Add some new translations from CLDR
  - Add agr, bi, hif, kab, mfe, miq, mjw, shn, sm, to, tpi_PG, yuw, AS, MU, SC, TO, VU, WS


author: Pete Walter <pwalter@fedoraproject.org> - 0.0.38-5
changelog:
  - Conditionally add back Python 2 subpackage on Fedora
  - Rename Python 3 subpackage to python3-langtable to follow guidelines
  - Resolves: rhbz#1559099


author: Tom Prince - 0.8.1-1
changelog:
  - Update to 0.8.1.  This update adds pinning of LastPass public keys, in
    preparation for certificate changes at lastpass.com. Upgrade will be needed
    to avoid "Peer certificate cannot be authenticated with given CA
    certificates" errors when the cert changes are made.


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.3.1-1
changelog:
  - Update to version 1.3.1
  - Add fish and zsh completions
  - Fix #1583717, #1579473, #1459717
  - Thanks to Ventz Petkov and Edward J. Huff for their contribution


author: Dominik Mierzejewski <rpm@greysector.net> - 2.5-14.20171011gitb6dc48a
changelog:
  - update to latest git snapshot
  - switch URL to github project page, the original seems to have expired
    and got taken over
  - use license macro and other modern macros
  - add missing build dependencies


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Kalev Lember <klember@redhat.com> - 1:1.27.1-1
changelog:
  - Update to 1.27.1
  - Build with llvm 12
  - Don't use -w (treat warnings as errors) in default _d_optflags


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Petr Stodulka <pstodulk@redhat.com> - 0.13.0-10
changelog:
  - Rebase to v0.13.0
  - Bump the provided leapp-framework capability to 2.0
  - The commands for the leapp tool (e.g. preupgrade, upgrade) are now
    defined in the leapp-repository component
  - The leapp tool scans the available CLI commands dynamically
  - First build for the IPU 8 -> 9
  - Resolves: #1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.14.0-1
changelog:
  - Rebase to v0.14.0
  - Bump leapp-framework to 2.2
  - Bump leapp-framework-dependencies to 5
  - Add depency on python3 (distribution python)
  - Added possibility to specify the report format version
  - Check the answerfile upon loading and prevent creation of invalid answerfile
  - Dialogs: print the reason field for question in the answerfile
  - Fix the JSON serialization in Dialogs on Python3
  - Introduced new functions in the leapp standard library
  - Updated man page
  - Resolves: rhbz#1997075


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.0-1
changelog:
  - Rebase to v0.15.0
  - Bump leapp-framework to 3.1
  - Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
  - Fix crashes when processing invalid FQDNs
  - Fix the error msg when a leapp CLI command does not exist
  - Introduce new report JSON schema v1.2.0 (default: 1.1.0)
  - Resolves: rhbz#2090992, rhbz#2106065


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.1-1
changelog:
  - Rebase to v0.15.1
  - Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
  - Propagate error messages from leapp actors to the main leapp process
  - Prevent unicode errors when printing error messages
  - Resolves: rhbz#2162710


author: Petr Stodulka <pstodulk@redhat.com> - 0.15.1-2
changelog:
  - Bump leapp-framework to 4.0
  - Improve the report summary output to make it more visible
  - Fix processing data in remediation instructions with non-ascii characters
  - Fix creation of Dialog for Component without choices
  - Store tracebacks from actors in leapp.db
  - Resolves: #2223312


author: Petr Stodulka <pstodulk@redhat.com> - 0.16.0-1
changelog:
  - Rebase to v0.16.0
  - Bump leapp-framework to 5.0
  - Improve the report overview to include also information about errors
  - Distinguish errors from valid reports in the generated txt report file
  - Resolves: #2223312


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-14
changelog:
  - Fixed CVE-2019-5827 (#1710184)
  - Fixed CVE-2019-13750 (#1786510)
  - Fixed CVE-2019-13751 (#1786522)
  - Fixed CVE-2019-19603 (#1792013)
  - Fixed CVE-2020-13435 (#1841233)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 5.3-2
changelog:
  - Do not remove buildroot on install
  - Make build output more verbose
  - Ensure build flags are applied
  - Build docs


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.20-21
changelog:
  - Fix FTBFS (rhbz#1604550, rhbz#1675256)
  - Add build requires on gcc
  - Change build requires from libungif-devel to giflib-devel
    (the libungif compat library is no longer available since Fedora 28)
  - Port to giflib version 5 and allow unbundling of giflib
  - Link the shared library with its dependencies and adjust afterimage-libs
    and afterimage-config --libs to not list the dependencies
  - Add build requires on librsvg2-devel and build the package with SVG support
  - Create an -apps subpackage containing the sample programs (used to be part
    of the -devel subpackage)
  - Do not enable the GLX extension - it causes problems on newer Fedora
    releases (rhbz#1708922, rhbz#1615383 [aterm], rhbz#1704691 [root])
  - Update the license file with new FSF address


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: Rich Mattes <richmattes@gmail.com> - 2.6.4-1
changelog:
  - Update to release 2.6.4, with upstream fix for qreal on armv7 (rhbz#1556028)
  - Remove upstream patch and update library names


author: José Expósito <jexposit@redhat.com> - 1.6.8-7
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-9
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160229)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160231)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160239)


author: José Expósito <jexposit@redhat.com> - 3.5.12-10
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-9
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2161800)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2161808)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160238)


author: Dodji Seketeli <dodji@redhat.com> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
      This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Dodji Seketeli <dodji@redhat.com> - 2.0-1
changelog:
  - Update to upstream 2.0 tarball
  - Change License to ASL 2.0 to comply with the upstream license change.


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1
  - Add libabigail.so.1 and libabigail.so.1.0.0 to the package.
  - Enable CTF support when running the tests.
  - Add binutils-devel as BuildRequires, for CTF.


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3 release
  - Don't do "dos2unix doc/manuals/html/_static/jquery.js"
    The file doc/manuals/html/_static/jquery.js is no more.
    Hence, don't BuildRequires: dos2unix anymore.
  - The libaigail binary is now libabigail.so.2.0.0.


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Use SPDX license description
  - Add git as build requirement
  - Use git to apply the patches as they apply binary changes and patch
    doesn't know how to handle these.
  - As the paches touch Makefile.am files, run autoreconf after
    applying the patches.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch 
    0003-Replace-deprecated-mock-with-unittest.mock.patch
  - Package libabigail.so.4 rather than the previous libabigail.so.3.
  - Disable abidb as it requires python 3.9
  - Better handle error handling when tests fails.


author: Florian Weimer <fweimer@redhat.com> - 20090429-17
changelog:
  - Use LDFLAGS from redhat-rpm-config
  - Remove "%defattr(-,root,root,-)"
  - Remove "Group:"
  - Add BuildRequires for gcc, make


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 1.2-3
changelog:
  - Move binary to -tools sub package
  - Rename binary to prevent conflict
  - Improve summary and description
  - Prevent addition to compiler flags
  - Do not require main package from devel
  - Do not use empty TODO file


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-10
changelog:
  - Fix bogus date in %changelog
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Simone Caronni <negativo17@gmail.com> - 0.9.3-2
changelog:
  - Use autotools to get rid of RPATH.
  - Fix Java build requirements for RHEL/CentOS 7.
  - Clean up SPEC file, rpmlint fixes.
  - Add license macro.


author: Remi Collet <remi@remirepo.net> - 1.27.0-1
changelog:
  - update to 1.27.0
  - raise dependency to libmongocrypt 1.10.0
  - drop dependency on libicu
  - add dependency on libutf8proc


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: smael Olea <ismael@olea.org> - 1.4.2
changelog:
  - upstream URL changed to github
  - updating to 1.4.2
  - renamed COPYING.txt LICENSE.md
  - binary licenses should be GPLv2+ because linking with fftw (which uses GPLv2+)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.3^20210820gitb1d5212-1
changelog:
  - Generally modernize the spec file
  - Opt in to rpmautospec
  - Package a post-release snapshot from GitHub
  - Enable tests
  - Run autoreconf


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Michal Ambroz <rebus at, seznam.cz> - 1.5-6.20180328gitc315f8d
changelog:
  - switch to github snapshot with BSD license
  - use ldconfig_scriptlets instead of ldconfig in post/postun


author: Miro Hrončok <mhroncok@redhat.com> - 1.6-4
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)
  - explicit build with python2


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Tulio Magno <tuliom@linux.ibm.com> - 1.0.14-1
changelog:
  - Rebase to libdfp-1.0.14.  Improve package description.
    Enable execstack for ppc64le.
    Enable execution of tests.


author: Stefan Liebler <stli@linux.ibm.com> - 1.0.14-2
changelog:
  - Remove prelink build requirement.  Prevent execstack from being required
    when macro cpu_variants is not set.
    Remove z9-ec from macro cpu_variants.


author: Stefan Liebler <stli@linux.ibm.com> - 1.0.14-4
changelog:
  - Fix License tag.
  - Package COPYING.txt and use it with license macro.
    (see libdfp-license.patch and upstream pull-request
    https://github.com/libdfp/libdfp/pull/86)
  - Remove Group and BuildRoot tags.
  - Use buildroot macro instead of RPM_BUILD_ROOT variable.
  - Do not remove buildroot during install step.
  - Use pushd/popd instead of cd commands.
  - Remove clean section.
  - Fix changelog in order to not include macros.
  - Print summary of failing tests in the output of make check.
    (see libdfp-tests.patch and upstream pull-request
    https://github.com/libdfp/libdfp/pull/87)


author: Tulio Magno Quites Machado Filho <tuliom@linux.ibm.com> - 1.0.14-5
changelog:
  - Add support for DESTDIR.
  - Remove extra license patch in order to use license.
  - Make usage of scriptlets make_build, make_install and
    ldconfig_scriptlets.
  - Prevent unintentional soname bumps by specifying it via soname.
  - Use global instead of define for cpu_variants.
  - Remove unintentional usage of _isa.


author: Ron Olson <tachoknight@gmail.com> 5.6.1-2
changelog:
  - Merged patch 0a56660 from Shawn Anastasio to include
    ppc64le as one of the architectures to build for


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: Jaroslav Rohel <jrohel@redhat.com> - 0.63.0-18
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Dominik Mierzejewski <rpm@greysector.net> - 1.3.6-1
changelog:
  - update to 1.3.6 (#1570224)
  - add BR: gcc for https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
  - switch build system to cmake
  - add missing dependencies to -devel subpackage
  - use license and ldconfig_scriptlets macros


author: Petr Pisar <ppisar@redhat.com> - 0.20181119-1
changelog:
  - CVS snapshot taken on 2018-11-19 (release memory fence switched to a memory
    barrier on x86 and x86_64 platforms, support for ISO C14 and C17 added)


author: Petr Pisar <ppisar@redhat.com> - 0.20190722-1
changelog:
  - CVS snapshot taken on 2019-07-22 (ECB_MEMORXY_FENCE_RELAXED memory fence
    added, use the memory barriers of a C++ compiler)


author: Filip Januš <fjanus@redhat.com> - 12.2-1
changelog:
  - Rebase onto: 12.2
  - update of patch(libecpg-10.5-external-libpq.patch) was needed
  - add upstream patch libecpg-12.2-dependency-build.patch
    https://www.postgresql.org/message-id/20200321221303.GA17979%40momjian.us


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Michal Ambroz <rebus at, seznam.cz> - 0.2.0-10.20130410gitab48695
changelog:
  - patch to calling python2 explicitly during build of the python binding
  - fixes FTBS due to missing python binary as part of switching to python3


author: Michal Ambroz <rebus at, seznam.cz> - 0.2.0-18.20130410gitab48695
changelog:
  - trying to rebuild for F33/F34
  - do not treat the warnings about array-bounds as errors as the structs in emu_list are hitting this
  - remove trailing spaces
  - be more specific about the lib/python files to pack
  - explicit adding BR to gcc and make


author: Vishal Vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-1
changelog:
  - Resolves: rhbz#1614529
  - Updated the BuildRequires to python3 and using latest build
  - Changed the upstream URL


author: Vishal vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-4
changelog:
  - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro


author: Vishal Vijayraghavan <vvijayra@redhat.com> - 1:2.00.3-6
changelog:
  - Resolves: #1664501 - liberation-fonts-common contains fonts.dir
  - Splitted the font family(mono, sans and serif) into diferrent root font directories


author: Attila Lakatos <alakatos@redhat.com> - 0.1.10-3
changelog:
  - Rebuild due to the following message: libestr-0.1.10-2.el8 has already been built
    resolves: rhbz#2056293


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040450


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1-28
changelog:
  - Update URLs
  - Adjust whitespace to match personal preference
  - Add a build conditional for autoreconf
  - Use pkgconfig(…) dependencies where appropriate
  - Upgrade source hash from MD5 to SHA-512
  - Reduce spec file macro indirection and modernize macros
  - Use stricter globs to ensure so-version changes are detected
  - Make dependency on base package from -devel arched


author: Warren Togami <warren@blockstream.com> - 0.9.8-3
changelog:
  - 0.9.8
  - x86_64  EL7: DFORCE_MONOTONIC_FIX
    aarch64 EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le F30+ FORCE_PTHREAD_NONVER


author: Warren Togami <warren@blockstream.com> - 0.9.8-4
changelog:
  - upstream says to use FORCE_PTHREAD_NONVER on any glibc+arch that gets stuck
    For Fedora 31+ "make test" gets stuck on i686 x86_64 ppc64le s390x


author: Paul Wouters <pwouters@redhat.com> - 0.9.8-5
changelog:
  - Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime
  - Use license tag, remove duplicate README entry, update make test target


author: DJ Delorie <dj@redhat.com> - 3.1-24
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2014228)


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-13
changelog:
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Benjamin Berg <bberg@redhat.com> - 1.90.0-2
changelog:
  - Add patch to remove debug spew from udev rules
  - Add patch to fix compilation error
  - Related: rhbz1740752


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Kalev Lember <klember@redhat.com> - 0.17.6-1
changelog:
  - Update to 0.17.6
  - Don't set group tags
  - Co-own gir directories instead of depending on gobject-introspection
  - Use make_install macro
  - Update project URLs


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Caolán McNamara <caolanm@redhat.com> 1.14.29-6
changelog:
  - Resolves: rhbz#1202683 thumbnails not created in absence of ImageMagick
    because gdk-pixbuf2-devel not present at build time


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-26
changelog:
  - insufficient default memsize to open anaconda default RHEL 8.2 luks device
    resolves: rhbz#1837765


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.40.2-27
changelog:
  - selinux-relabel does not work if SELINUXTYPE != targeted
  - tar-in command does not allow restoring file capabilities
    resolves: rhbz#1384241 rhbz#1828952


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Andrea Musuruane <musuruan@gmail.com> - 0.8.1-9
changelog:
  - Rebuilt for jasper 2.0
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Dropped cleaning at the beginning of %install
  - Correctly marked license files


author: Mike FABIAN <mfabian@redhat.com> - 50.2-1
changelog:
  - Update to 50.2 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-2
changelog:
  - Fix rpmdiff failure: File /usr/src/debug/icu/source/i18n/unicode/selfmt.h
    relaxed permissions from 0644 to 0755 on all architectures
  - Related: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-4
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808236


author: David King <amigadave@amigadave.com> - 0.15.1b-27
changelog:
  - Add ID3v1 zero padding patch from Debian
  - Add a fix for CVE-2017-11550 (#1478934)
  - Add a fix for CVE-2004-2779 (#1561983)
  - Use %license, remove Group tag
  - Add BuildRequires on gcc


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Oden Eriksson <oe@nux.se> 3.10.0-3
changelog:
  - use the correct rpm macros for CFLAGS and LDFLAGS
  - P1: use correct version
  - P2-P6: add upstream fixes


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.0-24.20110806svn386
changelog:
  - Adjust whitespace and ordering to personal preference
  - Drop obsolete ldconfig scriptlets
  - Use much stricter file globs
  - Change library BR’s to pkgconfig() format
  - Use autosetup macro
  - Correct License field from “LGPLv2+” to “LGPLv2 and GPLv2 and Public Domain”
  - Add virtual Provides for bundled MD5 implementation
  - Properly install license file
  - Add ABOUT-NLS and TODO.tasks to doc files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.6-1
changelog:
  - New upstream version 1.1.6 with so-version bump from 0 to 2 and altered
    include path
  - Upstream tarball now comes from GitHub
  - Build with ninja backend instead of make


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.2
changelog:
  - Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
  - Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
  - Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
  - Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.3
changelog:
  - Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072958 - Use right sdap_domain in ad_domain_info_send [rhel-8.6.0.z]
  - Resolves: rhbz#2089244 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
  - Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
  - Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-3
changelog:
  - Resolves: rhbz#2219351 - [sssd] SSSD enters failed state after heavy load in the system [rhel-8.8.0.z]
  - Resolves: rhbz#2196838 - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' [rhel-8.8.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-4.2
changelog:
  - Resolves: RHEL-19212 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-8.9.0.z]
  - Resolves: RHEL-19994 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8.9.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-6
changelog:
  - Fix v1.6.1-implicit-fallthrough.patch compatibility with gcc < 7.
  - Use %ldconfig_scriptlets.
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-7
changelog:
  - Add: BuildRequires: gcc
    https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-8
changelog:
  - Enable tests (PTUNIT) and man pages (MAN).
  - Change BuildRequires: gcc -> gcc-c++ as PTUNIT tests require C++.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5366
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2406
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15290
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15300


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15300
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2406


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Parag Nemade <pnemade AT redhat DOT com> - 1:0.2.7-11
changelog:
  - Resolves:rh#1615534: libkkc-data FTBFS for missing BuildRequires
  - moved this package to use python3


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-8
changelog:
  - Suppress documentation in Flatpak builds
    Resolves: rhbz#1896257
  - build gir with non-parallel to avoid strange behavior.


author: Martin Gieseking <martin.gieseking@uos.de> - 2.6.2-12
changelog:
  - Applied security fixes from EL 7.4 (CVE-2014-8184, CVE-2017-13738, CVE-2017-13740, CVE-2017-13741, CVE-2017-13742, CVE-2017-13743, CVE-2017-13744)
  - Dropped redundant parts of the spec file.
  - Updated URL.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.2-13
changelog:
  - Python 2 binary package renamed to python2-louis
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David King <dking@redhat.com> - 2.6.2-17
changelog:
  - Fix CVE-2018-11577 (#1585906)
  - Fix CVE-2018-11684 (#1588632)
  - Fix CVE-2018-11685 (#1588637)
  - Fix CVE-2018-12085 (#1589942)


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-4
changelog:
  - Subpackage python2-macaroons has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: David Cantrell <dcantrell@redhat.com> - 1.14.5-5
changelog:
  - Split alternatives in to 4 sets (nforro)
  - Use default names for binaries and man pages (nforro)
  - Do not compress man pages (nforro)
  - Add missing %preun requirement (nforro)


author: Björn Esser <besser82@fedoraproject.org> - 1.14.5-10
changelog:
  - libmandoc.so must be linked with COMPAT_OBJS
  - Add patch to fix configure script
  - Replace plain make with %make_build


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - fixing a segfault on adding new location to calendar
  - https://github.com/mate-desktop/libmateweather/issues/75


author: Dominik Mierzejewski <rpm@greysector.net> - 1.4.7-1
changelog:
  - Update to 1.4.7 (#1431305)
  - Use license and make build macros
  - Make -devel require the same arch of main package
  - Sync libebml version requirement between main and -devel


author: Dominik Mierzejewski <rpm@greysector.net> - 1.4.9-1
changelog:
  - update to 1.4.9 (#1570226)
  - switch build system to cmake, add missing dependencies
  - use ldconfig_scriptlets macro


author: Dominik Mierzejewski <rpm@greysector.net> - 1.5.0-1
changelog:
  - update to 1.5.0
  - backport fixes for invalid memory access and null pointer dereference
  - fix unowned /usr/lib64/cmake/ebml directory


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Dominik Mierzejewski <rpm@greysector.net> - 1.23-1
changelog:
  - update to 1.23 (#1471768)
  - bump SONAME due to incompatible ABI change in 1.23
    (https://github.com/lu-zero/mfx_dispatch/issues/44)


author: Dominik Mierzejewski <rpm@greysector.net> - 1.25-1
changelog:
  - update to 1.25
  - use a simpler Source URL
  - drop workaround for https://github.com/lu-zero/mfx_dispatch/issues/44
  - use modern macros
  - add missing Requires: pkgconfig in -devel subpackage


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-22
changelog:
  - adopt for Fedora
  - hard-code ABI SONAME to avoid inadvertent breaks
  - use SPDX identifier
  - fix spurious executable permission
  - drop redundant configure flag


author: Dominik Mierzejewski <dominik@greysector.net> - 0.6.4-24
changelog:
  - add explicit build dependencies
  - use a modern pkgconf runtime dependency
  - annotate upstream patch origin


author: Eric Sandeen <sandeen@sandeen.net> - 3.1.6-1
changelog:
  - Move to upstream "development release" as the web page now states that
    the "stable release" is old and should not be used for new projects.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 3.0.8-3
changelog:
  - Use PCRE2 rhbz#2128321
  - Use libmaxminddb instead of old GeoIP
  - Migrate to SPDX identifier for License
  - Change homepage
  - Remove .la file for EPEL


