# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Paul Howarth <paul@city-fan.org> - 1.0.5-1
changelog:
  - Update to 1.0.5
    - Added proper clean targets to enable multiple builds
    - Added examples directory
    - Correctly detects 32/64-bit build environment
    - Allow explicit configure for 32/64-bit environment
  - Cosmetic spec file clean-ups


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-17
changelog:
  - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574,
    CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578,
    CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638
  - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206,
  - Resolves: rhbz#1716207, rhbz#1716208


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220930-2
changelog:
  - Update to the 20230131 drop.
  - Updated CPUs:
      GN-A1 00a00f10: 2022-09-01, rev 0a001075 -> 2023-01-17, rev 0a001078
      GN-B1 00a00f11: 2022-08-30, rev 0a0011a8 -> 2023-01-14, rev 0a0011ce
      GN-B2 00a00f12: 2022-08-30, rev 0a00122e -> 2023-01-17, rev 0a001231


author: Simone Conti <s.conti@itnok.com> - 1.3.3.0-1
changelog:
  - Adding patch to rename kernel module from `aqc111` to `aqc111u`
  - Re-packing for XCP-ng of Marvell AQC111U driver


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Ville Skyttä <ville.skytta@iki.fi> - 8.4.5-4
changelog:
  - Remaining improvements from #480288:
  - Add dependencies on libxslt and docbook-style-xsl.
  - Install dblatex style sheets.
  - Exclude unneeded *.py[co].
  - Install python API.
  - Specfile cleanups.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 8.6.8-1
changelog:
  - Update to latest upstream version
  - Move things around make docs dir actually working
  - Add proper requires on vim-filesystem
  - Run testsuite
  - Split music and latex support to subpackages


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Andrew Lindh <andrew@netplex.net> - 2.5.5-1
changelog:
  - Release test version of driver 2.5.5
  - Thanks to github s-master for starting the XCP driver setup


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59
changelog:
  - Support for additional signing algorithms in rndc (#1501531)
  - New autogenerated rndc keys will use hmac-sha256 algorithm


author: Nick Clifton <nickc@redhat.com> 2.27-21.base
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1513014)


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.3.4-1
changelog:
  - drop unnecessary explicit version requirement on udev
  - bugfix: start indices at 1 not 0, to match Dell and HP server port designations
  - bugfix: don't assign names to unknown devices
  - bugfix: don't assign duplicate names


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.5-1
changelog:
  - install dump_pirq into /usr/sbin
  - fix udev rule, skip running if NAME is already set
  - move udev rule to /lib/udev/rules.d by default


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.7-1
changelog:
  - drop dump_pirq, suggest use biosdecode instead
  - don't use '#' in names, use 'p' instead, by popular demand
  - properly look for SMBIOS, then $PIR, then recurse
  - Add kernel command line parameter "biosdevname={0|1}" to turn off/on biosdevname
  - Fix segfault when BIOS advertises zero sized PIRQ Routing Table
  - Add 'bonding' and 'openvswitch' to the virtual devices list
  - fail PIRQ lookups if device domain is not 0
  - Don't suggest names if running in a virtual machine (Xen, KVM,
    VMware tested, but should work on others)
  - Typo fixes


author: Andrew Cooper <Andrew.Cooper3@citrix.com> - 0.3.7-1@XS_RELEASE@
changelog:
  - Apply XenServer specific patches
  - Remove udev rules
  - Prevent bailing in a virtualized environment


author: Patsy Franklin <pfrankli@redhat.com> - 3.0.4-1
changelog:
  - Rebase to 3.0.4
    - Removed obsolete patch.
    - Added build require of flex so that tests will run.
    - Removed duplicate/unpackaged files.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.5-1.1
changelog:
  - Update to 3.54.5-1
  - *** Upstream changelog ***
  - * Tue Aug 01 2023 Mark Syms <mark.syms@citrix.com> - 3.54.5-1
  - - Report control timeouts correctly
  - * Wed Jun 21 2023 Mark Syms <mark.syms@citrix.com> - 3.54.4-1
  - - Remove unused and broken libvhdio
  - - CA-377624: Guard against NULL tiocb in lio event handler
  - * Wed Apr 12 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-2
  - - Rebuild
  - * Wed Mar 29 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-1
  - - Rebuild
  - * Mon Feb 27 2023 Mark Syms <mark.syms@citrix.com> - 3.54.2-1
  - - Rebuild
  - * Fri Feb 17 2023 Mark Syms <mark.syms@citrix.com> - 3.54.1-1
  - - Rebuild
  - * Thu Feb 16 2023 Mark Syms <mark.syms@citrix.com> - 3.54.0-1
  - - Release 3.54.0
  - - Update compiler set
  - - Various NBD server improvements