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 3.0.9-1
changelog:
  - 2828.patch: drop, included in 3.0.9
  - Remove deps required for autoreconf
  - Minor cosmetic change for configure
  - ModSecurity_cookie_parsing_fix_303.patch: remove as not required since 3.0.4
  - 0001-Fix-build-on-non-x86-arch.patch: remove as not required since 3.0.4
  - modsecurity.pc: drop as is being shipped since 3.0.3


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.1.0-0.14.trunkREV507
changelog:
  - Add BR:glibc-langpack-en
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Sérgio Basto <sergio@serjux.com> - 2.1.0-0.18.trunkREV507
changelog:
  - Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446
    https://nvd.nist.gov/vuln/detail/CVE-2018-14403
    https://nvd.nist.gov/vuln/detail/CVE-2018-14379
    https://nvd.nist.gov/vuln/detail/CVE-2018-14326
    https://nvd.nist.gov/vuln/detail/CVE-2018-14325
    https://nvd.nist.gov/vuln/detail/CVE-2018-14054
    based on https://github.com/TechSmith/mp4v2/pull/27
    and https://github.com/sergiomb2/libmp4v2/
  - Update spec
  - Fix build on epel7


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
changelog:
  - New upstream version 0.7alpha.
  - No tarball was uploaded so temporarily use tarball from github.
  - Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
    chunk number validity checks


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
changelog:
  - Fix for CVE-2019-1010305
  - Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
    resolves: rhbz#1736745, rhbz#1736743


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.13-2
changelog:
  - Use https source URL
  - Drop obsolete spec elements
  - Use license macro
  - Update libusbx-devel build dependency
  - Drop ancient (F15) Obsoletes:
  - Tighten file list


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: David Tardon <dtardon@redhat.com> - 0.3.11-3
changelog:
  - Resolves: rhbz#1461763 CVE-2017-9433 Out-of-bounds write in the
    MsWrd1Parser::readFootnoteCorrespondence function


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Steve Dickson <steved@redhat.com> 2.3.3-38
changelog:
  - exports man page: warn about subdirectory exports (bz 1652437)
  - Don't modify /etc/group on upgrades (bz 1856881)
  - nfs-iostat: divide by zero with fresh mount (bz 1861823)
  - nfsiostat: Drop autofs entries before calling compare_iostats() (bz 1859130)
  - nfsdclddb: clddb-tool was recently renamed to nfsdclddb (bz 1893599)


author: Steve Dickson <steved@redhat.com> 2.3.3-39
changelog:
  - systemd: Ingnore export failures in nfs-server.serivce unit (bz 1894873)
  - exports.man: Remove some outdated verbiage (bz 1769688)


author: Steve Dickson <steved@redhat.com> 2.3.3-42
changelog:
  - gssd: Add options to allow for the use of ~/.k5identity file (bz 1868087)
  - man: Correct gssd(8) description of rpc-timeout and context-timeout (bz 1908232)
  - exportfs: fix unexporting of '/' (bz 1944119)


author: Steve Dickson <steved@redhat.com> 2.3.3-44
changelog:
  - gssd: Deal with failed thread creation (bz 1981400)
  - gssd: Add timeout for upcall threads (bz 1981403)
  - gssd: Cleaned up debug messages (bz 1961056)
  - spec: Updated description of the nfs-utils rpm (bz 1981419)


author: Steve Dickson <steved@redhat.com> 2.3.3-59
changelog:
  - Covscan Scan: Wrong Check of Return Value (bz 2151966)
  - Covscan Scan: Clang (experimental) (bz 2151971)


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Phil Sutter <psutter@redhat.com> [1.1.5-5.el8]
changelog:
  - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754]
  - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478]
  - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478]


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lubomir Rintel <lkundrak@v3.sk> - 1.8.26-2
changelog:
  - Fixes suggested in review by Matthew Krupcale (#1763285):
  - Add gcc BR
  - Fixed the libnma-gtk4 conditional
  - Made dependencies arch-specific where relevant
  - Dropped obsolete macros
  - Install license file with libnma-gtk4


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.0.0-0.13.Beta3
changelog:
  - Add upstream PR 121 to fix Office 365 signature validation
  - Use systemd service type=simple to avoid PID file race


author: Matt Domsch<mdomsch@fedoraproject.org> - 1.0.0-0.15.Beta3
changelog:
  - Remove PidFile from config as systemd doesn't need it
  - Remove ReadWritePaths from systemd as it's not needed


author: Matt Domsch <mdomsch@fedoraproject.org> 2.11.0-0.32
changelog:
  - fix systemd service type=simple patch to apply cleanly
  - Use systemd RuntimeDirectory for socket file


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.4.2-5
changelog:
  - Add systemd protections and restart
  - Use systemd RuntimeDirectory instead of tmpfiles where possible
  - Default config file to using local socket


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Kalev Lember <klember@redhat.com> - 1.12-9
changelog:
  - Remove lib64 rpaths
  - Disable strict aliasing as it's not strict-aliasing clean on ppc64el
  - Don't redefine licensedir


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.0.0-1
changelog:
  - Update to upstream 2.0.0
  - Fixes the following CVEs plus others
  - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436
  - CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545
  - CVE-2017-5209


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.6.0-9
changelog:
  - Reformat whitespace
  - Convert URLs from HTTP to HTTPS
  - Add BR on make for
    https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
  - Use macros to reduce repetition throughout
  - Use modern macros (license, make_build/make_install)
  - Make -devel dependency on main package strict (arched)
  - Add -doc subpackage with finite state machine pseudocode
  - Fix so version symlinking
  - Add patch from Debian for upstream issue PRI-186 (libpri fails to build with
    GCC 10)
  - Honor system rpm configuration build flags, including hardening flags
  - Run some tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.6.0-26
changelog:
  - Correction: .so version is “1.4”, not “1”
  - This is a spec file fix, and does not change the installed library


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: - 10.3.8-5
changelog:
  - Fix partial injection of Fedora build flags.
  - Double the sizeof array fdesc to fix a gcc compiling issue.
  - Resolves: bz1556062


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.3-11
changelog:
  Correctly set socket directory permissions when
    qb_ipcs_connection_auth_set() is called
    Resolves: rhbz#1836146


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Attila Lakatos <alakatos@redhat.com> - 1.6.1-1
changelog:
  - Rebase to 1.6.1
    resolves: RHEL-12892
  - Fix warnings reported by rpmlint
  - Enable support for zlib/zstd compression and GSSAPI


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 5.0-1
changelog:
  - New upstream release, migrated to python
  - Turn off automatic python byte-compilation and use py_byte_compile for the
    extension files


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: Paul Wouters <pwouters@redhat.com> - 3.32-3
changelog:
  - Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
  - Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
  - Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change


author: Paul Wouters <pwouters@redhat.com> - 4.1-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
  - Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2186127)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570: Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187179


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Remi Collet <remi@remirepo.net> - 0.16.2-3
changelog:
  - add files by license list in package sources
  - open https://github.com/rnpgp/rnp/issues/1932 missing MIT
  - add man pages
  - check archive signature


author: Remi Collet <remi@remirepo.net> - 0.17.0-1
changelog:
  - update to 0.17.0
  - use bundled libsexp
  - add patch to not install static libraries from
    https://github.com/rnpgp/rnp/pull/2071
  - use upstream patch to fix build with GCC 13


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Start work on the 1.4 release
  - Trim git commit summary prefix from changelog lines
  - Report the program version number in the results (#309)
  - Handle compressed but otherwise empty man pages (#308)
  - Flake8 fixes for test_manpage.py
  - s/self.rpm/self.after_rpm/ in two test_manpage.py tests
  - Disable broken ELF heurisitic and size limit in libclamav
  - Modify dump_cfg() to write valid YAML to stdout (#306)
  - Migrate more code off hsearch and to uthash
  - Replace hsearch() with uthash in the kmod inspection
  - Update TEST_METADATA status in TODO and MISSING
  - Restrict style checks to specific directories
  - Replace hsearch() with uthash in the abidiff inspection
  - Change tsearch/twalk use to uthash
  - Correct misuse of entry with hentry variables (#321)
  - Normalize copyright boilerplates in source files
  - Use hentry->key over hentry->value in pathmigration
  - Adjust lib/meson.build for Fedora rawhide
  - Drop gate.yml and begin non-x86_64 arches in ci.yml
  - Add armv7, aarch64, and s390x to the other_arches job
  - Change init.c error reporting over to err/warn functions
  - Modify file triggers and matrix use in ci.yml
  - Split 32-bit osdeps out to post.sh scripts in osdeps/
  - Split style.yml in to shellcheck.yml and python.yml
  - Rewrite extra-ci.yml to use the matrix strategy method for GHA
  - Move the emulated CI jobs to extra-ci.yml
  - s/pkg/pki/ for the centos jobs
  - Debian and Ubuntu fixes for CI
  - Python pip on Debian is called pip
  - Try to fix just debian:stable
  - Enable debian:testing in extra-ci.yml
  - Enable centos8 in extra-ci.yml again
  - Enable centos7 in extra-ci.yml again
  - Enable opensuse-leap and gentoo in extra-ci.yml again
  - Run each test script individually on emulated targets
  - Try a different syntax for the emulated matrix jobs
  - Install s390 glibc headers on s390x fedora systems
  - Detect 32-bit and musl presence in test_elf.py
  - Skip lost -fPIC tests if gcc lacks -m32 support
  - Add stretch and buster to the emulated targets list
  - Drop Debian buster from the emulated targets
  - Install gcc-multilib only on Debian x86_64 and s390x systems
  - libc-dev:i386 -> libc6-dev:i386
  - Disable Debian targets in extra-ci temporarily
  - s/AUR/git/g in osdeps/arch/post.sh
  - In read_cfgfile(), keep track of block depth correctly (#329)
  - A few more yaml parsing fixes for block vs group
  - Recommend or Require libabigail >= 1.8.2
  - Finish normalizing all the error reporting statements
  - Advertise of rpminspect-report in the contrib README.
  - Report libclamav version and CVD versions (#258)
  - Ensure first argument of warn(3) is a format string.
  - Enable werror=true and warning_level=3 in default_options
  - Update the translation template file
  - Get rid of invalid free() in get_product_release()
  - Add inspection_id() to librpminspect
  - Update the po/rpminspect.pot template
  - Improve mkannounce.sh to handle stable and devel releases


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Begin work on version 1.5
  - Use llabs() instead of labs() in the filesize inspection
  - Improve has invalid execstack flags reporting
  - Use long unsigned int to report size changes in patches
  - Fix some errors in the changedfiles inspection
  - Update the changedfiles test cases
  - Check DT_SONAME in is_elf_shared_library()
  - Skip debuginfo and debugsource files in abidiff
  - Make sure abidiff test cases add a DT_SONAME to the test lib
  - Report INFO level for patches findings by default
  - Python black fixes in test/test_abidiff.py
  - Update the test/test_patches.py cases for patches changes
  - Generate regular changelog in utils/srpm.h
  - Skip branches without targets in submit-koji-builds.sh
  - Fedora and CentOS systems in ci need diffstat
  - opensuse-leap CI job requires diffstat
  - Fix the Debian CI jobs in GitHub Actions
  - Fix and enable the Ubuntu extra-ci job in GitHub Actions
  - Use pip instead of pip3 for the Ubuntu command
  - Use apt-get -y install in
  - Enable the opensuse-tumbleweed GHA job again
  - Make sure the Gentoo GHA job has diffstat
  - Get the Arch Linux GHA job working again
  - Use ubuntu:latest for the ubuntu GHA image
  - Simplify the utils/determine-os.sh script
  - Update license table in README.md
  - Allow any number of builds specified for fetch only mode
  - Handle old or broken versions of libmagic in changedfiles
  - Update GitHub Action status badges in README.md
  - Fix $(OS) check in the Makefile
  - Fix the ubuntu GitHub Actions extra-ci job
  - Make sure the centos8 job has git available before cloning
  - Change strappend() to work as a variadic function
  - Use json_tokener_parse_ex() to get better error reporting
  - Fix reading of the javabytecode block in the config file
  - Catch missing/losing -fPIC correctly on .a ELF objects (#352)
  - Refactor elf_archive_tests() and its helper functions
  - Followup fix for find_no_pic, find_pic, and find_all
  - Install cpp-coveralls using pacman on Arch Linux
  - Install cpp-coveralls using pip on Arch Linux
  - Install cpp-coveralls in pre.sh on Arch Linux
  - Install required Python modules in pre.sh on Arch Linux
  - Do not upgrade pip on Arch Linux, go back to using pip.txt
  - Drop DEBUG_PRINT from source generated by pic_bits.sh
  - Do not run apt-get update as a second time on Debians systems
  - The lost PIC tests need to invoke gcc with -fno-PIC
  - Update the OpenSUSE Tumbleweed files, but disable it anyway
  - Define inspection_ignores in struct rpminspect
  - Clean up the config file section reading code
  - Add add_ignore() to init.c
  - Fix fetch only mode download directory
  - Stub out libcurl download progress callback function
  - Perform symbolic owner and group matching in ownership (#364)
  - Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
  - Read per-inspection ignore lists from the config file.
  - Add commented out per-inspection ignore blocks
  - Implement per-inspection path ignore support (#351)
  - Report annocheck failures correctly in librpminspect.
  - Note all regular expression settings use regex(7) syntax
  - Allow size_threshold: info in the config file (#261)
  - Check ignore list in files for path prefixes to ignore (#360)
  - Support a list of expected empty RPMs in the config file (#355)
  - Call mparse_reset() before mparse_readfd()
  - Do not crash with the -c option specifies a non-existent file
  - Update TODO list
  - Make sure brp-compress is disabled in test_manpage.py
  - Require/Recommend /usr/bin/annocheck
  - Note size_threshold can be the keyword info
  - Ensure ctxt->lastError.message is not NULL before strdup (#382)
  - Handle corrupt compressed files in changedfiles (#382)
  - Disable debugging output for the ignore lists in init.c
  - Drop debugging output in the xml inspection
  - Remove what working directories we can
  - Correctly find icons for desktop files in subpackages (#367)
  - Followup to the Icon= check in the desktop inspection (#367)
  - BuildRequires libmandoc-devel >= 1.14.5
  - Manually install mandoc on centos7 for now


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 4.0-0.6.20170206git208bcba
changelog:
  - Add BuildRequires on gcc
  - Packaging updates
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Install license in licensedir
    - Use new ldconfig scriptlets macro


author: Juston Li <juston.li@intel.com> - 3.3-3
changelog:
  - Fix versioning, just use simple 3.3 version
  - Add comments for packages
  - Capitalize summary/description
  - use make_build macro
  - remove ldconfig for f28
  - remote defattr
  - remove redundent include header files
  - remote .la file


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-9
changelog:
  - allow spaces in user/group names (#2042408)
  - always write kernel policy when check_ext_changes is specified (#2089802)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Peter Jones <pjones@redhat.com> - 2.3.0-2
changelog:
  - Once again, don't complain about compilers newer than tested with in the
    public headers.
  - Fix up bad %global vs %define directives
  - Fix up bad old changelog dates
  - Note there's a missing changelog here from the 2.3.0 rebase


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.20-5
changelog:
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Devrim Gündüz <devrim@gunduz.org> - 5.0.0-beta0-1
changelog:
  - Initial EPEL 8 packaging, based on Fedora rawhide spec file (with
    rpmlint fixes, 5.0.0 update, patches and cosmetic updates)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Peter Fordham <peter.fordham@gmail.com> - 1.2.11-5.20210922git4915c308
changelog:
  - Add missing include of string.h for memset in spf_utils.c
    https://github.com/shevek/libspf2/issues/41


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.0-5
changelog:
  - Make dependency from -devel subpackage on main package arch-specific
  - Use %setup macro instead of %setup0
  - Remove obsolete %ldconfig_scriptlets, except for EPEL7
  - Use make macros
  - Do not remove the buildroot in %install
  - Remove static libraries directly with find rather than calling rm
  - Remove unnecessary README from -devel, since it is installed with the main
    package
  - Correctly use the %license macro
  - Use tighter file globs; in particular, per the packaging guidelines, specify
    the current so-version so that a version bump in an update will not be missed
    so easily
  - Switch URLs from HTTP to HTTPS
  - Add source file signature verification
  - Allow build to continue past string operation truncation warnings
  - Remove obsolete commented-out manual symlink command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.0-6
changelog:
  - Improve keyring generation instructions
  - Reflow description text
  - Whitespace changes according to personal preference
  - Add release summary files to documentation
  - Add %_hardened_build macro, which still matters on EPEL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.1-4
changelog:
  - Correction: .so version is “2.0”, not “2”
  - This is a spec file fix, and does not change the installed library


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Fixed CVE-2019-14889 (#1781782)
  - Fixed CVE-2020-1730 (#1802422)
  - Create missing directories in the path provided for known_hosts files (#1733914)
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config (#1821339)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-2
changelog:
  - Do not return error when server properly closed the channel (#1849071)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism
  - Rebase to version 0.9.6
  - Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
  - Resolves: rhbz#1896651, rhbz#1994600


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing 
    GHSL-2023-032 / CVE-2023-1667 
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2189968, rhbz#2189741


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing
    GHSL-2023-032 / CVE-2023-1667
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2182251, rhbz#2189742


author: Sahana Prasad <sahana@redhat.com> - 0.9.6-13
changelog:
  - Fix CVE-2023-48795: Prefix truncation attack
    on Binary Packet Protocol (BPP)
  - Resolves: RHEL-19311


author: Sahana Prasad <sahana@redhat.com> - 0.9.6-14
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Note: version is bumped from 12 to 14 directly, as the z-stream
    version in 8.9 also has 13. So bumping it to 14, will prevent
    upgrade conflicts.
  - Resolves:RHEL-19690, RHEL-17244, RHEL-19312


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism (#1978810)


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Paul Howarth <paul@city-fan.org> - 1.9.0-5
changelog:
  - Switch to https:// upstream URLs
  - Full groff (not just groff-base) needed for the mansyntax check


author: Paul Howarth <paul@city-fan.org> - 1.10.0-1
changelog:
  - Update to 1.10.0
    - Adds agent forwarding support
    - Adds OpenSSH Agent support on Windows
    - Adds ECDSA key support using the Mbed TLS backend
    - Adds ECDSA cert authentication
    - Adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
      diffie-hellman-group18-sha512 key exchanges
    - Adds support for PKIX key reading when using ed25519 with OpenSSL
    - Adds support for EWOULDBLOCK on VMS systems
    - Adds support for building with OpenSSL 3
    - Adds support for using FIPS mode in OpenSSL
    - Adds debug symbols when building with MSVC
    - Adds support for building on the 3DS
    - Adds unicode build support on Windows
    - Restores os400 building
    - Increases min, max and opt Diffie Hellman group values
    - Improves portability of the make file
    - Improves timeout behaviour with 2FA keyboard auth
    - Various improvements to the Wincng backend
    - Fixes reading partial packet replies when using an agent
    - Fixes Diffie Hellman key exchange on Windows 1903+ builds
    - Fixes building tests with older versions of OpenSSL
    - Fixes possible multiple definition warnings
    - Fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
    - Fixes potential use after free if libssh2_init() is called twice
    - Improved linking when using Mbed TLS
    - Fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
    - Fixes crash when loading public keys with no id
    - Fixes possible out of bounds read when exchanging keys
    - Fixes possible out of bounds read when reading packets
    - Fixes possible out of bounds read when opening an X11 connection
    - Fixes possible out of bounds read when ecdh host keys
    - Fixes possible hang when trying to read a disconnected socket
    - Fixes a crash when using the delayed compression option
    - Fixes read error with large known host entries
    - Fixes various warnings
    - Fixes various small memory leaks
    - Improved error handling, various detailed errors will now be reported
    - Builds are now using OSS-Fuzz
    - Builds now use autoreconf instead of a custom build script
    - cmake now respects install directory
    - Improved CI backend
    - Updated HACKING-CRYPTO documentation
    - Use markdown file extensions
    - Improved unit tests


author: David Tardon <dtardon@redhat.com> - 0.0.3-3
changelog:
  - Resolves: rhbz#1458800 CVE-2017-9432 Stack-buffer overflow in the
    StarWriterStruct::DatabaseName::read


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Phil Wyett <philwyett@kathenas.org> - 1.0.3-1
changelog:
  - Use %autosetup.
  - Use %exclude rather than rm for static lib files.
  - Clean-ups and small lib need not wildcard for one file in a folder etc.
  - Update to 1.0.3.


author: Matthieu Saulnier <fantom@fedoraproject.org> - 0.13.0-1
changelog:
  - Update to 0.13.0
  - Remove tests suite from devel subpackage
  - Enable code coverage report
  - Cleanup %check section


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.21-6
changelog:
  - Python 2 binary package renamed to python2-libsvm
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ding-Yi Chen <dchen@redhat.com> - 3.23-1
changelog:
  - Upstream update to 3.23
    + add more digits of predicted file, model file, scaled data and data
      from matlab libsvmwrite: to .17g
    + svm-toy-gtk is no longer supported
    + Dependency qt is updated to qt5
  - probability output:
    + if 2 classes, directly output the predited probabilities
      rather than run the iterative algorithms for multi-class situations
  - java:
    + libsvm.jar generated by java 1.7 rather than 1.5
    + change the use of "_" in svm.java, which won't be allowed in later java
  - python:
    + split to python2 and python3


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - New upstream release - 2.1.14
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.16-1
changelog:
  - New upstream release 1.3.16
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 until libtalloc uses waf3
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Xin Long <lxin@redhat.com> - 1.28-2
changelog:
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1668132]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path [1687336]
  - teamd: remove port if adding fails [1668744]


author: Xin Long <lxin@redhat.com> - 1.28-3
changelog:
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set [1722449]
  - teamd: improve the error output for non-integer port prio


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732587]
  - 1.29 release
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1767685]
  - libteam: set netlink event socket as non-blocking [1684389]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758073]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073]


author: Xin Long <lxin@redhat.com> - 1.31-1
changelog:
  - 1.31 release
  - utils/bond2team: remove TYPE in ifcfg file [1858518]
  - utils/bond2team: keep delivering config to file if stdout not supplied [1858518]
  - teamd/lacp: silence ignore none LACP frames
  - Send LACP PDU right after the Actor state has been changed
  - Skip setting the same hwaddr to a lag port if not needed
  - Make all netlink socket RCVBUF sizes configurable
  - Don't return an error when timerfd socket return 0
  - Fix ifinfo_link_with_port race condition with newlink
  - teamd: fix possible race in master ifname callback
  - 1.30 release
  - teamd: Disregard current state when considering port enablement [1851460]


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.37-1
changelog:
  - New upstream release 0.9.37
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 for build
  - Use %{__python2}, not "python", as the Python2 interpreter


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Nikola Forró <nforro@redhat.com> - 4.0.9-19
changelog:
  - Fix CVE-2020-35521 (#1945539)
  - Fix CVE-2020-35522 (#1945555)
  - Fix CVE-2020-35523 (#1945542)
  - Fix CVE-2020-35524 (#1945546)


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-23
changelog:
  - Fix various CVEs
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: RHEL-5075 RHEL-5078 RHEL-5079 RHEL-5080 RHEL-5081


author: Matej Mužila <mmuzila@redhat.com> - 4.0.9-29
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
  - Resolves: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: Ondrej Sloup <osloup@redhat.com> - 4.0.9-30
changelog:
  - Bump specfile to retrigger gating
  - Add tests folder for standard beakerlib
  - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - blacklist: Add a few more well known ports (bz 1854147)
  - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866)


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650)
  - Multithreaded cleanup (bz 2112116)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Conrad Meyer <cemeyer@uw.edu> - 0.13.7-1
changelog:
  - Bump to latest upstream release (rhbz# 1588472)
  - Upstream failed to include the OpenSSL 1.1 patch in this release, but it may
    be included in master for the next release:
    https://github.com/rakshasa/libtorrent/issues/171
    So, we must retain the patch for now.


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Dennis Gilmore <dennis@ausil.us> - 1.8.3-4
changelog:
  - pull in patch from upstream so that samples will build on 32 bit arches with
  - largefile support, enables gerbera to run on armv7hl and i686


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Revert the ABI bump since it's the same as 1.8.3
  - Add back patch for largefile support


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-14
changelog:
  - Do not build python2-libuser at all in RHEL-8
  - Resolves: #1559103 - libuser: Drop Python 2 subpackage(s) from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-16
changelog:
  - Use 2048bit keys in tests
  - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.1-5
changelog:
  - Introduce doc-subpackage
  - Use unified %_pkgdocdir
  - Updated Patch0 and use on el <= 6, only
  - Rename Patch0 --> Patch 1000
  - Clean-up indentation


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-28
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1860421)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-29
changelog:
  - qemu: substitute missing model name for host-passthrough (rhbz#1850680)
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
  - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
  - check for NULL before calling g_regex_unref (rhbz#1861176)
  - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
  - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
  - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
  - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
  - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
  - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-30
changelog:
  - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing AMD SVM features (rhbz#1861506)
  - Add testdata for AMD EPYC 7502 (rhbz#1861506)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
  - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
  - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
  - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
  - numa_conf: Drop CPU from name of two functions (rhbz#1749518)
  - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
  - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
  - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
  - Allow NUMA nodes without vCPUs (rhbz#1749518)
  - conf: Parse and format HMAT (rhbz#1749518)
  - conf: Validate NUMA HMAT configuration (rhbz#1749518)
  - numa: expose HMAT APIs (rhbz#1749518)
  - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
  - qemu: Build HMAT command line (rhbz#1749518)
  - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-31
changelog:
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
  - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-32
changelog:
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-33
changelog:
  - cpu_map: Fix Icelake Server model number (rhbz#1537734)
  - cputestdata: Add test data for Snowridge (rhbz#1537734)
  - cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
  - cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
  - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
  - cpu_map: Define and enable Snowridge model (rhbz#1537734)
  - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
  - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
  - network: be more verbose about the reason for a firewall reload (rhbz#1607929)
  - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
  - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
  - util: call iptables directly rather than via firewalld (rhbz#1607929)
  - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-34
changelog:
  - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
  - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroup: fix cpu quota maximum limit (rhbz#1915733)
  - util: add virNetDevGetPhysPortName (rhbz#1918708)
  - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
  - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35
changelog:
  - vircgroupv2: properly detect placement of running VM (rhbz#1798463)
  - virsystemd: export virSystemdHasMachined (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
  - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
  - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
  - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
  - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
  - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
  - tests: add cgroup nested tests (rhbz#1798463)
  - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
  - qemu: Add virtio related options to vsock (rhbz#1931548)
  - domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
  - docs: use proper cpu quota value in our documentation (rhbz#1798463)
  - vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
  - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
  - cpumap: Add support for ibrs CPU feature (rhbz#1926864)
  - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
  - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
  - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
  - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-36
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
  - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
  - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
  - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562)
  - docs: improve description of secure attribute for loader element (rhbz#1929357)
  - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
  - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
  - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
  - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
  - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357)
  - conf: remove duplicated firmware type attribute (rhbz#1929357)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37
changelog:
  - security: fix SELinux label generation logic (CVE-2021-3631)
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)


author: Fabiano Fidêncio <fidencio@redhat.com> 3.0.0-1
changelog:
  - Update to 3.0.0 release
  - Resolves: rhbz#1754396 - Provide support for getting "firmwares" info from Domain Capabilities
  - Resolves: rhbz#1753670 - Enable bochs-display for UEFI guests (libvirt-glib)


author: David Tardon <dtardon@redhat.com> - 0.1.5-5
changelog:
  - fix char background color in some cases
  - fix handling of bitmaps in Windows Bitmap format that contain a color
    palette


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-8
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "8" to accommodate the 8.7.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.0.0-9
changelog:
  - Bump the release to "9" to accommodate the 9.1.0.z release bumps as
    libwebp-1.0.0-8.el9 < libwebp-1.0.0-8.el8_7


author: Caolán McNamara <caolanm@redhat.com> - 0.2.9-1
changelog:
  - Resolves: rhbz#1602602 new version with covscan warnings fixed
  - all cve fixes merged to that new upstream


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: David King <dking@redhat.com> - 2.9.7-10
changelog:
  - Fix CVE-2021-3516 (#1956976)
  - Fix CVE-2021-3517 (#1957001)
  - Fix CVE-2021-3518 (#1957028)
  - Fix CVE-2021-3537 (#1957284)


author: David King <dking@redhat.com> - 2.9.7-9.1
changelog:
  - Fix CVE-2021-3516 (#1956975)
  - Fix CVE-2021-3517 (#1957000)
  - Fix CVE-2021-3518 (#1957027)
  - Fix CVE-2021-3537 (#1957283)


author: Dominik Mierzejewski <rpm@greysector.net> 4.4.1-7
changelog:
  - add BR: gcc for https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
  - drop redundant ldconfig scriptlets and use make_install macro


author: Dave love <loveshack@fedoraproject.org> - 1.15-1
changelog:
  - New version
  - Drop _legacy_common_support
  - Remove installed modules file
  - Fix cleanup in %check
  - Define OMPLIB for backport to EL7


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-3
changelog:
  - add support for active-backup team interface (#1685467)
  - add support for more accurate synchronization to phc2sys (#1677217)
  - add hwts_filter option to ptp4l (#1708554)
  - limit unicast message rate per address and grant duration (#1707395)
  - fix comparing of unicast addresses (#1707395)
  - fix building with new kernel headers (#1707395)
  - update testsuite (#1707395)
  - don't leak memory when allocation fails (#1707395)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-21326 RHEL-21328 RHEL-21329)
  - fix ts2phc to handle large NMEA delay (RHEL-23278)
  - fix loading and reloading of leapfile


author: Alec Leamas <leamas.alec@gmail.com> - 0.10.0-19
changelog:
  - Fix FTBS on python 3.8. Closes: #1718285.
  - mode2: Fix inconsistent loglevel/debug option (upstream #307)
  - plugins: devinput: fix glob "no match" error (upstream #285, DBS 860551)


author: Neal Gompa <ngompa13@gmail.com> - 1:28.2-1
changelog:
  - Release 28.2 (ngompa13)
  - rearrange xorrisofs options to make image efi bootable (sobjerke)
  - place efiboot.img and macboot.img in /isolinux (sobjerke)
  - Remove duplicate sentence (35056002+BessieTheCookie)


author: Neal Gompa <ngompa13@gmail.com> - 1:28.3-1
changelog:
  - Release 28.3 (ngompa13)
  - imgcreate/live: Make EFI packages optional for x86 (ngompa13)
  - Fix missync of locations of efiboot.img (m.novosyolov)
  - mkdir isolinux on aarch64 (m.novosyolov)
  - Fix check if EFI bootloader exists (m.novosyolov)


author: Neal Gompa <ngompa@fedoraproject.org> - 1:29.0-1
changelog:
  - Release 29.0 (ngompa13)
  - Makefile: Drop creating signed tags (ngompa13)
  - Preload the libnss_systemd library (#2007045) (sergey)
  - livecd-iso-to-disk, editliveos: Add option to skip macboot.img processing.
    (fgrose)
  - Copy 'unicode.pf2' from correct path (zhanggyb)
  - editliveos: Refresh vmlinuz & initrd.img files upon kernel updates. (fgrose)
  - livecd-iso-to-disk & editliveos: Preserve extra-kernel-args from source.
    (fgrose)
  - add livenet dracut module to allow for pxe boot (sobjerke)
  - switch from authconfig to authselect (pbrezina)
  - live.py: Support either /images or /isolinux directories for efi images.
    (fgrose)
  - livecd-iso-to-disk & editliveos: Expand partitioning & filesystem support
    (fgrose)
  - make live image the default boot option (sobjerke)
  - Modernize detection of checkisomd5 (m.novosyolov)


author: Neal Gompa <ngompa@fedoraproject.org> - 1:30.0-1
changelog:
  - Release 30.0 (ngompa13)
  - imgcreate/fs.py: abort on hard-unmount failure (lersek)
  - imgcreate/util: Fix errors import (T-vK) (#2078710)


author: Neal Gompa <ngompa@fedoraproject.org> - 1:31.0-1
changelog:
  - Release 31.0 (neal)
  - imgcreate/creator.py: fix SELinux unmount order (3526918+cbs228)
  - livecd-iso-to-disk: Remove useless test to fix issue #237 (fgrose)
  - imgcreate/kickstart.py: correct setfiles relabeling (3526918+cbs228)
  - fs.py:  Avoid bind mounting an existing file target. (fgrose)


author: Xin Long <lxin@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.


author: Aaron Conole <aconole@redhat.com> - 1.0.1-14.git036e314
changelog:
  - Update to branch-1.1 compatibility
  - Fixes to avoid assert in the agent state machine
  - Remove the memory constraint on the event socket buffer (#1554110)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.6-2
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Tom Stellard <tstellar@redhat.com> - 5.0.1-2
changelog:
  - Work-around LLVMHello.so link failures caused by LD_FLAGS="-Wl,-z,defs"
  - https://bugzilla.redhat.com/show_bug.cgi?id=1538318


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-21.20180522git70f7e08
changelog:
  - Fix printing CPU info on non-x86 architectures in sensors-detect
  - Resolves: rhbz#1752854
  - Fix printing lm_sensors version in sensors-detect and pwmconfig
  - Resolves: rhbz#1677414


author: Artem Egorenkov <aegorenk@redhat.com> - 3.4.0-23
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Carl George <carl@george.computer> - 0.9.24-1
changelog:
  - Convert RHEL8 lmdb to lmdb-epel, with all subpackages except lmdb-libs
  - Related: rhbz#1833564
  - Related: rhbz#1972979


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-0.27.20111007git
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Till Hofmann <till.hofmann@posteo.de> - 0.10.0-22
changelog:
  - Fix missing isa in devel's Requires:
  - Remove unused shlib dependencies
  - Do not build static libs


author: Timotheus Pokorra <timotheus.pokorra@solidcharity.com> - 2.0.8-8
changelog:
  - Rebuilt with new mono package so that the Provides is fixed again
  - don't require nant for building


author: Kamil Dudka <kdudka@redhat.com> - 3.14.0-3
changelog:
  - fix programming mistakes detected by Coverity Analysis
  - document the --version option in the logrotate(8) man page (#1611498)


author: Kamil Dudka <kdudka@redhat.com> - 3.14.0-4
changelog:
  - logrotate.8: encourage admins to use the `su` directive (#1759770)
  - do not abort globbing on broken symlink (#1723265)


author: Pravin Satpute <psatpute@redhat.com> - 2.91.5-1
changelog:
  - Upstream new release 2.91.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Upstream new release with critical bugfixes.
  - Resolves #1170135 Conjuncts rendering issue for some glyphs


author: Pravin Satpute <psatpute@redhat.com> - 2.91.4-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423901 - FTBFS in rawhide.
  - Migrated upstream from fedorahosted to pagure.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.1-1
changelog:
  - Upstream release 2.95.1
  - Update U+0960 shape as per patch from Shriramana Sharma. #1113968
  - Changed hex id of i-matra (65514...65528,65531 65533) to 65537 onwards


author: Pravin Satpute <psatpute@redhat.com> - 2.95.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423902 - FTBFS in rawhide.
  - Migrated from fedorahosted to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.95.4-1
changelog:
  - Upstream new release 2.95.4
  - Update metainfo file and fixing minor fixes
  - Removed patch, installing 59-lohit-devanagari.conf.
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.92.3-1
changelog:
  - Added  BuildRequires: python2-devel.
  - Resolves: #1423903 - FTBFS in rawhide
  - Migrated from Fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423904 - FTBFS in rawhide.
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Upstream new release 2.91.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream new release 2.5.4
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo
  - Removed patch already included in upstream


author: Pravin Satpute <psatpute@redhat.com> - 2.92.0-1
changelog:
  - Upstream release 2.92.0
  - Further removal 12 not required glyphs from fonts.
  - Added reference of glyph instead of full glyphs points wherever possible.
  - Resolved 10 issues reported on github: #35,#36,#37,#38,.#39,#40.#41,#42,#43,#44.
  - More test cases in test file
  - Renamed Anchor to MLAnchor


author: Pravin Satpute <psatpute@redhat.com> - 2.92.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423905 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.92.2-1
changelog:
  - Upstream new release 2.92.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Parag Nemade <pnemade AT redhat DOT com> - 2.94.0-7
changelog:
  - Fix the apply_featurefile.py to use fontforge python3 module
  - use %license
  - Drop obsolete Group tag


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Upstream new release 2.94.1 with python3 support.
  - Resolves: #1423906 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.94.2-1
changelog:
  - Upstream new release 2.94.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.94.0-1
changelog:
  - Upstream release 2.94.0
  - Positioning lookup clean-up.
  - Improved grid fitting(GASP) table.
  - Renamed anchors to DVAnchor.
  - Using glyph reference (copy reference) instead of whole glyph points.
  - Auto test integrated with Makefile ($make test).
  - Resolved #32: "सर्व्हिस does not render correctly"
  - Resolved #33: "improper rendering for word : "मञ्यांच्या""


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423907 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Updated with upstream release 2.91.0
  - First release of Lohit Odia after re-writing GSUB rules.
  - Open type rules are available in .fea file for easy reusability.
  - Feature file compiled with AFDKO.
  - Supports orya and ory2 both.
  - Developer friendly glyphs names with AGL syntax format.
  - Corrected glyph class for all glyphs. 
  - Improved shape of ka-viramasignodia-taodia.
  - Added Glyph positioning rules for below based matra.
  - Test file available with release tarball.
  - Auto testing support with harfbuzz hb-shape.
  - Tested with Harfbuzz and Uniscribe (W8 and XP)
  - Corrected feature rules for conjucts ଖ୍ର ଗ୍ର କ୍ଷ୍ଯ


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423908 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Resolves 1152203 :- Upstream release 2.91.0
  - Rewritten all Open type tables with supporting taml and tml2 tags.
  - Renamed all the glyphs by following AGL syntax.
  - Open type tables are available in .fea file and this time it is compiled with AFDKO.
  - Reusing glyphs by "COPY REFERENCE"
  - Added GRID FITTING table and auto-hinting by fontforge.
  - Tested with Harfbuzz NG and Uniscribe (W8).
  - Auto test module available with test files.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream release 2.5.4
  - Added support for Unicode 8.0 characters U0C00, U0C34 and U0C5A
  - Added support for Latin characters
  - Using TTFAUTOHINT now while building ttf file.
  - Resolves #985343, #1229213 and #1258123.


author: Pravin Satpute <psatpute@redhat.com> - 2.5.5-1
changelog:
  - Upstream new release 2.5.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Brian C. Lane <bcl@redhat.com> - 8.6-3
changelog:
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035050
  - Revert "Drop ia32 uefi package installation" (bcl)
    Related: rhbz#2035050


author: Brian C. Lane <bcl@redhat.com> - 8.10-1
changelog:
  - Makefile: Bump the release version to 8.10 (bcl)
    Related: RHEL-24418
  - Restore missing ppc files (bcl)
    Resolves: RHEL-24619


author: Brian C. Lane <bcl@redhat.com> - 8.2-6
changelog:
  - Restore the 98dracut-systemd service files to the install.img (bcl)
    Related: rhbz#1805405
  - Add eject back into the boot.iso (bcl)
    Resolves: rhbz#1805405


author: Brian C. Lane <bcl@redhat.com> - 8.4-2
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Resolves: rhbz#1892404
  - Remove mdmonitor service from boot.iso (bcl)
    Resolves: rhbz#1888728


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Jan Rybar <jrybar@redhat.com> - 4.93.2-1
changelog:
  - Rebase to lsof-4.93.2
  - Upstream moved to GitHub (original unreachable) and tarball structure changed
  - Manpage patch needed to reflect the tarball changes
  - Resolves: rhbz#1778228


author: Tomas Bzatek <tbzatek@redhat.com> - 0.32-1
changelog:
  - Upgrade to 0.32 upstream snapshot (#1855766)
  - Fix NVMe device parsing (#1687841, #1845977)
  - Fix WWN string reporting (#1846559)
  - Implement SCSI identifier sort priority (#1846566)


author: Scott K Logan <logans@cottsay.net> - 2.8.8-1
changelog:
  - New upstream release
  - Add python subpackage
  - Align spec format with rawhide to facilitate maintenance


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Tomas Krizek <tomas.krizek@nic.cz> - 20190805-1
changelog:
  - New upstream release https://github.com/wahern/luaossl/releases/tag/rel-20190731
  - Use more portable way of passing build flags


author: Andreas Schneider <asn@redhat.com> - 1.41.0.0-1
changelog:
  - Update to version 1.41.0
    * https://github.com/luvit/luv/releases/tag/1.41.0-0
    * https://github.com/luvit/luv/releases/tag/1.40.0-0


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.41.0.0-3
changelog:
  - use macros from lua-{s,}rpm-macros; spec now portable across Lua versions
  - reenable s390x build on epel8 (#1829151)


author: Andreas Schneider <asn@redhat.com> - 1.42.0.0-1
changelog:
  - Update to version 1.42.0.1
    * https://github.com/luvit/luv/releases/tag/1.42.0-1
    * https://github.com/luvit/luv/releases/tag/1.42.0-0
  - Do not build luajit on s390x and ppc64


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.42.0.1-3
changelog:
  - Adjust for cmake 3.23.0, where -S (passed by %cmake) overrides the positional argument
  - Disable UDP multicast tests unconditionally, seems flaky
  - Disable luajit threadpool tests on EPEL 8 aarch64


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Tomas Krizek <tomas.krizek@nic.cz> - 1.0.2-4
changelog:
  - Bring the package to F28+ for compat-lua
  - Unify spec for Fedora and EPEL
  - Remove obsolete Group tag


author: Siddhesh Poyarekar <sid@reserved-bit.com> - 2.1.0-0.10beta3
changelog:
  - Add upstream bug fixes from the v2.1 branch.
  - Add bug fixes from https://github.com/siddhesh/LuaJIT.git
  - Incorporate tests and benchmarks from LuaJIT-test-cleanup.


author: Siddhesh Poyarekar <sid@reserved-bit.com> - 2.1.0-0.13beta3
changelog:
  - arm: Fix up condition codes for conditional arithmetic insn.
  - bugfix: fixed a segfault when unsinking 64-bit pointers.
  - Remove setrlimit on FreeBSD.
  - test: Check for package.searchers only in compat5.2.


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.0.0-1
changelog:
  - Update to 3.0.0.
  - Language bindings are separate projects now.
  - Update spec file and remove obsolete constructs.