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-2.1
changelog:
  - Update to 3.54.6-2
  - *** Upstream changelog ***
  - * Thu Sep 28 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-2
  - - CP-40871: Enable rate limit control on unpause
  - * Thu Sep 07 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-1
  - - CP-40871: return the number of sectors coalesced from vhd-util
  - - CP-45025: Avoid retries except in a few specific cases
  - - CA-382087: Only write the bitmap if the contents have changed


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-3.1
changelog:
  - Sync with 3.54.6-3
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Mark Syms <mark.syms@citrix.com> - 3.54.6-3
  - - Rebuild against libxenstore.so.4


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.9-1.1
changelog:
  - Sync with 3.54.9-1
  - *** Upstream changelog ***
  - * Thu Apr 25 2024 Mark Syms <mark.syms@citrix.com> - 3.54.9-1
  - - Address various memory management issues
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.54.8-1
  - - CP-48048: Blktap fix code coverage (XS8 only)
  - - tap-ctl: Improve list output filtering
  - - CP-46763: When VBD queue is not ready call the driver completion
  - - CP-46778: always issue request via issue_requests
  - - CP-46771: separate queue checks for completed and new requests.
  - - CP-46764: mask ring event handlers before quiescing the queue
  - - CP-46764: When the VBD is quiesced skip checking for requests to submit
  - - Fix setting of CFLAGS for mockatests
  - - Do not free iconv cd if allocation fails
  - - Fix the order of linker options in CBT
  - - Fixup various bits of incorrect automake usage
  - - CA-384162: Send completions for all partial responses
  - - CA-390490: allocate vhd request before locking bat
  - - CP-48057: Add unit tests for drivers/scheduler.c


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.4-1.1
changelog:
  - Sync with 3.55.4-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Mark Syms <mark.syms@cloud.com> - 3.55.4-1
    - CA-392151 lcache.c uses wrong buffer size definition
    - CA-403297: when storing read-through do not mirror
    * Mon Nov 18 2024 Mark Syms <mark.syms@cloud.com> - 3.55.3-1
    - CP-52620: enable local caching after opening all other images
    * Tue Nov 05 2024 Tim Smith <tim.smith@cloud.com> - 3.55.2-1
    - CA-387575 Remove static libraries and libtool archives from devel package
    - Correct name of exposed NBD server
    - CA-401174 Filedescriptor leak in NBD option negotiation
    * Mon Sep 16 2024 Tim Smith <tim.smith@cloud.com> - 3.55.1-1
    - Redo the revert of an incorrect NBD FD leak fix
    * Fri Sep 13 2024 Tim Smith <tim.smith@cloud.com> - 3.55.0-1
    - CP-46765 - Fix asan issues in unit tests
    - CA-396659: rationalise bitops and fix overflow issues
    - CA-396659: delete legacy debt utility vhd-update
    - Handle scheduler uuid overflow explictly
    - CP-50952 Autodetect NBD server protocol version on client connect
    - Fix use of incorrect label in error case
    - CA-397082 Properly fix FD leak in NBD server
    - CP-50955 Add a new-style NBD server for each VDI
    * Tue Aug 06 2024 Mark Syms <mark.syms@cloud.com> - 3.54.10-1
    - CA-391882: fix nbd connection fd leak bug
    - Remove some unnecessary build dependencies


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.0.0-2
changelog:
  - Update for XCP-ng 8.0.0
  - Clean spec file: remove Group and BuildRoot definitions
  - Remove 'dist' macro since it's built before xcp-ng-release


author: Yann Dirson <yann.dirson@vates.fr> - 8.3.0-2.73c8834
changelog:
  - Switch to python3
  - COMPANY_NAME update to "Vates, XenServer and others"
  - COPYRIGHT_YEARS up to 2023