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.17.dev16
changelog:
  - fix rpmlint warnings
  - do not depend on perl
  - update upstream project URL
  - update to the latest upstream pre-release


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Robert Scheck <robert@fedoraproject.org> - 1.03-13
changelog:
  - Added patch by Khem Raj to use static inlines as the external
    inline definition has changed with GCC 5 (to fix ppc64 builds)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-7
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes. (#1589769)
  - Fix testing failure due to Perl changes related to expanding paths.


author: Dridi Boukelmoune <dridi.boukelmoune@gmail.com> - 2.3.0-1
changelog:
  - Bump version to 2.3.0
  - Update the URL
  - Rename the patch
  - Use more macros
  - Require iconv
  - Install the LSM file


author: Dridi Boukelmoune <dridi.boukelmoune@gmail.com> - 2.4.0-1
changelog:
  - Bump version to 2.4.0
  - Change the Source URL to get %{name}-%{version}.tar.gz
  - Ship the script as makeself.sh as per upstream documentation
  - Add a symbolic link to the previous script name (just makeself)


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.0-3
changelog:
  - -qt5: move libmaliit-plugins, private qt5 deps, here
  - drop explicit BR: make (pulled in by cmake)
  - %files: minor cleanup


author: Rex Dieter <rdieter@fedoraproject.org> - 2.0.0-3
changelog:
  - fix %files ownership
  - drop explicit BR: make (already pulled in by cmake)
  - drop needless ldconfig scriptlet


author: Nikola Forró <nforro@redhat.com> - 2.7.6.1-18
changelog:
  - schedule interrupted cache update for the next boot, instead of blocking
    system reboot/shutdown
    resolves #1874010


author: Nikola Forró <nforro@redhat.com> - 4.15-7
changelog:
  - remove rpc.3 and xdr.3 man pages documenting deprecated glibc RPC implementation
    resolves: #1980919


author: Nikola Forró <nforro@redhat.com> - 8.2.0.0-1
changelog:
  - Upload new tarball
  - kernel_lockdown.7: add new manpage
    resolves: #1781945
  - copy_file_range.2: update ERRORS
    resolves: #1673142


author: Nikola Forró <nforro@redhat.com> - 8.3.0.0-1
changelog:
  - Upload new tarball
  - Use unversioned docdir
    resolves: #1824824
  - xattr.7: add attr(1) as a relevant page to SEE ALSO
    resolves: #1828296
  - execve.2: clarify signal sent to the process on late failure
    resolves: #1829031


author: Nikola Forró <nforro@redhat.com> - 8.5.0.0-1
changelog:
  - Upload new tarball
  - statx.2: add STATX_ATTR_DAX
    resolves: #1899552
  - resolv.conf.5: update information about search list and
    attempt to clarify domain/search interaction
    resolves: #1928160


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.6-22.g
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.2-1
changelog:
  - update to 1.26.2
  - Add setting to raise windows on alt+tab popup
  - add https://github.com/mate-desktop/marco/commit/d83cb24


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.23-1
changelog:
  - Rebase to 10.3.23
  - Make conflicts between corresponding mariadb and mysql packages explicit
  - Get rid of the Conflicts macro, it was intended to mark conflicts with
    *upstream* packages
    Resolves: #1853159


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-1
changelog:
  - Rebase to 10.3.27
  - mariadb-debug_build.patch is no more needed, upstream did the changes:
    https://github.com/MariaDB/server/commit/31eaa2029f3c2a4f8e5609ce8b87682286238d9a#diff-32766783af7cac683980224d63c59929
    https://github.com/MariaDB/server/commit/23c6fb3e6231b8939331e2d9f157092f24ed8f4f#diff-78f3162f137407db5240950beb2bcd7c


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-2
changelog:
  - Disable building of the ed25519 client plugin.
    From now on it will be shipped by 'mariadb-connector-c' package


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.27-3
changelog:
  - Remove mariadb_rpl.h from includedir
    This file is shipped in mariadb-connector-c package
  - Require matching version of mariadb-connector-c package


author: Michal Schorm <mschorm@redhat.com> - 3.0.8-2
changelog:
  - Add "zlib-devel" requirement in "-devel" subpackage. MariaDB requires
    linking with "-lz", which will fail without the zlib library
  - Resolves: #1710471


author: Michal Schorm <mschorm@redhat.com> - 3.0.10-1
changelog:
  - Rebase to 3.0.10
  - Use macro for tarball name
  - Use macro to set build flags
  - Use macros for make commands
  - Remove the scriptlets non relevant for RHEL-8
  - Add info for the testsuite execution
  - Remove glob from library version
  - Remove info about the upstream issues


author: Michal Schorm <mschorm@redhat.com> - 3.1.2-1
changelog:
  - Rebase to 3.1.2
  - Introducing ED25519 plugin
  - Plugindir issues (from 3.0.9 release) fixed by upstream
    Resolves: #1691176


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.9-1
changelog:
  - Rebase to 3.1.9
  - Overlinking issues fixed by upstream in 3.1.3 release
  - Add explicit confict between mariadb-connector-c-devel and mysql-devel packages


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.1.11-1
changelog:
  - Rebase to 3.1.11
  - Add updates for paths in libraries_include_path.patch
  - Patch add_docs_license_dir_option upstreamed


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Retain compatibility with jna4
  - Adjust pom.xml, so that the rpm Requires jna and jna-platform
    Resolves: #2043212


author: Zuzana Miklankova <zmiklank@redhat.com> - 2.7.1-2
changelog:
  - autogenerate the Requires only for jna, not jna-platform
  - change required version of jna-platform to 'any' in pom.xml
    Resolves: #2089627


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-27
changelog:
  - Correct the conditional builds for fedora and rhel
  - Remove Group tag as its no longer needed
  - added %license macro for license files
  - Correct the license tag
  - Added fileslists more verbose for subpackages


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - obsolete mate-desktop-systemd (fedora)
  - use earlyoom instead of systemd-oomd-defaults (fedora)
  - make earlyoom uninstallable (fedora)
  - use earlyoom instead of systemd-oomd-defaults (fedora)
  - fixes rhbz (#2068699) (fedora)
  - add subpackage mate-desktop-configs
  - install 80-mate-compiz.preset (fedora)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-menus/pull/77
  - fix icons in panel menu with pt and pt_BR locale
  - fix rhbz (#1808522)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - Fix segfault from gdk_x11_get_server_time if not on X11
  - don't build with appindicator support for the moment
  - intial build for epel8


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - use https://github.com/mate-desktop/mate-screensaver/commit/ec813df
  - use https://github.com/mate-desktop/mate-screensaver/pull/262
  - fix rhbz (#1997852)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.1-1
changelog:
  - update to  1.26.1
  - add a few upstream commits from 1.26 branch
  - lower glib2 requirements for epel8


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-terminal/commit/2030aa2
  - use https://github.com/mate-desktop/mate-terminal/pull/327
  - use https://github.com/mate-desktop/mate-terminal/pull/322
  - use https://github.com/mate-desktop/mate-terminal/commit/c317ee8
  - use https://github.com/mate-desktop/mate-terminal/pull/332


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-1
changelog:
  - updated to 4.8.19
  - drop use slang and use ncurses. There are only few packages which are using
    slang. As ncurses support is fully working now it makes more sense to
    use it instead slang (Solaris 11.3 mc uses now ncurses)
  - instead passing -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE to CFLAGS use
    --enable-largefile autoconf param
  - removed Group, BuildRoot and %clear (new packaging policy)
  - added pkgconfig to BuildRequires
  - replaced groff by groff-base in BuildRequires (only nfroff is used)
  - use %autosetup in %prep
  - added using %{make_build} and %{make_build} macros
  - "rm -rf $RPM_BUILD_ROOT" on beginning %install is no longer needed
  - mcfs is no longer supported (removed --enable-vfs-mcfs autoconf option)
  - added explicit enabled other VFSesess to force necessary checks


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:4.8.19-2
changelog:
  - go back to slang as it is serious issue with shift-f6 when ncurses is used
    displaying "Delete" instead "Move As" dialog (#1436394)
  - added slang %bcond to simplify experiments with switching to ncurses
  - reformat %description to 80 cols
  - really remove Group
  - %defattr() is no longer needed
  - simplifications in %files
  - use %{buildroot} macro
  - build --with-x (it does not add X11 libraries dependencies)
  - cons.saver no longer need to be 711 (changed to 755)


author: Prarit Bhargava <prarit@redhat.com> - 3:160-1
changelog:
  - Deduce channel number for Haswell/Broadwell/Skylake systems [1641046]
  - Add decoding for Optane DC persistent memory mode [1645344]


author: Prarit Bhargava <prarit@redhat.com> - 3:173-0
changelog:
  - Update to v173
  - adds support for Tigerlake, Rocketlake, Alderlake, Lakefield
  - adds support for CometLake, Icelake server, Icelake-D, and Snow Ridge


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-2
changelog:
  - Revert "mcstransd select correct colour range." (#1731451)
  - Fix mcstrans secolor examples (#1731451)


author: Xiao Ni <xni@redhat.com> - 4.2-6
changelog:
  - Keep udev rule close to upstream and update to latest upstream
  - Resolves rhbz#1991596, rhbz#2129088, rhbz#2107150


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest to upstream to fix some bugs
  - Resolves rhbz#2149307, rhbz#2149473, rhbz#2151208, rhbz#2127096


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2116418, rhbz#2150862, rhbz#2159584


author: Xiao Ni <xni@redhat.com> - 4.1.12
changelog:
  - Update mdadm to latest upstream && change tmpfiles directory && correct changelog date
  - Resolves rhbz#1800521 and rhbz#1657265


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Simone Caronni <negativo17@gmail.com> - 2.2-12.20181216git292193b
changelog:
  - Rebuild for updated FreeRDP.
  - Fix for "warning: extra tokens at the end of endif directive in line 34".


author: Artem Polishchuk <ego.cordatus@gmail.com> - 0.5-2
changelog:
  - build: drop 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd 
   macros
  - build: drop custom patch in favour of sed


author: Rafael Aquini <aquini@redhat.com> - 1.10.0-1
changelog:
  - Update to memkind source file to 1.10.0 upstream (1780394)
  - add Tier1 tests for CI gating (1688933)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-14
changelog:
  - Removed some spec artifacts (like buildroot cleaning)
  - Fixed malformed "Loading" banner
  - Not relocating memtest86+ above 1 MB
    Related: rhbz#1303804
  - Introduced new configuration file (/etc/memtest86+.conf)
  - Introduced new memtest-setup switches for selecting ELF/non-ELF versions
    Resolves: rhbz#1303804


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 0.55.3-3
changelog:
  - build: use PIE objects for static libraries
    Resolves: rhbz#1899620
    (meson builds QEMU with PIC objects instead of PIE)


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20200215-1
changelog:
  - upgrade to 20200215 (RHBZ#1803396)
  - remove _legacy_common_support workaround for https://github.com/hboetes/mg/issues/12


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-3
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220204-1
changelog:
  - Update Intel CPU microcode to microcode-20220204 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#1971906, #2049543,
      - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086743):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115667):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230214-1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171234,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213125):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213125, #2223993, #2230678,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2.20231009.1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583 (RHEL-3684):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Fix: do not download metadata in remove command
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - [repolist] Print padding spaces only if output is terminal


author: Nicola Sella <nsella@redhat.com> - 3.4.0-3
changelog:
  - Patch: Add support for setting a platform module ID
  - Rename "update" command to "upgrade", "update" remain as compatibility alias


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Don't set default value of "assumeyes" to TRUE
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Add commands: distro-sync, makecache
  - Add subcommands support
  - Add support for command aliases
  - Added alias "update" to "upgrade" command
  - Relicense to GPLv2+
  - Add support for setting allow_vendor_change
  - [download] Support for "--resolve", "--alldeps" and "--archlist=" arguments
  - [download] several optimizations
  - Support "--setopt=keepcache=0/1"
  - Extend "--setopt" to support repository options


author: Paul Howarth <paul@city-fan.org> - 4.6.2-9
changelog:
  - Make run/milter-greylist directory owned by root to avoid need for
    dac_override (#1678038)
  - BR: systemd rather than systemd-units for %{_unitdir} macro
  - Use %{_initddir} rather than the deprecated %{_initrddir}
  - Improve readability by not using full paths for scriptlet commands
  - Drop EL-5 support
    - Nothing needs libbind now
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 2.1-1
changelog:
  - Update to 2.1
    - Default maximum log level to 6 (LOG_INFO), i.e. exclude LOG_DEBUG
  - Upstream switched from benezedrine.cx to bezendrine.ch


author: Paul Howarth <paul@city-fan.org> - 2.4-1
changelog:
  - Update to 2.4
    - Bug fix: for actions followed by multiple expressions (not just one
      arbitrarily complex expression), when multiple expressions become defined
      during the same sequence point, but with different values (e.g. one true,
      another false), depending on the expression order, the action might not be
      taken, when it should be
    - Add -f option to set syslog facility


author: Paul Howarth <paul@city-fan.org> - 2.6-1
changelog:
  - Update to 2.6
    - Treat socket file name without prefix like local file
    - Make pid file writeable only by root


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 101-1
changelog:
  - Update config.{guess,sub} in %mingw_configure (#1288256)
  - Regenerated list of default win32 DLL's


author: Uri Lublin <uril@redhat.com> - 2.4.8-1
changelog:
  - Update to 2.4.8 and pick up CVEs fixes
  - Resolves: rhbz#2050504 CVE-2022-23990
  - Resolves: rhbz#2057023 CVE-2022-25236
  - Resolves: rhbz#2057037 CVE-2022-25235
  - Resolves: rhbz#2057094 CVE-2022-25313
  - Resolves: rhbz#2057099 CVE-2022-25314
  - Resolves: rhbz#2057127 CVE-2022-25315


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.14.1-2
changelog:
  - ExclusiveArch: i686, x86_64
    Related: rhbz#1615874
  - BuildRequires: python3-devel
    Related: rhbz#1615874


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 5.0-0.2.rc2.v5.x.git65a0c3.20160723
changelog:
  - Update to 20160204 snapshot of the v5.x branch (git rev 65a0c3)
  - Backported patch to build failure of latest wine-gecko


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.2h-1
changelog:
  - Synced with native openssl-1.0.2h-1
  - Fixes RHBZ #1332591 #1332589 #1330104 #1312861 #1312857 #1307773 #1302768


author: Christophe Fergeau <cfergeau@redhat.com> - 1.0.2k-1
changelog:
  - Sync with rhel 7.6 OpenSSL 1.0.2k+patches in order to get the latest security
    fixes
  - Related: rhbz#1615874


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.38-1
changelog:
  - Update to 8.38
  - Fixes various CVE's:
    RHBZ #1236660, #1249905, #1250947, #1256453, #1256454, #1287616,
    RHBZ #1287619, #1287626, #1287628, #1287631, #1287634, #1287640,
    RHBZ #1287642, #1287648, #1287650, #1287656, #1287658, #1287661,
    RHBZ #1287663, #1287668, #1287670, #1287673, #1287675, #1287692,
    RHBZ #1287694, #1287698, #1287700, #1287704, #1287706, #1287720,
    RHBZ #1287722


author: Uri Lublin <uril@redhat.com> - 3.26.0.0-1
changelog:
  - Rebase to sqlite 3.26.0
  - Fix CVE-2019-8457  CVE-2019-13752 CVE-2019-13753 CVE-2019-13734
  - Fix CVE-2019-19924 CVE-2019-19923 CVE-2019-19925 CVE-2019-19959
  - Fix CVE-2019-20218 CVE-2020-6405  CVE-2020-9327  CVE-2019-5018
  - Fix CVE-2019-16168
    Resolves: rhbz#1826898
  - Fix CVE-2020-13632
    Resolves: rhbz#1845615
  - Fix CVE-2020-13631
    Resolves: rhbz#1845475
  - Fix CVE-2020-13630
    Resolves: rhbz#1845212
  - Fix CVE-2020-13434
    Resolves: rhbz#1845851
  - Fix CVE-2020-15358


author: Simone Caronni <negativo17@gmail.com> - 2.2.3-1
changelog:
  - Update to 2.2.3.
  - Update SPEC file (license, tabs/spaces, trim changelog, etc.)
  - Switch to CMake build.
  - Drop static libraries.
  - Drop test client and obsolete documentation.
  - Do not use static library when building Python module.


author: Petr Pisar <ppisar@redhat.com> - 2.1.0-1
changelog:
  - 2.1.0 bump
  - Upstream moved to <https://github.com/richgel999/miniz>
  - License changed from "Unlicense" to "MIT and Unlicense"
  - ABI changed, API preserved


author: Michal Hlavinka <mhlavink@redhat.com> 56-1
changelog:
  - Upgrade to 56 (#1479800)
  - fixes wait exit codes of co-processes when run in interactive mode (#1479320)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.24.0-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - On epel8 disable php and ruby plugins and not BR SDL_images


author: Jens Kuehnel <bugzilla-redhat@jens.kuehnel.org> - 2.5.1-1
changelog:
  - upgrade to release 2.5.1 based on fork from Reuben Thomas
  - Debian has moved as well and was used a upstream by the previous version of this package
  - upstream removed multi append (mad) from project


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.2017.08.1-1
changelog:
  - change the work around of libtommath and add the definition of
    'MP_GEN_RANDOM_MAX'
  - update to 2017.08.1


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.2018.04.1-1
changelog:
  - update to 2018.04.1, that fix denormals and precision issues in Num parser
  - include the libatomic_ops header files, which are needed for EPEL


author: Pavel Raiskup <praiskup@redhat.com> 4.0-1
changelog:
  - cleanup the bootstrap image logic so it works if Mock is run in container
  - rebuild: kill orphans when mounted
  - bootstrap: delay the buildroot-in-bootstrap recursive mount
  - use shlex instead of pipes
  - fix bootstrap_* prefixed config_opts options
  - manual page: fix the "how to fill an issue" info
  - support for DNF5 added
  - use -N instead of -n for useradd (msuchy@redhat.com)
  - mock: don't use distutils copy_tree()


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Pavel Raiskup <praiskup@redhat.com> 5.5-1
changelog:
  - allow chroot_scan to create archive instead of directory (tkopecek@redhat.com)
  - handle greedy options in Bash completion
  - fix root_cache invalidation (not) triggered by config changes
  - new '{{ repo_arch }}' Jinja2 template support
  - package_manager: disable %-interpolation in dnf.conf parser
  - only `chown` the in-chroot home files with the --rebuild mode
  - all non-privileged actions performed wiht EGID=135 (mock group)
  - mock newly requires a precise version of mock-filesystem
  - allow shadow-utils to run in buildroot by exception if necessary (martjack@redhat.com)
  - hw_info now reports file system type (vondruch@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 5.6-1
changelog:
  - scm: Open stdout in text mode for Git timestamp subprocesses
    (fedora.dm0@gmail.com)
  - always set ownership of homedir (but not recursively) (msuchy@redhat.com)
  - Do not create temporary Buildroot.tmpdir for disabled nosync
    (praiskup@redhat.com)
  - bash-completion: add mock-parse-buildlog (pastalian46@gmail.com)
  - Rewrites "original_name" method to check if "cls" has a "backmap"
    (nikitych@yandex.ru)
  - Don't use --allowerasing for more DNF commands (frostyx@email.cz)
  - bash-completion: pre-build the list of mock known options
    (praiskup@redhat.com)
  - Avoid Traceback for resultdir ENOSPC (praiskup@redhat.com)
  - Post-release administrivia (praiskup@redhat.com)
  - Fix Version in %changelogs (praiskup@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 38.6-1
changelog:
  - use python3 macro for post scriptlet (mroche@omenos.dev)
  - openEuler: use metalinks instead of baseurls (chenzeng2@huawei.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.1-1
changelog:
  - Add openSUSE Leap 15.5 (neal@gompa.dev)
  - Move openSUSE Leap 15.3 to EOL (neal@gompa.dev)
  - Mageia 9 branched, Mageia Cauldron retargeted to Mageia 10 (neal@gompa.dev)


author: Pavel Raiskup <praiskup@redhat.com> 39.2-1
changelog:
  - Switch ELN to use a native bootstrap container image
  - Use the correct openSUSE Backports key for Leap 15.5 (neal@gompa.dev)
  - Properly handle /etc/mock/default.cfg on Fedora ELN (sbonazzo@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.3-1
changelog:
  - Fedora 40+ to use DNF5 for building
  - Mandriva provides python-* not python3-* packages, use them
  - mark ELN bootstrap image as "ready" to speedup bootstrap preparation


author: Pavel Raiskup <praiskup@redhat.com> 39.4-1
changelog:
  - configure system_cachedir for dnf5
  - configs: EOL Fedora 37
  - config: add README.md with maintainers and issue trackers (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 40.1-1
changelog:
  - new '{{ repo_arch }}' template variable used for Mageia
  - Mageia 7 is EOL (wally@mageia.org)
  - OpenMandriva i686 is EOL (frostyx@email.cz)
  - Fedora 40 branched


author: Jakub Kadlcik <frostyx@email.cz> 40.3-1
changelog:
  - Add initial c10s mock configs (Koji BUILDROOT only) (miro@hroncok.cz)
  - configs: use repo_arch, not target_arch with openSUSE (praiskup@redhat.com)
  - configs: Drop modular repositories from Fedora Branched
    (ngompa@fedoraproject.org)
  - configs: Drop modular repositories from Fedora Rawhide
    (ngompa@fedoraproject.org)
  - Configs 40.2 release notes && post-release administrivia
    (praiskup@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 40.4-1
changelog:
  - configs: BuildWithDNF5 for ELN (praiskup@redhat.com)
  - Add Circle Linux 9 configs (bella@cclinux.org)
  - configs: Replace Mageia 10 and Cauldron i586 configs with i686
    (wally@mageia.org)
  - Post-release administrivia (frostyx@email.cz)


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-4
changelog:
  - Patch whitespace in spec file
  - Fix syntax for applying patches during rpm build
  - Bump BuildRequires to use pcre2-devel


author: Scott Williams <vwbusguy@fedoraproject.org> - 1.2-8
changelog:
  - Rebase to upstream be1e01ea173defc9837bd1b90dc72ed63c8131e7
  - Remove patches that were merged upstream
  - BZ2249532 - Fix tilde operator


author: Francisco Trivino <ftrivino@redhat.com> 1.6.1-9
changelog:
  - Add missing repos to the osci tests
  - Fix gss localname test to work with older gssapi version
  - Resolves: #2083122
  - Add ability to expose the used mechanism
  - Resolves: #2046231


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1702695 - fresh install of mod_auth_mellon shows rpm
                             verification warnings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: Björn Esser <besser82@fedoraproject.org> - 1.0.5-18
changelog:
  - Update patch0 to fix Automake parameters
  - Fix end-of-line-encoding for several files
  - Drop empty NEWS file
  - Fix description


author: Björn Esser <besser82@fedoraproject.org> - 1.0.5-25
changelog:
  - Add a patch for improvements with Apache httpd >= 2.4
  - Update Patch1 to also apply CFLAGS properly


author: Björn Esser <besser82@fedoraproject.org> - 1.0.5-26
changelog:
  - Consolidate the patches for Autotools with more fixes
  - Add a patch to add the AuthTokenLimitByIp configuration option
  - Modernize spec file


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.1.0-1
changelog:
  - Logging improvements; success logging moved from notice to info level.
  - Fix redirect for AuthPAMExpiredRedirect with Basic Auth.
  - Fix AuthPAMExpiredRedirect %s escaping on Apache 2.2.


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-3
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 6.0.4-2
changelog:
  - add license tag
  - remove all empty files
  - remove doc subpackage
  - all header files are now in the devel subpackage


author: Petr Pisar <ppisar@redhat.com> - 2.0.10-13
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1623267)


author: Petr Pisar <ppisar@redhat.com> - 2.0.11-2
changelog:
  - Do not use deprecated ap_get_server_version() (CPAN RT#124972)
  - Use httpd 2.4 access rules in an example in perl.conf
  - Disable ModPerl-Registry/t/closure.t and ModPerl-Registry/t/special_blocks.t
    tests (CPAN RT#132919)


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Athmane Madjoudj <athmane@fedoraproject.org> - 3.0.0-2
changelog:
  - Fix the install part since extra and experimental rules are not longer included in 3.x
  - Remove EL5 bits since EL5/EPEL5 are OEL-ed
  - Bump reqs


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlčík <jkadlcik@redhat.com> - 0.7-2
changelog:
  - Do not generate manpages on the fly
  - Drop python-parameterized dependency
  - Fix python3 macro for running tests


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.11-1
changelog:
  - modulemd_tools: compatibility for upgrade_ext on EPEL8 (frostyx@email.cz)
  - modulemd_tools: compatibility for read_packager_string on EPEL8
    (frostyx@email.cz)
  - dir2module: generate also profiles and modulemd-defaults file
    (frostyx@email.cz)
  - modulemd_tools: use upgrade_ext instead of upgrade (frostyx@email.cz)
  - modulemd_tools: use read_packager_string instead of read_string
    (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - bld2repo: do not create empty repos when --result-dir is used
    (kdudka@redhat.com)
  - bld2repo: print status in a more intuitive format (kdudka@redhat.com)
  - tito: stop releasing for Fedora 32 (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-6
changelog:
  - Do not install bld2repo as RHEL8 doesn't have python3-koji
    (jkadlcik@redhat.com)
  - Drop the Patch1 and make the change directly in this repository
    (jkadlcik@redhat.com)
  - Use UpstreamBuilder instead of DistributionBuilder (jkadlcik@redhat.com)
  - Skip some tests because they require binary files (jkadlcik@redhat.com)


author: Jakub Kadlcik <jkadlcik@redhat.com> 0.7-8
changelog:
  - modulemd_tools: fix tests for new libmodulemd version 2.15.0
    (frostyx@email.cz)
  - createrepo: replace deprecated LooseVersion (mkulik@redhat.com)


author: Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-10
changelog:
  - Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
    as well as attempting to consume numbered mok variables from efivarfs
    when mok-variables aren't present (pjones)
    Resolves: rhbz#1907418


author: José Expósito <jexposit@redhat.com> - 2.3.4-20
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Russell Golden <niveusluna@niveusluna.org> - 2019.11.7-1
changelog:
  - EASE HTTP Once Exception
  - Add Private network IPs to exclusion for HTTPSE
  - Revert icons back to previous state
  - Optimizations to url handling and hsts prune


author: Russell Golden <niveusluna@fedoraproject.org> - 2020.5.20-1
changelog:
  - EASE HTTP Once CSS fix
  - Allow users to whitelist hosts from the option page
  - EASE mode fixes for locale issue
  - Fetch Test Prep, TLS 1.2 update
  - Fetch Test Prep, Updated check rules script
  - Fix options page appearance on Firefox when dark mode is on
  - Dark mode adjustments
  - Reverting Onboarding page for the time being
  - Patch for whitelisting rules and EASE mode issue
  - Double rule load patch in update channels
  - Fix minor JS and UX issues


author: Russell Golden <niveusluna@fedoraproject.org> - 2020.8.13-1
changelog:
  - Fix port based whitelisting issue #19291
  - Update documentation
  - Update dependencies (NPM and Chromedriver)
  - Minor code fixes in JS


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - use https://github.com/mate-desktop/mozo/commit/558d88a
  - use https://github.com/mate-desktop/mozo/commit/1824bef
  - add some upstream patches


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.91-8
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  >>>>>>> f6527555a6483a34143acdaac711586a721ab060


author: Karel Volný <kvolny@redhat.com> - 1.6.2-2
changelog:
  - Import to Fedora (rhbz#1664399)
  - Fixed License tag
  - Dropped Group tag
  - Improved tarball_version definition
  - Unzipped manpage


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.1-2
changelog:
  - Subpackages python2-mpi4py, python2-mpi4py-openmpi have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Orion Poplwski <orion@nwra.com> - 3.0.2-5
changelog:
  - Re-enable mpi thread multiple since openmpi is built with it
  - Re-enable openmpi tests on arm, mpich is still failing


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.0-11
changelog:
  - Stop excluding ppc64le architecture: build a generic version, without
    optimized assembly
  - Enable fat binaries where supported (x86)
  - Fix missing debuginfo for assembly routines
  - Ensure hardened build is always enabled, including on EPEL
  - Strict so-versions in files pattern for shared library (helps detect
    so-version changes)
  - Create -doc subpackage; add HTML and PDF documentation built from texinfo
  - Add virtual Provides for -c++ and -c++-devel subpackages, by analogy to GMP;
    note, however, that we cannot actually split out the subpackage without
    breaking most C++ packages that have this as a BuildRequires
  - Add BR on make for
    https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
  - Use modern macros like autosetup, make_build, make_install
  - Get an updated config.guess, etc. from gnulib-devel instead of patching it
  - Convert HTTP URLs to HTTPS
  - Updated summary and description from upstream
  - Correct license field (not just LGPLv3+) and add PACKAGE-LICENSING file
  - More conversion of ISO-8859-1-encoded files
  - Reformat whitespace


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.0-12
changelog:
  - Split the C++ library into a subpackage; keep a combined -devel package, as
    the GMP package in Fedora does, to avoid breaking BR’s


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.0-13
changelog:
  - Convert character encodings with a patch instead of a script; it turns out it
    takes manual inspection to get this right


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.0.0-14
changelog:
  - Do not BR yasm on platforms where it is not used in the build
    (https://github.com/wbhart/mpir/issues/270)


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Justin W. Flory <jflory7@fedoraproject.org> - 0.3.93-1
changelog:
  - Update to latest pre-release tag
  - Fixing bug when the scrobbler would hang randomly
  - Added hard dependency on DBus version 1.9 or higher
  - Improved logic of now_playing/queue events in case tracks cannot fully load


author: Justin W. Flory <jflory7@fedoraproject.org> - 0.4.0-1
changelog:
  - Update to latest upstream stable release
  - Temporary ExcludeArch for s390x architecture build failures


author: Justin W. Flory <jflory7@fedoraproject.org> - 0.4.0.1-1
changelog:
  - Bugfix: Update to latest upstream stable release (service fails after running
    signon session)
  - Set buildtype option to release for buildsystem


author: Tibor Dudlák <tdudlak@redhat.com> - 1.14.0-1
changelog:
  - e319b73 refactor(AWS): change variable name typo in get_ip_addresses (Tibor Dudlák)
  - d95e65f fix(OpenStack): Add missing await for self._load_limits() method call (Tibor Dudlák)
  - d0c2d8f refactor: Update supported providers (Tibor Dudlák)
  - 13ad3df fix(outputs): remove config section from pytest-multihost (Tibor Dudlák)
  - d3da251 feat(outputs): allow to overwrite ansible layout (Tibor Dudlák)
  - d3ac20d feat(outputs): allow to choose which outputs should be generated (Tibor Dudlák)
  - 66f2877 feat(outputs): add support for pytest-mh (Tibor Dudlák)
  - db633b7 feat(utils): relax condition in get_fqdn (Tibor Dudlák)
  - 0735e36 fix(outputs): add host to correct group in layout (Tibor Dudlák)
  - b1f5318 feat(utils): add get_os_type (Tibor Dudlák)
  - 0ab88e6 refactor(black): reformat code (Tibor Dudlák)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.14.1-1
changelog:
  - a9c4e62 fix: mrack not re-provisioning hosts which were destroyed (Tibor Dudlák)
  - 17b45e4 fix: Replace coroutines with tasks to avoid RuntimeError (David Pascual)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.15.0-1
changelog:
  - f9f0e33 test: Add missing strategy_retry test (Tibor Dudlák)
  - 121c5db refactor(provider): take max_utilization out to method to ease mocking (Tibor Dudlák)
  - dc74ced test: Add missing tests for fixed code from https://github.com/neoave/mrack/pull/245 (Tibor Dudlák)
  - 86393ab feat(outputs): preset username and password for windows host in pytest-mh (Tibor Dudlák)
  - 4c26b5f feat(outputs): merge nested dictionary instead of overriding it (Tibor Dudlák)
  - 4dde2e5 feat(utils): add merge_dict (Tibor Dudlák)
  - 5440be1 refactor: fixes _openstack_gather_responses test warnings and exec time (David Pascual)
  - e29031b fix: Handle 403 AuthError (out of quota) in openstack provisioning (David Pascual)
  - a4e5075 feat: configurable ssh options (Petr Vobornik)
  - e9d716e chore: fix docs dependencies in tox run (Petr Vobornik)
  - 6f1943b chore: add Markdown support to docs and add design section (Petr Vobornik)
  - 88458e1 docs: SSH options design (Petr Vobornik)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.15.1-1
changelog:
  - 608c763 chore(Packit): Use yaml magic to run same internal tests for PRs and commits to main (Tibor Dudlák)
  - 8062a20 refactor: more verbose output when (re)provisioning (Tibor Dudlák)
  - 19b52f8 test(OpenStack): Add reprovision with dynamic result tests (Tibor Dudlák)
  - fd111f5 fix: Do not reprovision all hosts when server error is detected (Tibor Dudlák)
  - 6e499f6 fix: Use lower cooldown time to not be too slow in re-provisioning (Tibor Dudlák)
  - e03793c chore(Packit): Add internalt tests per pull request (Tibor Dudlák)
  - 44023eb chore(Packit): add missing build job(s) to Packit config (Tibor Dudlák)


author: Tibor Dudlák <tdudlak@redhat.com> - 1.16.0-1
changelog:
  - 278d1b1 chore(release): Add PyPI action & extract copr step (Tibor Dudlák)
  - 9bbd987 chore: Bump python-semantic-release to v7.34.4 (Tibor Dudlák)
  - d6b7298 feat: Add new dependecies to mrack.spec file (David Pascual)
  - 7bbda34 feat(OpenStack): Add clouds.yaml as an authentication method (David Pascual)
  - a5b32e3 feat(OpenStack): Import publick key on provision (David Pascual)
  - 1a29d86 test: fix pylint issues and use isinstance (Tibor Dudlák)
  - db74ae0 fix(Beaker): Exception has been thrown as raise missed argument (Tibor Dudlák)
  - de027fa docs(Beaker): Add hostRequires documentation section to guides (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.16.0-1
changelog:
  - e8e20f1 chore(ci): Fix release workflow build step checking out wrong commit (David Pascual)
  - 97a7cd0 chore: Bump asyncopenstackclient dependency version (David Pascual)
  - 41b12e7 chore: Release version 1.16.0 (github-actions)
  - 278d1b1 chore(release): Add PyPI action & extract copr step (Tibor Dudlák)
  - 9bbd987 chore: Bump python-semantic-release to v7.34.4 (Tibor Dudlák)
  - d6b7298 feat: Add new dependecies to mrack.spec file (David Pascual)
  - 7bbda34 feat(OpenStack): Add clouds.yaml as an authentication method (David Pascual)
  - a5b32e3 feat(OpenStack): Import publick key on provision (David Pascual)
  - 1a29d86 test: fix pylint issues and use isinstance (Tibor Dudlák)
  - db74ae0 fix(Beaker): Exception has been thrown as raise missed argument (Tibor Dudlák)
  - de027fa docs(Beaker): Add hostRequires documentation section to guides (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.17.0-1
changelog:
  - 5251d90 chore(ci): Temporarely remove packit tests (David Pascual)
  - 3a59761 feat(openstack): Append API version to auth_url in credentials (David Pascual)
  - 97a5355 chore(release): Update semantic release action name and version (David Pascual)
  - 6d6cdc6 chore(release): Upload distribution package to release assets (David Pascual)


author: Michael Thomas <wart@fedoraproject.org> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Don't offer a broken mailq alternative anymore rhbz#1828854
  - Fix install-info invocation in post scriptlet


author: Miro Hrončok <mhroncok@redhat.com> - 4.11.0-5
changelog:
  - Switch the test runner in %check from deprecated nose to pytest
  - Drop undesired and unused build dependency on coverage


author: Honggang Li <honli@redhat.com> - 4.10.0.2
changelog:
  - Rebase to latest upstream release v4.10.0-2
  - Fix license issue of mtcr_ul.c
  - Resolves: bz1541741


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.18-15
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073842)


author: Carl George <carl@george.computer> - 1.3.3-1
changelog:
  - Latest upstream rhbz#1885088
  - Update license to reflect bundled libraries
  - Add virtual provides for bundled libraries
  - Remove celt071 dependency rhbz#1904471
  - Remove obsolete for mumble-protocol
  - Remove non-root ownership of murmurd
  - Remove weblist perl and php scripts from %doc


author: Kim B. Heino <b@bbbs.net> - 2.0.69-2
changelog:
  - Replace /etc/munin/conf.d with upstream default /etc/munin/munin-conf.d
  - Add compatibility symlink /etc/munin/conf.d if necessary


author: Kim B. Heino <b@bbbs.net> - 2.0.72-1
changelog:
  - Upgrade to 2.0.72
  - Add munin-get plugin directory
  - Mangle /var/lib/munin-node SELinux
  - Fix service startup order


author: Greg Bailey <gbailey@lxpro.com> - 7.0-1
changelog:
  - Update to 7.0
  - noteleft string
  - mensural symbols and centered stems
  - improved measuration time signature sizing when used with printedtime
  - expression eval macros
  - string() function
  - shapes context


author: Jonas Ådahl <jadahl@redhat.com> - 3.32.2-52
changelog:
  - Support polyinstantiation
    Resolves: #1861769
  - Mitigate nouveau misidentifying connectors
    Resolves: #1786496


author: Jan Grulich <jgrulich@redhat.com> - 3.32.2-71.1
changelog:
  - Do not use DMA buffers for screencast when the client doesn't support it
  - Use DMA buffers only for i195 drivers
    Resolves: RHEL-11227


author: Jan Grulich <jgrulich@redhat.com> - 3.32.2-72
changelog:
  - Do not use DMA buffers for screencast when the client doesn't support it
  - Use DMA buffers only for i195 drivers
    Resolves: RHEL-4405


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: David Beveridge <dave@bevhost.com> 2.2.1-20
changelog:
  - Patch for mmm_agentd Remote Command Injection Vulnerabilities
  - TALOS-2017-0501, CVE-2017-14474 - CVE-2017-14481


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Caolán McNamara <caolanm@redhat.com> - 3.0-22
changelog:
  - Related: rhbz#1604911 convert python2 to python3, verified
    that output th_en_US_v2.dat and th_en_US_v2.idx are identical
    before and after


author: Caolán McNamara <caolanm@redhat.com> - 0.20150304-1
changelog:
  - Resolves: rhbz#1197184 berlios has disappeared, but rla-es seems
    active, and using e.g. "a priori" as an example LibreOffice suggests
    a non-corrupted set of suggestions


author: Stephen Smoogen <smooge@fedoraproject.org> - 2.2.1-17.20190829gitfb792ff
changelog:
  - Update to latest git and fix release string to match again
  - check_ntp.pl was still getting installed as check_ntp. Fix BZ#1664981
  - check_ntp.pl has ipv6 problem. Fix BZ#1731468


author: Stephen Smoogen <smooge@fedoraproject.org> - 2.2.2-2.20190926git1b8ad57
changelog:
  - Add conditional for perl-UTF8. Thanks to Todd Zullinger and Alexander Kohr
  - Update to newer git tag to fix check_smb


author: Sean Mottles <seanmottles@posteo.net> - 1.8.5-1
changelog:
  - Update version to support AlmaLinux and Rocky Linux
  - Skip the kernel checks if the kernel is not installed with RPM


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-5
changelog:
  - Wait for network-online.target (bz#1898469).
  - Apply /etc/sysconfig/nrpe settings (bz#1806659).
  - Changed /var/run to /run (bz#1870146).


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.0.3-9
changelog:
  - Don't use get_dh on Fedora 36 - OpenSSL 3. (bz#2021958)
  - Remove unknown --with-init-dir configure parameter.


author: Trond Hasle Amundsen <t.h.amundsen@usit.uio.no> - 3.7.12-1
changelog:
  - Upstream release 3.7.12
  - Conditionalize building man pages for rhel6+ and fedora19+ (others
    will use pre-built man pages)
  - Conditionalize require nagios-common (rhel6+/fedora19+) or
    nagios-plugins (others) for owner of the plugins directory
  - Drop perl(Crypt::Rijndael) requirement, as it provides optional and
    very rarely used functionality


author: Scott K Logan <logans@cottsay.net> - 1.1.5-6
changelog:
  - Fix FTBFS (rhbz#1864185)
  - Use EPEL 7 compatible CMake macros
  - Add an rpmlintrc to suppress spelling suggestions


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Carlos Soriano <csoriano@redhat.com> - 3.28.1-7
changelog:
  - Disable extension doc generation, since generated files differ and
    rpmlint fails when checking that both architectures of the -devel
    library generate the same files.
    It's an issue in docbook, used by gtk-doc, and althought fixed upstream
    they didn't have a new release yet.
    https://github.com/docbook/xslt10-stylesheets/issues/54
    Resolves: RHBZ#1667136


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-9
changelog:
  - Fix criticals when connecting to remote locations (rhbz#1643175)
  - Remove geometry option from man page (rhbz#1612852)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-10
changelog:
  - Add screenshots for GNOME Software in Appdata file (rhbz#1725107)
  - Add website link to About dialog (rhbz#1725101)
  - Use Files instead of Nautilus in Appdata file (rhbz#1725120)
  - Add nautilus-autorun-software man page (rhbz#1725766)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-11
changelog:
  - Fix criticals when moving file to trash (rhbz#1721133)
  - Fix criticals when closing properties window (rhbz#1721124)


author: Ondrej Holy <oholy@redhat.com> - 3.28.1-13
changelog:
  - Clear selection if any files don't match the pattern (rhbz#1207179)
  - Fix endless content size calculations (rhbz#1566027)
  - Honor umask when creating new files (rhbz#1778579)
  - Close "There is no application..." dialog after response (rhbz#1816070)


author: Kalev Lember <klember@redhat.com> - 1.2.2-1
changelog:
  - Update to 1.2.2
  - Rename the binary package back to nautilus-python (#1636626)
  - Simplify packaging
  - Co-own gtk-doc directories
  - Update upstream URLs
  - Built against Python 3 starting with F30


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.7-8
changelog:
  - Regenerate autotools; Fixes: RHBZ#2143996
  - Backport upstream fix for IPv6 support
  - Backport an upstream fix and a pending PR for the ssh plugin


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224
changelog:
  - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
  - handle missing character after backslash in terminfo entry (CVE-2019-17595)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.0.7-3
changelog:
  - Switch to HTTPS URLs
  - Enable tarball signature verification
  - Drop unused patch
  - Sort file list alphabetically
  - Use SPDX identifiers in License: field


author: Mike DePaulo <mikedep333@gmail.com> - 5.7-1
changelog:
  - Update to 5.7
  - Backport upstream commit to force C89 "to prevent accidental changes to C90/GNU dialect"


author: Severin Gehwolf <sgehwolf@redhat.com> - 0:1.9.22-8
changelog:
  - Add explicit requirement on javapackages-tools since nekohtml-filter
    script uses java-functions. See RHBZ#1600426.


author: Andy Li <andy@onthewings.net> - 2.1.0-9
changelog:
  - Add nekotools test.
  - Use Ninja to build.
  - Add upstream patch of avoiding recompile nekoc/nekoml.


author: Richard W.M. Jones <rjones@redhat.com> - 2.2.0-5
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.0-1
changelog:
  - new upstream release, per release notes:
    https://github.com/dense-analysis/ale/releases/tag/v3.1.0


author: Kir Kolyshkin <kolyshkin@gmail.com> - 3.2.0-1
changelog:
  - new upstream release, per release notes:
    https://github.com/dense-analysis/ale/releases/tag/v3.2.0


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.50.20160912git
changelog:
  - Resolves: 1557470 - netstat -i cut's interface names
  - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing


author: Michal Ruprich <michalruprich@gmail.com> - 2.0-0.52.20160912git
changelog:
  - Resolves: #1711119 - netstat says "packetes" instead of "packets"
  - Resolves: #1670355 - Exit code on wrong parameter is zero for many net-tools binaries
  - Resolves: #1807989 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.16-1
changelog:
  - autoconf, automake, and libtool are no longer required
  - force gnu99 cflag on el7 builds
  - 3.1.16 release


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 5:3.1.17-2
changelog:
  - buildrequire mariadb-connector-c-devel for all but el7
  - minor changes to other specfile conditionals


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Michel Lind <salimma@fedoraproject.org> - 0.3-1
changelog:
  - Update to 0.3
  - Prevent invalid fragment values from leading to a buffer overrun
  - Use SPDX license identifier


author: Ron Olson <tachoknight@gmail.com> 3.6.6-5
changelog:
  - Fixed some issues under Fedora 35 not building properly and
    not being able to run correctly when installed


author: Radu Rendec <radu@rendec.net> - 0.1-4
changelog:
  - Update license tag to use SPDX identifiers
  - Use the newer autosetup macro
  - Do not call the 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS macro explicitly


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Germano Massullo <germano.massullo@gmail.com> - 3.2.0-2
changelog:
  - added xcb.patch that fixes GNOME quirks on Wayland sessions. Read https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/3BVLBS4B3XHJEXFVGD7RK2ZMXZG6JQZT/


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 3.2.4-2
changelog:
  - Don't ship Nemo subpackage on EPEL
  - Clean up to remove check for Fedora >= 24
  - Remove _hardened_build declaration, no longer needed since F23
    https://fedoraproject.org/wiki/Changes/Harden_All_Packages


author: Steve Dickson <steved@redhat.com> 0.3.5-2
changelog:
  - nfs4_getfacl: Add new option -c/--omit-header (bz 1698281)
  - nfs4_setfacl: Skip comment field while reading ACE(s) (bz 1687299)


author: Phil Sutter <psutter@redhat.com> [0.9.3-14.el8]
changelog:
  - JSON: Improve performance of json_events_cb() (Phil Sutter) [1835300]
  - doc: Document notrack statement (Phil Sutter) [1841292]


author: Phil Sutter <psutter@redhat.com> [0.9.3-15.el8]
changelog:
  - segtree: Fix get element command with prefixes (Phil Sutter) [1832235]
  - tests: 0034get_element_0: do not discard stderr (Phil Sutter) [1832235]
  - segtree: Merge get_set_interval_find() and get_set_interval_end() (Phil Sutter) [1832235]
  - segtree: Use expr_clone in get_set_interval_*() (Phil Sutter) [1832235]
  - segtree: Fix missing expires value in prefixes (Phil Sutter) [1832235]


author: Phil Sutter <psutter@redhat.com> [0.9.3-16.el8]
changelog:
  - src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1820684]
  - include: Resync nf_tables.h cache copy (Phil Sutter) [1820684]


author: Phil Sutter <psutter@redhat.com> [0.9.3-17.el8]
changelog:
  - json: don't leave dangling pointers on hlist (Phil Sutter) [1900565]
  - json: Fix seqnum_to_json() functionality (Phil Sutter) [1900565]
  - json: echo: Speedup seqnum_to_json() (Phil Sutter) [1900565]
  - proto: Fix ARP header field ordering (Phil Sutter) [1896334]
  - proto: add sctp crc32 checksum fixup (Phil Sutter) [1895804]
  - mergesort: unbreak listing with binops (Phil Sutter) [1891790]
  - evaluate: missing datatype definition in implicit_set_declaration() (Phil Sutter) [1877022]
  - evaluate: Perform set evaluation on implicitly declared (anonymous) sets (Phil Sutter) [1877022]
  - src: store expr, not dtype to track data in sets (Phil Sutter) [1877022]


author: Phil Sutter <psutter@redhat.com> [0.9.3-19.el8]
changelog:
  - evaluate: Reject quoted strings containing only wildcard (Phil Sutter) [1818117]
  - tests: monitor: use correct $nft value in EXIT trap (Phil Sutter) [1919203]
  - monitor: Fix for use after free when printing map elements (Phil Sutter) [1919203]
  - tests: Disable tests known to fail on RHEL8 (Phil Sutter) [1919203]


author: Phil Sutter <psutter@redhat.com> [0.9.3-20.el8]
changelog:
  - src: Optimize prefix matches on byte-boundaries (Phil Sutter) [1934926]
  - src: Support odd-sized payload matches (Phil Sutter) [1934926]
  - spec: Add an rpminspect.yaml file to steer rpminspect (Phil Sutter) [1962184]
  - spec: Explicitly state dist string in Release tag (Phil Sutter) [1962184]


author: Phil Sutter <psutter@redhat.com> [0.9.3-21.el8]
changelog:
  - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203]
  - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365]
  - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334]
  - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334]
  - scanner: sctp: Move to own scope (Phil Sutter) [1979334]
  - scanner: introduce start condition stack (Phil Sutter) [1979334]
  - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334]
  - json: tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334]
  - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334]
  - tcpopt: rename noop to nop (Phil Sutter) [1979334]
  - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334]
  - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334]
  - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334]


author: Phil Sutter <psutter@redhat.com> [0.9.3-22.el8]
changelog:
  - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059]
  - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059]
  - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059]
  - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141]


author: Phil Sutter <psutter@redhat.com> [0.9.3-23.el8]
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127]
  - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-24.el8]
changelog:
  - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127]
  - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-25.el8]
changelog:
  - mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
  - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
  - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
  - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
  - src: support for restoring element counters (Phil Sutter) [2039594]
  - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]


author: Phil Sutter <psutter@redhat.com> [0.9.3-26.el8]
changelog:
  - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
  - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
  - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
  - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
  - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
  - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
  - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]


author: Phil Sutter <psutter@redhat.com> [1.0.4-1.el8]
changelog:
  - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076]
  - Rebase onto version 1.0.4 (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el8]
changelog:
  - Add expected error records for testsuite runs (Phil Sutter) [2211076]
  - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-3.el8]
changelog:
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5160]


author: Kevin Fenzi <kevin@scrye.com> - 26-2
changelog:
  - Drop gcc10 workaround (fixed upstream)
  - Disable tests on i686 for now as they seem sporadically broken. ( https://github.com/ngircd/ngircd/issues/280 )


author: Michal Ambroz <rebus AT seznam.cz> - 1:2.1.6-1
changelog:
  - bump to upstream version
  - fix weekdays in changelog
  - cherry pick patch from upstream for CVE-2018-11652 - bugs 1585612,1585614


author: Martin Osvald <mosvald@redhat.com> - 2:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2166178 - Nmap much slower after libpcap fix
  - Resolves: #2169766 - Rebase nmap for TLS v1.3 support


author: Peter Oliver <git@mavit.org.uk> - 16p-4
changelog:
  - Update build options
  - Drop obsolete options.
  - Specify the correct build flags for ARM and zSeries.


author: Gris Ge <fge@redhat.com> - 1.1.0-3
changelog:
  - Fix state=ignore for OVS interface. RHBZ#1944054
  - Fix verification for next hop address 0.0.0.0. RHBZ#1985879


author: Ana Cabral <acabral@redhat.com> - 1.1.1-0.1.alpha1
changelog:
  - Upgrade to 1.1.1 alpha1.
  - Canonicalize ipv6 addresses for dns nameservers. RHBZ#1911241
  - Throw better error when peer is missing for veth interfaces. RHBZ#1973973


author: Fernando Fernandez Mancera - 1.2.1-2
changelog:
  - Fix ovs vxlan base-iface error. RHBZ#2080528
  - Fix clear linux bridge vlan filtering. RHBZ#2080530


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.3.3-2
changelog:
  - Do not remove SR-IOV that is not in desired state. RHBZ#2139698
  - Allow extra IP addresses found in verification stage. RHBZ#2128555


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - https://github.com/less/less.js/blob/v1.4.1/CHANGELOG.md
  - Fix syncImports and yui-compress option, as they were being ignored
  - Fixed several global variable leaks
  - Handle getting null or undefined passed as the options object


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - https://github.com/less/less.js/blob/v1.5.0/CHANGELOG.md
  - sourcemap support
  - support for import inline option to include css that you do NOT want less to
    parse e.g. `@import (inline) "file.css";`
  - better support for modifyVars (refresh styles with new variables, using a
    file cache), is now more resiliant
  - support for import reference option to reference external css, but not output
    it. Any mixin calls or extend's will be output.
  - support for guards on selectors (currently only if you have a single
    selector)
  - allow property merging through the +: syntax
  - Added min/max functions
  - Added length function and improved extract to work with comma seperated
    values
  - when using import multiple, sub imports are imported multiple times into
    final output
  - fix bad spaces between namespace operators
  - do not compress comment if it begins with an exclamation mark
  - Fix the saturate function to pass through when using the CSS syntax
  - Added svg-gradient function
  - Added no-js option to lessc (in browser, use javascriptEnabled: false) which
    disallows JavaScript in less files
  - switched from the little supported and buggy cssmin (previously ycssmin) to
    clean-css
  - support transparent as a color, but not convert between rgba(0, 0, 0, 0) and
    transparent
  - remove sys.puts calls to stop deprecation warnings in future node.js releases
  - Browser: added logLevel option to control logging (2 = everything, 1 = errors
    only, 0 = no logging)
  - Browser: added errorReporting option which can be "html" (default) or
    "console" or a function
  - Now uses grunt for building and testing
  - A few bug fixes for media queries, extends, scoping, compression and import
    once.
  - if you don't pass a strict maths option, font size/line height options are
    output correctly again
  - npmignore now include .gitattributes
  - property names may include capital letters
  - various windows path fixes (capital letters, multiple // in a path)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - https://github.com/less/less.js/blob/v1.5.1/CHANGELOG.md
  - Added source-map-URL option
  - Fixed a bug which meant the minimised 1.5.0 browser version was not wrapped,
    meaning it interfered with require js
  - Fixed a bug where the browser version assume port was specified
  - Added the ability to specify variables on the command line
  - Upgraded clean-css and fixed it from trying to import
  - correct a bug meaning imports weren't synchronous (syncImport option
    available for full synchronous behaviour)
  - better mixin matching behaviour with calling multiple classes e.g. .a.b.c;


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://github.com/less/less.js/blob/v1.6.0/CHANGELOG.md
  - Properties can be interpolated, e.g. @{prefix}-property: value;
  - a default function has been added only valid in mixin definitions to
    determine if no other mixins have been matched
  - Added a plugins option that allows specifying an array of visitors run on the
    less AST
  - Performance improvements that may result in approx 20-40% speed up
  - Javascript evaluations returning numbers can now be used in
    calculations/functions
  - fixed issue when adding colours, taking the alpha over 1 and breaking when
    used in colour functions
  - when adding together 2 colours with non zero alpha, the alpha will now be
    combined rather than added
  - the advanced colour functions no longer ignore transparency, they blend that
    too
  - Added --clean-option and cleancssOptions to allow passing in clean css
    options
  - rgba declarations are now always clamped e.g. rgba(-1,258,258, -1) becomes
    rgba(0, 255, 255, 0)
  - Fix possible issue with import reference not bringing in styles (may not be a
    bugfix, just a code tidy)
  - Fix some issues with urls() being prefixed twice and unquoted urls in mixins
    being processed each time they are called
  - Fixed error messages for undefined variables in javascript evaluation
  - Fixed line/column numbers from math errors


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://github.com/less/less.js/blob/v1.6.1/CHANGELOG.md
  - support ^ and ^^ shadow dom selectors
  - fix sourcemap selector (used to report end of the element or selector) and
    directive position (previously not supported)
  - fix parsing empty less files
  - error on (currently) ambiguous guards on multiple css selectors
  - older environments - protect against typeof regex returning function
  - Do not use default keyword
  - use innerHTML in tests, not innerText
  - protect for-in in case Array and Object prototypes have custom fields


author: Stephen Gallagher <sgallagh@redhat.com> 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://github.com/less/less.js/blob/v1.6.3/CHANGELOG.md
  - Fix issue with calling toCSS twice not working in some situations (like with
    bootstrap 2)
  - The Rhino release is fixed!
  - ability to use uppercase colours
  - Fix a nasty bug causing syntax errors when selector interpolation is preceded
    by a long comment (and some other cases)
  - Fix a major bug with the variable scope in guards on selectors (e.g. not
    mixins)
  - Fold in & when () { to the current selector rather than duplicating it
  - fix another issue with array prototypes
  - add a url-args option which adds a value to all urls (for cache busting)
  - Round numbers to 8 decimal places - thereby stopping javascript precision
    errors
  - some improvements to the default() function in more complex scenarios
  - improved missing '{' and '(' detection


author: Stephen Gallagher <sgallagh@redhat.com> 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://github.com/less/less.js/blob/v1.7.0/CHANGELOG.md
  - Add support for rulesets in variables and passed to mixins to allow wrapping
  - Change luma to follow the w3c spec, luma is available as luminance. Contrast
    still uses luma so you may see differences if your threshold % is close to
    the existing calculated luma.
  - Upgraded clean css which means the --selectors-merge-mode is now renamed
    --compatibility
  - Add support for using variables with @keyframes, @namespace, @charset
  - Support property merging with +_ when spaces are needed and keep + for comma
    separated
  - Imports now always import once consistently- a race condition meant
    previously certain configurations would lead to a different ordering of
    files
  - Fix support for `.mixin(@args...)` when called with no args (e.g.
    `.mixin();`)
  - Do unit conversions with min and max functions. Don't pass through if not
    understood, throw an error
  - Allow % to be passed on its own to the unit function e.g. `unit(10, %)`
  - Fix a bug when comparing a unit value to a non-unit value if the unit-value
    was the multiple of another unit (e.g. cm, mm, deg etc.)
  - Fix mixins with media queries in import reference files not being put into
    the output (they now output, they used to incorrectly not)
  - Fix lint mode- now reports all errors
  - Fixed a small scope issue with & {} selector rulesets incorrectly making
    mixins visible- regression from 1.6.2
  - Browser- added log level "debug" at 3 to get less logging, The default has
    changed so unless you set the value to the default you won't see a
    difference
  - Browser- logLevel takes effect regardless of the environment (production/dev)
  - Browser- added postProcessor option, a function called to post-process the
    css before adding to the page
  - Browser- use the right request for file access in IE


author: Tom Hughes <tom@compton.nu> - 16-1
changelog:
  - Rewrite nodejs.req to better match npm versioning rules
  - Add tests for nodejs.req and nodejs.prov


author: ElXreno <elxreno@gmail.com> - 0.2.0-4
changelog:
  - * Format spec
    * Replace git command via echo in Makefile
    * Don't exec chcon in Makefile
    * Don't exec systemctl in Makefile
    * Disable search of debuginfo
    * Drop not required build macros


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.18.0-1
changelog:
  - Update to version 6.18.0
  - Run autoreconf during build (following upstream)
  - Drop xmlsec related patches accepted upstream


author: Sam P <survient@fedoraproject.org> - 2.1.23-1
changelog:
  - Updated to latest upstream release
  - Changed crypto depedency to match upstream
  - Removed now-irrelevant patch and added versionfix.patch
    See https://github.com/Rackspace-DOT/nova-agent/issues/100.


author: Lee Yarwood <lyarwood@redhat.com> - 1.3.0-2
changelog:
  - Add novnc_proxy and associated man pages
  - Drop various utilities, tests and other files not required from the package
  - Add docs/API.md docs/EMBEDDING.md docs/LIBRARY.md as docs


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.0.2018.04-1
changelog:
  - nqp builds again on all primary architectures
  - add BuildRequires for perl-Digest-SHA
  - update to 2018.04


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.0.2019.07.1-1
changelog:
  - update to 2019.07.1
  - build on epel8
  - add the perl dependencies Data::Dumper and IPC::Cmd
  - refer to the source from github


author: Paul Wouters <pwouters@redhat.com> - 4.3.5-1
changelog:
  - Resolves: rhbz#1884189 nsd-4.3.5 is available
  - Change default to not use TLS/keygen, but the unix domain socket


author: Paul Wouters <paul.wouters@aiven.io> - 4.3.6-1
changelog:
  - Resolves: rhbz#1944233 nsd-4.3.6 is available
  - Resolves: rhbz#1943122 nsd: FTBFS with upcoming autoconf-2.71


author: Paul Wouters <paul.wouters@aiven.io> - 4.3.7-1
changelog:
  - Resolves: rhbz#1982585 nsd-4.3.7 is available
  - Clean out legacy sysvinit / trigger support
  - Update nsd.conf with new TLS (XFR over TLS) options


author: Paul Wouters <paul.wouters@aiven.io> - 4.3.7-4
changelog:
  - Resolves: rhbz#2011757 nsd spec file scriptlets still used obsoleted conditional on systemd, causing sysvinit style exection


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-11
changelog:
  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79
  - Set FIPS Module ID
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm
  - add dbtool to nss-tools


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-11
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.14.1-9
changelog:
  - Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
    so that it ends up before 'resolve' (#1867830)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.14-7
changelog:
  - move the packaged tmpfiles.d file from /etc/tmpfiles.d to %{_tmpfilesdir},
    per heads-up from Ville Skyttä on devel@


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.14-12
changelog:
  - Get rid of all conditions that are always true for both EPEL-7 and Fedora
    as it's quite unlikely we'd use this specfile on EPEL-6
  - Remove the sysvinit script and all the scriptlets around it
  - Unconditionally use systemd scriptlet macros and systemd_requires
  - Unconditionally build the PAM module as the PADL module is long dead
  - Remove the auto-migration of settings from nss_ldap as it's been
    long gone from Fedora
  - Don't check /etc/sysconfig/authconfig as authconfig is on its way
    out from Fedora
  - Use only spaces, not tabs, to stop my editor from looking like a
    Christmas tree
  - Remove the obsolete Group stanza
  - Make nscd Recommended, not Required


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-1
changelog:
  - Upgrade to the latest upstream
    - Disable the python utilities
    - Don't bother with failing pylint test as we don't ship the python
      utilities
  - Drop unused validname and exitcode patches, port strtoid overflow
    patch


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-2
changelog:
  - Apply a patch by Lukas Slebodnik to allow root to write to the
    /var/run/nslcd directory
  - Resolves: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                             with SELinux enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.9-3
changelog:
  - Also change the pemissions on tmpfiles
  - Related: rhbz#1583211 - nslcd, the local LDAP daemon, fails to start
                            with SELinux enabled


author: Tomas Halman <thalman@redhat.com> - 0.9.9-4
changelog:
  - moving temp files from /var/run to /run
  - Resolves: rhbz#1969826 - tmpfiles snippet needs updated path for
                             nss-pam-ldapd


author: Andreas Schneider <asn@redhat.com> - 1.1.12-1
changelog:
  - resolves: rhbz#2139665 - Rebase to version 1.1.12
  - resolves: rhbz#2124635 - Reduce dependencies of the package


author: Andreas Schneider <asn@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
    * Added support for initgroups()
    * Added support for shadow files (getspnam(), etc.)
    * Improved support for multi address handling in getaddrinfo()
    * Improved file parser
    * Fixed compilation on machines without IPv4 support
    * Fixed service string sanity check in getaddrinfo() (bso #11501)
    * Fixed AI_NUMERICHOST handling in getaddrinfo() (bso #11477)


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * Added support for BSD 'struct passwd' members
    * Replaced strcpy() with snprintf()
    * Fixed segfault while reloading hosts file
    * Fixed issue where are not fault tolerant if an alias has already
      been added
    * Fixed nss_wrapper build on Solaris


author: Neal Gompa <ngompa@datto.com> - 2:2021.8.22-1
changelog:
  - Rebase to version 2021.8.22 to fix various CVEs (RHBZ#1999869)
  - Clean up old cruft for RHEL < 7
  - Split libraries out to libs subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2:2022.5.17-1
changelog:
  - New upstream version 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789


author: Dridi Boukelmoune <dridi@fedoraproject.org>- 2.1-1
changelog:
  - Update to 2.1
  - Upstream moved to github
  - Upstream switched to autotools
  - Disable --as-needed until it's patched upstream
  - Drop defunct 32bit x86 support
  - Add ppc64le support
  - Run the new test suite


author: Orion Poplawski <orion@nwra.com> - 2.7.4-21
changelog:
  - Cleanup and modernize spec
  - Fix ownership/permissions of /var/run/nut (bug #1584330, #1580082)
  - Fix python shbangs


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.0-2
changelog:
  - fix STATEPATH location and creation (#2024651)
  - merged C99 related changes to configure from fedora


author: Marcin Dulak <Marcin.Dulak@gmail.com> - 7.0.2-2
changelog:
  - Set OMP_NUM_THREADS=1 https://github.com/edoapra/fedpkg/issues/10#issuecomment-699276160
  - Fix hostname br for el6


author: Marcin Dulak <Marcin.Dulak@gmail.com> - 7.0.2-3
changelog:
  - Replace OMP_NUM_THREADS=1 with FLEXIBLAS=openblas-serial to restore https://src.fedoraproject.org/rpms/flexiblas/c/4286c061697330a8d30d2cd3a1d20f018da81258
  - Replace mentions of the old website with nwchemgit.github.io


author: Mat Booth <mat.booth@redhat.com> - 6.1.1-1
changelog:
  - Update to latest upstream relase for Java 10 support
  - Switch to maven build
  - Now executing test suites


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.4-2
changelog:
  - Add all upstream patches since 1.7.4, including fixes for OCaml 4.07.
  - Use autosetup.
  - Remove obsolete old patch.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.5-18
changelog:
  - Subpackage ocaml-gettext-camomile-devel should depend on
    ocaml-gettext-camomile (thanks: Pino Toscano).


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.


author: Andy Li <andy@onthewings.net> - 2.0.4-1
changelog:
  - New upstream version (RHBZ#1610325).
  - Fix OCaml 4.07 compatibility (RHBZ#1605283).
  - Remove patch, which was merged in upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Packit <hello@packit.dev> - 1.2.1-1
changelog:
  - Accept the Clavister OneConnect VPN Android client (#485)
  - No longer require to set device name per vhost (#480)
  - Account the correct number of points when proxyproto is in use (#529)
  - nuttcp tests were replaced with iperf3 that is available
    in more environments
  - occtl: fix duplicate key in `occtl --json show users` output


author: Packit <hello@packit.dev> - 1.2.2-1
changelog:
  - Fix session and accounting data tracking of ocserv. This
    reverts fix for #444 (#541)
  - No longer account ICMP and IGMP data for idle session detection


author: Packit <hello@packit.dev> - 1.2.4-1
changelog:
  - Get connection speed limits (traffic shaping) from RADIUS (#554)
  - Fix logging to stderr: add missing newline.
  - Fixed compatibility with AnyConnect clients on Linux (#544)
  - Detect the new AnyConnect-compatible identifier of OpenConnect clients
  - occtl: Print bit rates as kb/s.


author: Packit <hello@packit.dev> - 1.3.0-1
changelog:
  - Switch to https://github.com/nodejs/llhttp from http-parser.
    http-parser was a liability as an unmaintained project (#598)
  - Bump the number of groups per account from 128 to 512 (#219)
  - Allow connecting users to select an authgroup by appending the
    group name to the URL, as in https://vpn.example.com/groupname;
    this introduces the select-group-by-url config option (#597).
  - Informational messages due to configuration loading are not printed
    during worker initialization.


  - Resolves: rhbz#2279186


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.4-10
changelog:
  - Subpackage python2-odfpy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Michal Ambroz <rebus AT_ seznam.cz> - 0.20180820-1
changelog:
  * Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.20140818-11
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Petr Pisar <ppisar@redhat.com> - 2.2.2-1
changelog:
  - 2.2.2 bump
  - Upstream moved from <http://ojnk.sourceforge.net/> to
    <https://github.com/janikrabe/oidentd>
  - /etc/sysconfig/oidentd file is world-readable now
  - Run the daemon as oidentd user


author: Jan Friesse <jfriesse@redhat.com> - 0.0.4-15
changelog:
  - Modernize spec file a bit
  - Fix spec file changelog dates
  - Add gcc build requirement

  - Related rhbz#1682115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.8.2-2.1
changelog:
  - Fix CVE-2019-13224
    Resolves: RHEL-20648
  - Fix CVE-2019-16163
    Resolves: RHEL-20642
  - Fix CVE-2019-19012
    Resolves: RHEL-20636
  - Fix CVE-2019-19203
    Resolves: RHEL-20630
  - Fix CVE-2019-19204
    Resolves: RHEL-20624


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.8.2-3
changelog:
  - Fix CVE-2019-13224
    Resolves: RHEL-6970
  - Fix CVE-2019-16163
    Resolves: RHEL-9506
  - Fix CVE-2019-19012
    Resolves: RHEL-9511
  - Fix CVE-2019-19203
    Resolves: RHEL-9510
  - Fix CVE-2019-19204
    Resolves: RHEL-9509


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.0-4.el8
changelog:
  - ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1800812]
  - Resolves: bz#1800812
    ([ESXi][RHEL8]Log spew "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1.el8
changelog:
  - Rebase to 11.0.5 (bz#1798285)
  - Resolves: bz#1798285
    ([ESXi][RHEL8.2.1]Rebase open-vm-tools to 11.0.5 for 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el8
changelog:
  - ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1811729]
  - ovt-Update-copyright-to-reflect-previous-change.patch [bz#1811729]
  - ovt-add-appinfo-plugin.patch [bz#1809751]
  - Resolves: bz#1809751
    ([ESXi][RHEL8.2.1]open-vm-tools add appinfo plugin patch)
  - Resolves: bz#1811729
    ([ESXi][RHEL8.2.1]open-vm-tools coverity scan issue)


author: Mirosalv Rezanina <mrezanin@redhat.com> - 11.1.0-1.el8
changelog:
  - Rebase to 11.1.0 [bz#1806677]
  - Added open-vm-tools-sdmp package [bz#1833157)
  - Resolves: bz#1806677
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.0 for RHEL 8.3)
  - Resolves: bz#1833157
    ([ESXi][RHEL8]Add new open-vm-tools-sdmp package for RHEL 8.3)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.0-2.el8
changelog:
  - Remove net-tools dependency [bz#1849459]
  - Resolves: bz#1849459
    ([ESXi][RHEL8]Incorporate SDMP related fixes and removal of net-tools dependency)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.1.5-1.el8
changelog:
  - Rebase to 11.1.5 [bz#1870781]
  - Resolves: bz#1870781
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.1.5 for 8.4)


author: Miroslav Rezanina <mrezanin@redaht.com> - 11.2.0-1.el8
changelog:
  - Rebase to 11.2.0 [bz#1890831]
  - Resolves: bz#1890831
    ([ESXi][RHEL8]Rebase open-vm-tools to 11.2.0 for 8.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.0-2.el8
changelog:
  - ovt-Fix-memory-leaks.patch [bz#1896804]
  - Resolves: bz#1896804
    ([ESXi][open-vm-tools] Coverity detected important defects in open-vm-tools-11.2.0 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
  - Resolves: bz#1916561
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el8
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1935807]
  - Resolves: bz#1935807
    ([ESXi][RHEL-8.5][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-1.el8
changelog:
  - Rebase to 11.2.5 [bz#1916561]
    ([ESXi][RHEL8.5]Open-vm-tools update release 11.2.5 has been released)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.0-1.el8
changelog:
  - Rebase to open-vm-tools 11.3.0 [bz#1974468]
  - Resolves: bz#1974468
    ([ESXi][RHEL8]Open-vm-tools release 11.3.0 has been released - please rebase)


author: Miroslav Rezanian <mrezanin@redhat.com> - 11.3.5-1.el9
changelog:
  - Rebase to open-vm-tools 11.3.5 [bz#2008244]
  - Resolves: bz#2008244
    ([ESXi][RHEL8]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 11.3.5-1.el8_6.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119283]
  - Resolves: bz#2119283
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to open-vm-tools 12.0.0 [bz#2061189]
  - Resolves: bz#2061189
    ([ESXi][RHEL8]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090273]
  - Resolves: bz#2090273
    ([ESXi][RHEL8]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
  - Resolves: bz#2119284
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
changelog:
  - Rebase to open-vm-tools 12.1.0
  - Resolves: bz#2121196
    ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.1.5-2
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2217083]
  - Resolves: bz#2217083
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8.8.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 12.1.5-2.el8_8.2
changelog:
  - ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#2229158]
  - Resolves: bz#2229158
    ([ESXi] [RHEL8] vmtoolsd task gets blocked in the uninterruptible state while attempting to delete a manifest file 'quiesce_manifest.xml' on a frozen file system [rhel-8.8.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-2.el8_8.3
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-3073]
  - Resolves: RHEL-3073
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.8.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - Rebuild CVE-2023-20900 for 8.10
  - Resolves: RHEL-4584
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8.10.0])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-4
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-7012]
  - Resolves: RHEL-7012
    ([RHEL8.10][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5 [RHEL-15059]
  - Fix CVE-2023-34058 [RHEL-14649]
  - Fix CVE-2023-34059 [RHEL-14683]
  - Resolves: RHEL-15059
    ([ESXi][RHEL8]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14649
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.10.0])
  - Resolves: RHEL-14683
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-17683]
  - Resolves: RHEL-17683
    (Add Restart=on-failure to vmtoolsd.service [rhel-8])


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Nikola Forró <nforro@redhat.com> - 0.3.15-1
changelog:
  - Rebase to version 0.3.15
  - Use gcc-toolset-11 to benefit from POWER 10 optimizations
    resolves: #1983218


author: Nikola Forró <nforro@redhat.com> - 0.3.15-3
changelog:
  - Fix missing header files in openblas-devel subpackage by enabling
    gcc-toolset-11 in %install as well
    related: #1983218


author: Than Ngo <than@redhat.com> - 3.15.1-1
changelog:
  - Related: #1847433
    upstream fixes:
      - Free generated key in all error cases
      - CCA: Zeroize key buffer to avoid CCA 8/32 error
      - Do not delete the map-btree entry if destroying an object is not allowed
      - Remove now unused header timeb.h
      - TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
      - Fix buffer overrun in C_CopyObject
      - TPM: Fix double free in openssl_gen_key


author: Than Ngo <than@redhat.com> - 3.15.1-3
changelog:
  - Resolves: #1902022
     Fix compiling with c++
     Added error message handling for p11sak remove-key command


author: Than Ngo <than@redhat.com> - 3.16.0-1
changelog:
  - Resolves: #1919223, rebase to 3.16.0
  - Resolves: #1922195, Event Notification Support
  - Resolves: #1959936, Soft token does not check if an EC key is valid
  - Resolves: #1851104, import and export of secure key objects
  - Resolves: #1851106, openCryptoki ep11 token: protected key support
  - Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys


author: Than Ngo <than@redhat.com> - 3.16.0-5
changelog:
  - Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2043845, rebase to 3.18.0
  - Resolves: #2043854, add crypto counters
  - Resolves: #2043855, support crypto profiles


author: Than Ngo <than@redhat.com> - 3.18.0-3
changelog:
  - Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
  - Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Resolves: #2129059, C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126612, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110315, rebase to 3.19.0
  - Resolves: #2110990, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110477, openCryptoki ep11 token: master key consistency
  - Resolves: #1984871, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-1
changelog:
  - Resolves: #1984865, ep11 and cca: support concurrent HSM master key changes
  - Resolves: #2110500, ep11 token: PKCS #11 3.0 - support AES_XTS 
  - Resolves: #2111011, cca token: protected key support
  - Resolves: #2159697, update to 3.21.0
  - Resolves: #2159740, pkcsslotd hardening
  - Resolves: #2159741, p11sak support Dilithium and Kyber keys
  - Resolves: #2159742, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-2
changelog:
  - add missing /var/lib/opencryptoki/HSM_MK_CHANGE
  - disable unsupported sandbox options and add /run to ReadWritePaths to exclude
    /run directory from being made read-only on rhel8
  Related: #2159697


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - pkcsstats: Fix handling of user name
  - p11sak: Fix user confirmation prompt behavior when stdin is closed
  Related: #2159697


author: Than Ngo <than@redhat.com> - 3.21.0-7
changelog:
  - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222594, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.21.0-10
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-23488


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22791


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4.6-15
changelog:
  - Fix FBTFS by adding firebird header path to CPPFLAGS, since firebird-devel
    package no longer includes top level symlinks (BZ#1424018)


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Paul Wouters <pwouters@redhat.com> - 1.4.14-1
changelog:
  - Update to 1.4.14 as first steop to migrating to 2.x
  - Resolves: rhbz#1413254 Move tmpfiles.d config to %{_tmpfilesdir}, install LICENSE as %license


author: Scott K Logan <logans@cottsay.net> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Add firewalld service
  - Adjust ELProxy.conf permissions because it contains a password


author: Adrien Vergé <adrienverge@gmail.com> - 1.14.1-1
changelog:
  - Update to latest upstream version
  - Switch build requirements xyz-devel to pkgconfig(xyz)
  - Add missing LICENSE.OpenSSL license file
  - Package systemd service file


author: Nikola Forró <nforro@redhat.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Resolves: CVE-2018-5727 (#1538467)
  - Resolves: CVE-2018-5785 (#1538556)
  - Resolves: CVE-2018-20845 (#1730679)
  - Resolves: CVE-2018-20847 (#1734337)
  - Resolves: CVE-2019-12973 (#1739076)
  - Resolves: CVE-2020-15389 (#1855115)
  - Resolves: CVE-2020-27814 (#1908965)
  - Resolves: CVE-2020-27823 (#1906222)
  - Resolves: CVE-2020-27824 (#1906216)
  - Resolves: CVE-2020-27842 (#1908165)
  - Resolves: CVE-2020-27843 (#1908164)
  - Resolves: CVE-2020-27845 (#1908168)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 5.2.122-20
changelog:
  - Suppressed the dependency on SCons (as autotools are used instead)
  - Fixed the generated version minor number (from 127 to 122)
  - Fixed the target include directory


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-2
changelog:
  - Avoid mismatching coolkey cards for muscle ones (#1588722)
  - Implement legacy CAC1 driver (#1638052)
  - Disable pinpad
  - Fixup verification after RSA-PSS implementation


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-3
changelog:
  - Unbreak the RSA-PSS mechanisms (#1595626)
  - Unbreak the signing using hashed mechanisms in CardOS and others (#1644338)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-4
changelog:
  - Unbreak the Dual CAC cards in PIV driver (#1651748)
  - Fix few more corner cases for handling different types of padding (#1595626)
  - Unbreak signature verification in pkcs11-tool (#1651748)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-6
changelog:
  - Add support for Gemalto IDPrime smart cards (#1657970)
  - Fix 2k RSA key operations with Coolkey (#1766712)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-3
changelog:
  - Support PIN change for HID Alt tokens (#1830901)
  - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572
  - Fix right padding of token labels of some cards (#1877973)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-5
changelog:
  - Avoid potential crash because of missing list terminator (#2196234)
  - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093)
  - Backport upstream changes regarding to reader removal (#2097048)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-7
changelog:
  - Fix file caching with different offsets (RHEL-4077)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.3-6
changelog:
  - Enable profile composition with a specific platform (RHBZ#1896676)
  - Enable YAML probe to work with sets of values (RHBZ#1895715)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-1
changelog:
  - Upgrade to the latest upstream release (RHBZ#1953092)
  - Fix segfault when using --stig-viewer option and latest XML file from DoD (RHBZ#1912000)
  - Improve doc about --stig-viewer (RHBZ#1918759)
  - Backport an upstream patch adding CentOS CPE (RHBZ#1907935)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.5-3
changelog:
  - Waive known issue with hugepages in upstream testsuite (RHBZ#1912000)
  - Fix issues reported by the coverity scan
  - Introduce OSBuild 'blueprint' fix type


author: Jan Černý <jcerny@redhat.com> - 1.3.5-8
changelog:
  - Allow local DS components (rhbz#1970529)
  - Fix hostname detection in offline scan of UBI 9 images (rhbz#1893888)
  - Add an alternative source of hostname (rhbz#1977668)
  - Fix oscap-chroot errors in process58_probe caused by empty /proc (rhbz#2008922)


author: Jan Černý <jcerny@redhat.com> - 1.3.5-9
changelog:
  - Lower memory limits and improve their checking (rhbz#2021851)
  - Remove timestamp from the user manual (rhbz#2022364)


author: Jan Černý <jcerny@redhat.com> - 1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041781)
  - Select and exclude groups of rules on the command line
  - The boot-time remediation service for systemd's Offline Update mode


author: Jan Černý <jcerny@redhat.com> - 1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2111040)
  - Remove oscap-remediate service (rhbz#2111360)


author: Jan Černý <jcerny@redhat.com> - 1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159290)
  - Fix error when processing OVAL filters (rhbz#2126882)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2139060)


author: Packit <hello@packit.dev> - 0.2.0-0
changelog:
  - 0.2.0 (Jan Rodak)
  - Add JSON validator tool (Jan Rodak)
  - Create tests (Jan Rodak)
  - Update issue templates (Jan Rodák)
  - Impruve run time of unit tests (Jan Rodak)
  - Add funtion for filtering JSON (Jan Rodak)
  - Filter JSON keys (Jan Rodak)
  - Adapt the tests and create a new test that tests the validation (Jan Rodak)
  - Add an unsupported XML format to the result (Jan Rodak)
  - Create validation of XCCDF files (Jan Rodak)
  - Add XCCDF schemas (Jan Rodak)
  - Fix typo in variable name (Jan Rodak)
  - Fix problem that was spotted with new test and create test case (Jan Rodak)
  - Add testcase of the crash when is used XCCDF result (Jan Rodak)
  - Impruve raised expection info (Jan Rodak)
  - Hide empty info about profile when isnt anvalible (Jan Rodak)
  - Add missing else branch for if condition if is cpe_platform not defined in jinja (Jan Rodak)
  - Add unit tests for SharedStaticMethodsOfParser (Jan Rodak)
  - Add check and check_existence atributes to report (Jan Rodak)
  - Add information about OVAL state to report (Jan Rodak)
  - Decompose OVALTestInfoParser class (Jan Rodak)
  - Parse OVAL state (Jan Rodak)
  - Add OVAL state class (Jan Rodak)
  - Add info about comparison of endpoint values in OVAL test (Jan Rodak)
  - Ignore deprecated settings of pylint (Jan Rodak)
  - Update tests (Jan Rodak)
  - Add category to report (Jan Rodak)
  - Parse category of warning (Jan Rodak)
  - Add Warning dataclass (Jan Rodak)
  - Update pylint config (Jan Rodak)
  - Reduce external dependencies of test suite (Jan Rodak)
  - Fix data type (Jan Rodak)
  - Change label of OVAL definition for CPE (Jan Rodak)
  - Add HTML generation of CPE AL trees (Jan Rodak)
  - Add css for CPE AL (Jan Rodak)
  - Create place for graph with CPE AL (Jan Rodak)
  - Integrate CPE AL parser (Jan Rodak)
  - Create CPE AL parser (Jan Rodak)
  - Add expection (Jan Rodak)
  - Add imports to __init__ (Jan Rodak)
  - Create cpe platform (Jan Rodak)
  - Add cpe logical test (Jan Rodak)
  - Create evaluation of CPE logical test (Jan Rodak)
  - Use a more elegant way to copy dictionary (Jan Rodak)
  - Disable automatic character escaping in jinja (Jan Rodak)
  - Remove duplicite CPE trees for fedora platforms (Jan Rodak)
  - Fix the classification of tests (Jan Rodak)
  - Present new infromation in HTML report (Jan Rodak)
  - Update test suite (Jan Rodak)
  - Update jinja macros for new dataclasses (Jan Rodak)
  - Replace jinja filter with methode call that use diffrent informations (Jan Rodak)
  - Implement usage of TestResultOfScan and ProfileInfo dataclasses (Jan Rodak)
  - Add parser of performed scan information (Jan Rodak)
  - Create parser of profile information (Jan Rodak)
  - Use new dataclasses in Report (Jan Rodak)
  - Create ProfileInfo and TestResultOfScan dataclasses (Jan Rodak)
  - Regenerate docs modules (Jan Rodak)
  - Ignore old xslt codes for generating old style report for backwards compatibility (Jan Rodak)
  - Fix CWE-79 (Jan Rodak)
  - Fix overwrite attribute get_report_dict, which was previously defined in superclass (Jan Rodak)
  - Explicitly import stdout, stdin with prefix sys (Jan Rodak)
  - Close file after usage (Jan Rodak)
  - Fix empty expections (Jan Rodak)
  - Fix missing OVAL definitions in reports when is not present OVAL CPE checks (Jan Rodak)
  - Fix key error platfrom without OVAL definition (Jan Rodak)
  - Fix missing CPE checks (Jan Rodak)
  - Update README.md (Evgeny Kolesnikov)
  - Update README.md (Evgeny Kolesnikov)
  - Fix parsing of checking engine result (Jan Rodak)
  - Rename master branch to main in github action configs TODO : LINKS IN README etc. (Jan Rodak)
  - Rename master branch to main in realase script (Jan Rodak)
  - Move comment of OVAL nodes behind result label (Jan Rodak)
  - Display OVAL definitions details in the HTML report (Jan Rodak)
  - Display comments in OVAL graphs (Jan Rodak)
  - Replace the empty rule title with the rule id (Jan Rodak)
  - Add srpm_build_deps (Jan Rodak)
  - Update nodejs actions (Jan Rodak)
  - Add CodeQL workflow for GitHub code scanning (LGTM Migrator)
  - Add tests for oval definition (Jan Rodak)
  - Reduce run time of test suite (Jan Rodak)
  - Switch using oval_tree to oval_definition (Jan Rodak)
  - Implement usage of OVAL definition parser (Jan Rodak)
  - Create OVAL definition parser (Jan Rodak)
  - Create OVAL reference (Jan Rodak)
  - Create OVAL definition (Jan Rodak)
  - Rename clases TestInfoParser to OVALTestInfoParser and OVALDefinitionParser to OVALResultParser (Jan Rodak)
  - Add Read the Docs configuration file (Jan Rodak)
  - Improve readme (Jan Rodak)
  - Update chapter layout (Jan Rodak)
  - Add usage chapter to documentation (Jan Rodak)
  - Add installation chapter to documentation (Jan Rodak)
  - Regenerate modules (Jan Rodak)
  - Add link to readthedocs (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add instalation and basic usage to readme (Jan Rodak)
  - Fix mixing of Rule class and rule XML element (Jan Rodak)
  - Rename groupe_parser to group_parser and info_of_test_parser to test_info_parser (Jan Rodak)
  - Create output format JSON-EVERYTHING (Jan Rodak)
  - Use filter for generation JSON (Jan Rodak)
  - Rename directory (Jan Rodak)
  - Break methodes to smaller methods (Jan Rodak)
  - Fix tests according to change of structure of SCAPResultsParser class (Jan Rodak)
  - Rework structure SCAPResultsParser class (Jan Rodak)
  - Rework assembly of OVAL and CPE trees (Jan Rodak)
  - Remove None comment (Jan Rodak)
  - Remove None value from definition ID (Jan Rodak)
  - Fix test of remediation (Jan Rodak)
  - Specify data types of Rule (Jan Rodak)
  - Specify data types of Report (Jan Rodak)
  - Remove default id of Remediation (Jan Rodak)
  - Specify data types of OvalTest (Jan Rodak)
  - Specify data types of OvalObject (Jan Rodak)
  - Specify data types of OvalNode (Jan Rodak)
  - Specify data types of Group (Jan Rodak)
  - Create objects Identifier and Reference (Jan Rodak)
  - Use buildin function asdict (Jan Rodak)
  - Generate json output from report structure (Jan Rodak)
  - Ignore generated JSON reports (Jan Rodak)
  - Create tests (Jan Rodak)
  - Use report_generators sub package (Jan Rodak)
  - Create a JSON generator shell (Jan Rodak)
  - Create report_generators sub package (Jan Rodak)
  - Add format JSON to cli (Jan Rodak)
  - Fix W1514 (Jan Rodak)
  - Update pylint config (Jan Rodak)
  - Add a copy to the clipboard for the rule ID field (Jan Rodak)
  - Fix problem with the formatting of command line options (Jan Rodak)
  - Replace default value TextIOWrapper with name of file in man page (Jan Rodak)
  - Remove enumerte of choices for alternative options (Jan Rodak)
  - Format lists of descriptions of choices (Jan Rodak)
  - Fix FIRST_HIDDEN_ELEMENT is null (Jan Rodak)
  - Remove unused template file (Jan Rodak)
  - Move CSS style to separate file (Jan Rodak)
  - Minimalize the usage of inline styles (Jan Rodak)
  - Add footer to report (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.1-1
changelog:
  - 0.2.1 (Jan Rodak)
  - Add rule weight attribute to report (Jan Rodak)
  - Parse rule weight attribute (Jan Rodak)
  - Add weight attribute to rule datastructure (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.2-0
changelog:
  - 0.2.2 (Jan Rodak)
  - Clean up CI jobs titles (Evgeny Kolesnikov)
  - Fix RHEL8/EPEL8 build and test integration (Evgeny Kolesnikov)
  - Show message for OVAL object (Jan Rodak)
  - Parse message of collected OVAL object (Jan Rodak)
  - Create OvalObjectMessage (Jan Rodak)
  - Create a clickable rule title to show rule detail (Jan Rodak)
  - Add a copy remediation to the clipboard (Jan Rodak)
  - Uderline remediation summary (Jan Rodak)
  - Replace word search with filter (Jan Rodak)
  - Fix compatibility issue with python3.8 in the test suite (Jan Rodak)
  - Execute test suite with python3.8 and the latest python (Jan Rodak)
  - Create package dependency test for centos stream 8 (Jan Rodak)
  - Create copr build for rhel8 (Jan Rodak)
  - Fix TypeError: 'type' object is not subscriptable coused by downgrade (Jan Rodak)
  - Downgrade the minimum version of python (Jan Rodak)
  - Add spec file for rhel8 (Jan Rodak)
  - Fix W3601 (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.3-1
changelog:
  - 0.2.3 (Jan Rodak)
  - Determine which product use (Jan Rodak)
  - Discover upstream (Jan Rodak)
  - Run only smoke test in Testing Farm (Jan Rodak)
  - Add weekly execution of integration test (Jan Rodak)
  - Add tmt tests (Jan Rodak)
  - Add tmt plan (Jan Rodak)
  - Modify the smoke test to use different ARF reports (Jan Rodak)
  - Add script for generation of ARF report (Jan Rodak)
  - Add filter for rule id (Jan Rodak)
  - Select new multi-check rules (Jan Rodak)
  - Create copy of multi-check rule for every OVAL definition (Jan Rodak)
  - Make method _get_applicable_cpe_ids_for_machine part of ProfileInfo and rename the method to get_list_of_cpe_platforms_that_satisfy_evaluation_target (Jan Rodak)
  - Adapt input of oval_cpe_definiton in test (Jan Rodak)
  - Adapt the mapping of OVAL definitions to the new OVAL definition analysis system and specify which OVAL result report is for CPE (Jan Rodak)
  - Parse all OVAL definition from all OVAL result reports (Jan Rodak)
  - Add parsing of OVAL refence to OVAL report (Jan Rodak)
  - Load all oval reports present in ARF report (Jan Rodak)
  - Fix typo in link (Jan Rodak)
  - Sync tests with downstream (Jan Rodak)
  - Add required parameter (Jan Rodak)
  - Move unit tests from interation_tests direcory (Jan Rodak)
  - Move function get_fake_args to test utils (Jan Rodak)
  - Create separate job propose_downstream for EPEL8 (Jan Rodak)
  - Sort chapters (Jan Rodak)
  - Add manual about report content (Jan Rodak)
  - Add assets (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add license tag (Jan Rodak)
  - Add explanation of result of OVAL definition (Jan Rodak)
  - Parse class of OVAL definition (Jan Rodak)
  - Add tests for CPE AL (Jan Rodak)
  - Fix negation of logical test (Jan Rodak)
  - Add support for check-fact-ref element in CPE-AL (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.4-1
changelog:
  - 0.2.4 (Jan Rodak)
  - Rename field Result explained to Class explained (Jan Rodak)
  - Add button back to top (Jan Rodak)
  - Generate tooltip when hover the mouse over the OVAL operator (Jan Rodak)
  - Fix persistance of checkboxes after refresh browser (Jan Rodak)
  - Add functionality to buttons (Jan Rodak)
  - Add buttons (Jan Rodak)
  - Set logging severity from warning to info for missing fonts problem (Jan Rodak)
  - Change fonts to week dependency (Jan Rodak)
  - Disable scrollbar (Jan Rodak)
  - Show tooltip for NOT (Jan Rodak)
  - Add explanations (Jan Rodak)
  - Generate tooltip (Jan Rodak)
  - Set tooltip position for OVAL and CPE AL operators (Jan Rodak)
  - Add new tooltip when user click on copy to clipboard (Jan Rodak)
  - Rename tooltip class (Jan Rodak)
  - Add new lines on end of file (Jan Rodak)
  - Update eslint config (Jan Rodak)
  - Implement clear button for search bar (Jan Rodak)
  - Change title (Jan Rodak)
  - Use the same title for the page title and report title (Jan Rodak)
  - Using span element instead of link element when href is not available (Jan Rodak)
  - Add non-breaking space (Jan Rodak)
  - Add missing package (Jan Rodak)
  - Update modules docs (Jan Rodak)
  - Add documentation on how to run the test suite (Jan Rodak)
  - Add usage from source (Jan Rodak)
  - Add installation from source and PyPi (Jan Rodak)
  - Update README (Jan Rodak)
  - Sync generate_arf.sh (Jan Rodak)
  - Remove execution of integration test on push to main (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-14
changelog:
  - Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
  - Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
  - Include caveat for crypto-policy in sshd manpage (#2044354)
  - Change log level of FIPS specific log message to verbose (#2050511)
  - Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
  - Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-19.1
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19762
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19820


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-20
changelog:
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-1684
  - Add comment to OpenSSH server config about FIPS-incompatible key
    Resolves: RHEL-5221
  - Avoid killing all processes on system in case of race condition
    Resolves: RHEL-11548
  - Avoid sshd_config 256K limit
    Resolves: RHEL-5279
  - Using DigestSign/DigestVerify functions for better FIPS compatibility
    Resolves: RHEL-5217
  - Fix GSS KEX causing ssh failures when connecting to WinSSHD
    Resolves: RHEL-5321


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-22
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19308
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19788


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: Feng Weiyao <wynnfeng@tencent.com> - 1:1.1.1k-9.2
changelog:
  - Fix CVE-2021-3711:Check the plaintext buffer is large enough when decrypt
    Resolves: CVE-2021-3711


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
changelog:
  - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
    Resolves: RHEL-14245
  - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
    Resolves: RHEL-14239


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
changelog:
  - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
    excessively long X9.42 DH keys or parameters may be very slow
    Resolves: RHEL-16538


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
changelog:
  - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
    (a proper fix for CVE-2020-25659)
    Resolves: RHEL-17696


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067146


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2092462
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090372
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098279


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-12
changelog:
  - Implemented new FIPS requirements in regards to KDF and DH selftests
  - Disallow certificates with explicit EC parameters


author: Sahana Prasad <sahana@redhat.com> 1.1.1g-14
changelog:
  - Fix CVE-2021-3450 openssl: CA certificate check bypass with
    X509_V_FLAG_X509_STRICT
  - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-1
changelog:
  - Update to 0.4.8-1
  - RSA key generation on the token
  - RSA-OAEP and RSA-PKCS encryption support
  - RSA-PSS signature support
  - Support for OpenSSL 1.1.1 beta
  - Removed support for OpenSSL 0.9.8
  - Various bug fixes and enhancements


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-2
changelog:
  - Require OpenSSL >= 1.0.2
  - Fixed missing declaration of ERR_get_CKR_code()
  - Add support to use EC keys and tests (#1625338)
  - Exposed check_fork() API
  - Fixed memory leak of RSA objects in pkcs11_store_key()
  - Updated OpenSSL license in eng_front.c
  - Fixed build for old C dialects
  - Allow engine to use private key without PIN
  - Require DEBUG to be defined to print debug messages
  - Changed package description


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-1
changelog:
  - Update to 0.4.10 (#1745082)
  - Add BuildRequires for OpenSSL >= 1.0.2, required for testing
  - Print tests logs if failed during build
  - Small bug fixes such as removal of unused variable
  - Search objects in all matching tokens (#1705505)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Luya Tshimbalanga <luya@fedoraproject.org> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - Drop no longer needed upstream patch
  - Rename subpackge module to python3-*
  - Fix correct python module installation path


author: Luya Tshimbalanga <luya@fedoraproject.org> - 7.0.0-3
changelog:
  - Disable python3 binding for CentOS and Red Hat Enterprise
  - On RHEL and CentOS, glfw is exclusive for x86_64
  - Switch to pkgconfig build requirements as possible


author: David Sommerseth <dazo@eurephia.org> - 2.4.6-3
changelog:
  - Enable the asynchronous push feature, which can improve connect speeds with slow authentication backends


author: David Sommerseth <davids@openvpn.net> - 2.4.12-2
changelog:
  - Fix false exit status on pre runtime scriptlet (Elkhan Mammadli <elkhan@almalinux.org>, RHBZ#2239722)
  - Misbehaving systemctl scriptlet globbing issues (RHBZ#1887984)


author: Peter Hanecak <hany@hany.sk> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Dropped pathes (both CVEs fixed in 0.7.7)
  - Added BuildRequires: gcc
    (https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot)


author: Martin Brandenburg <martin@martinbrandenburg.com> - 2.9.7-3
changelog:
  - Disable usrint on all architectures as it appears broken with latest glibc.
  - Add ghostscript-tools-dvipdf dependency.


author: Neal Gompa <ngompa13@gmail.com> - 1.74-1
changelog:
  - Update to upstream version 1.74
  - Drop merged patches
  - Rediff remaining patches
  - Move newns to /usr/libexec/os-prober (debuginfo generation works)
  - Mark copyright file as license file


author: Peter Jones <pjones@redhat.com> - 1.74-7
changelog:
  - Make gcc use -Wl,-z,now -Wl,-z,relro -pie.  Dunno why the default didn't
    pick this up.
    Resolves: rhbz#1624158


author: Christian Kellner <christian@kellner.me> - 30-1
changelog:
  - Upstream release 30
  - Ship osbuild-mpp in new tools sub-package.
  - Remove executable bit from schemata files.


author: Christian Kellner <gicmo@redhat.com> - 35-2
changelog:
  - Include patch for ostree.config stage to support the selection of
    the bootloader backend.
  - Include patch to fix a potential crash in the detection of rhsm
    secrets when 'redhat.repo' is missing.


author: Matej Tyc <matyc@redhat.com> - 1.2.1-6
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1834716
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2007981


author: Matej Tyc <matyc@redhat.com> - 1.2.1-7
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2063179


author: Matej Tyc <matyc@redhat.com> - 1.2.1-9
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129008
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2000998


author: Matej Tyc <matyc@redhat.com> - 1.1.1-6
changelog:
  - Improved handling of conflicts between packages removed vs software wanted to be installed - rhbz#1892310


author: Fabiano Fidêncio <fidencio@redhat.com> - 20191125-1
changelog:
  - Updated to v20191125 release
  - Resolves: rhbz#1780529 - Update to the latest upstream release
  - Add rhel8.2 & rhel7.8 entries
  - Remove upstream virtio-win / spice-guest-tools drivers


author: Fabiano Fidêncio <fidencio@redhat.com> - 20200529-1
changelog:
  - Update to v20200529 release
  - Resolves: rhbz#1837756 - osinfo-db is out of date
  - Resolves: rhbz#1707119 - Provide information about UEFI support for guests (osinfo-db)


author: Fabiano Fidêncio <fidencio@redhat.com> - 20200813-1
changelog:
  - Update to v20200813 release
  - Related: rhbz#1837756 - osinfo-db is out of date
  - Resolves: rhbz#1868030 - 'osinfo-query os' is missing latest version of Ubuntu and Oracle Linux


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-2
changelog:
  - Resolves: rhbz#1681879 - osinfo-db-tools changes blocked until gating
                             tests are added


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1712426 - New defects found in
                             osinfo-db-tools-1.5.0-2.el8


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-4
changelog:
  - Related: rhbz#1712426 - New defects found in
                            osinfo-db-tools-1.5.0-2.el8


author: Colin Walters <walters@verbum.org> - 2020.4-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2020.4
  - We plan to use per-object-fsync for etcd in OpenShift 4
  - Resolves: #1861507


author: Colin Walters <walters@verbum.org> - 2020.5-2
changelog:
  - Update to https://github.com/ostreedev/ostree/releases/tag/v2020.5
    Specifically to fix readonly-sysroot for e.g. RHEL Edge and
    older RHCOS versions
  - Related: #1861507


author: Colin Walters <walters@verbum.org> - 2020.5-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2179/commits/06ed04a816141914adb9bd3e32392801fce5bc8e
    Resolves: #1867601


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2027788


author: Luca BRUNO <lucab@redhat.com> - 2022.2-5
changelog:
  - Backport enablement patches for Secure Execution on s390x
    https://github.com/ostreedev/ostree/pull/2694
    Resolves: rhbz#2120522
  - Backport security fix to verify signatures are minimum length (advisory GHSA-gqf4-p3gv-g8vw)
    https://github.com/ostreedev/ostree/pull/2696
    Resolves: rhbz#2119444


author: Colin Walters <walters@verbum.org> - 2022.2-6
changelog:
  - Backport https://github.com/ostreedev/ostree/commit/0085494e350c72599fc5c0e00422885d80b3c660
  - Resolves: rhbz#2134629


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.2-8
changelog:
  - Backport for https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
  - Resolves: rhbz#2229895


author: Dave Love <loveshack@fedoraproject.org> - 2.3-1
changelog:
  - New version
  - Update source URL
  - Remove jinja patch
  - Drop broken python2 package (not supported recently for want of builtins
    module)
  - Install python in sitearch directory, not sitelib


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.2.8-1
changelog:
  - 1.2.8 (Jan Rodak)
  - Changes name of test functions (Jan Rodak)
  - Changes output of test_commands (Jan Rodak)
  - Changes how are loaded path (Jan Rodak)
  - Removes an unnecessary method (Jan Rodak)
  - Improves naming of metodes (Jan Rodak)
  - Reworks completion of message (Jan Rodak)
  - Creates global namespaces for parsing XML (Jan Rodak)
  - Renames parsers classes (Jan Rodak)
  - Changes methods to static methods in the parser for comments (Jan Rodak)
  - Reduces the number of parameters in the method (Jan Rodak)
  - Moves the creation of the test node and the extended definition node to separate methods (Jan Rodak)
  - Changes method to static method in the parser for oval scan definitions (Jan Rodak)
  - Uses global dictionary for conversion bool values (Jan Rodak)
  - Simplify the method (Jan Rodak)
  - Changes methods to static methods in the parser for test info (Jan Rodak)
  - Improves code formatting (Jan Rodak)
  - Removes an unnecessary method (Jan Rodak)
  - Improves search in oval system characteristics (Jan Rodak)
  - Changes tests for new arf xml parser (Jan Rodak)
  - Changes clinet for new arf xml parser (Jan Rodak)
  - Improves raise error (Jan Rodak)
  - Removes unnecessary variables (Jan Rodak)
  - Improves xml validation (Jan Rodak)
  - Reworks loading rules form profile (Jan Rodak)
  - Changes formatting in a benchmark for ARF XML parser (Jan Rodak)
  - Moves XML parser part to separate directory (Jan Rodak)
  - Reworks check for the generated HTML (Jan Rodak)
  - Reworks generating HTML (Jan Rodak)
  - Reworks opening web browser with a report (Jan Rodak)
  - Fixes tests after change verbose output (Jan Rodak)
  - Removes unnecessary function parameter (Jan Rodak)
  - Rework verbose output (Jan Rodak)
  - Renemes class (Jan Rodak)
  - Creates sub modul for creating HTML (Jan Rodak)
  - Updates tests (Jan Rodak)
  - Implements new OVAL gate evaluation to OVAL tree (Jan Rodak)
  - Reworks OVAL gate evaluation (Jan Rodak)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.3.3-1
changelog:
  - 1.3.3 (Jan Rodak)
  - Create unit test (Jan Rodak)
  - Fix issue 204 (Jan Rodak)
  - Remove unused variable (Jan Rodak)
  - Add missing var declarator (Jan Rodak)
  - Fix pylint R0801: Similar lines in 2 files (Jan Rodak)
  - Fix pylint too-many-public-methods (Jan Rodak)
  - Ignore pylint too-few-public-methods (Jan Rodak)
  - Ignore pylint consider-using-with (Jan Rodak)
  - Fix pylint use-dict-literal (Jan Rodak)
  - Fix pylint unspecified-encoding (Jan Rodak)
  - Format string with f-string (Jan Rodak)
  - Fix typo (Jan Rodak)


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.


author: Daiki Ueno <dueno@redhat.com> - 0.23.21-4
changelog:
  - Fix realloc usage on proxy cleanup (#1894979)
  - Make 'trust anchor --store' preserve all attributes from .p11-kit files


author: Daiki Ueno <dueno@redhat.com> - 0.23.22-1
changelog:
  - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363)
  - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff
  - Add xsltproc to BR


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix regressions in crm_attribute and crm_master argument handling
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-1
changelog:
  - Allow per-host fence delays for a single fence device
  - Use OCF 1.1 enum type in cluster option metadata for better validation
  - crm-resource --force-* now works with LSB resources
  - Allow spaces in pcmk_host_map
  - ACL group names are no longer restricted to a unique XML id
  - Rebase on upstream 2.1.2
  - Ensure upgrades get compatible Corosync libraries
  - Resolves: rhbz1082146
  - Resolves: rhbz1281463
  - Resolves: rhbz1346014
  - Resolves: rhbz1376538
  - Resolves: rhbz1384420
  - Resolves: rhbz2011973
  - Resolves: rhbz2027006


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2003151
  - Resolves: rhbz2027370
  - Resolves: rhbz2032027


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Improve display of failed actions
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base description in option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Resolves: rhbz1470834
  - Resolves: rhbz1506372
  - Resolves: rhbz2027370
  - Resolves: rhbz2039675
  - Resolves: rhbz2042550