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.2-5
changelog:
  - Override module directory for depmod to make sure our alternative driver takes precedence
  - Simplify module path (simply /lib/modules/{version}/override/)


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Ray Strode <rstrode@redhat.com> 69.1.6-1
changelog:
  - Update syslinux background to black
    Resolves: #1003873
  - Prune unused images from anaconda/ after talking to #anaconda


author: Jim Perrin <jperrin@centos.org> - 70.0.5-1
changelog:
  - Properly import all backgrounds images
  - update poweredby.png
  - Add CREDITS for artwork attribution as possible. 
  - Update anaconda rnotes images from Tuomas, inspired by Alain


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Patsy Franklin <pfrankli@redhat.com> - 2.8.12.2-1
changelog:
  - Rebase to 2.8.12.2 including some recent patches. (BZ #1195919)
  - Fix to find python libs version 3.4 (BZ #1246369)
  - Don't fail if certain Qt modules are unavailable. (BZ #1192188)


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-70
changelog:
  - filter out -fstack-protector-strong, -grecord-gcc-switches and new
    i686, ppc and s390 tunings (#1048850)


author: Edwin Török <edvin.torok@citrix.com> - v1.1.0-1
changelog:
  - Add sbd and xapi-clusterd to control-slice
  - Add qemuback to service whitelist
  - CP-24885: Add infrastructure to let services depend ability to set RT priority
  - CP-24885: Enable sbd to assume RT priority


author: Edwin Török <edvin.torok@citrix.com> - 1.3.0-1
changelog:
  - CP-38750: fix typo in xapi-storage-script.service
  - CP-38750: whitelist more control-plane services


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Edwin Török <edvin.torok@citrix.com> - 2.4.3-12.xs+2.0.0
changelog:
  - qdevice msgio: Fix reading of msg longer than i32
  - totemsrp: Check join and leave msg length
  - totemsrp: Implement sanity checks of received msgs
  - totemudp: Check lenght of message to sent
  - Use versioned xenserver-corosync Provides
  - Fix auto-tie-breaker reload for CA-265743
  - CP-24481: improve config_version semantics
  - CA-269136: apply upstream fix for votoequorum


author: Mark Syms <mark.syms@citrix.com> - 2.4.3-14.xs+2.1.2
changelog:
  - CP-34143: add coverity macros
  - CP-34143: define status analysis
  - CA-354793 Slightly increase logging on quorum change


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a to e2efacdd
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.0-3
changelog:
  - Rebase to github commits 494a796e to 63419fb9
    Resolves: rhbz#1497316
  - Fix IRQ stack transition failure due to kernel's removal of 64-byte gap
    Resolves: rhbz#1530887


author: Dave Anderson <anderson@redhat.com> - 7.2.0-5
changelog:
  - Additional support for analyzing an SADUMP dumpfile if KASLR
    and KPTI are both enabled
    Resolves: rhbz#1504467


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.0-1
changelog:
  - mergerepo_c: Prepend protocol (file://) for URLs in pkgorigins (if --koji is used)
  - Update bash completion
  - doc: Update manpages
  - mergerepo: Fix NVR merging method
  - mergerepo: Fix behavior of --all param
  - createrepo: Add --cut-dirs and --location-prefix options
  - misc: Add cr_cut_dirs()
  - mergerepo: Use better version comparison algorithm
  - utils: Port cr_cmp_version_str() to rpm's algorithm (rpmvercmp)
  - misc: Rename elements in cr_Version structure
  - mergerepo: Fix version-release comparison for packages when --all is used
  - mergerepo: Show warnings if some groupfile cannot be automatically used
  - mergerepo: Exit with error code when a groupfile cannot be copied


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.9.1-1
changelog:
  - Fix double free during parsing broken XML metadata (Issue #33)
  - Tests: Add acceptance test for --general-compress-type option
  - Fix 'CR_CW_UNKNOWN_COMPRESSION cannot be used' error
  - Refactoring: Fix compiler warnings
  - Add --general-compress-type option (RhBug 1253850)
  - Enable drpm support when drpm library is detected on system (RhBug: 1261031) (Issue #37)
  - fix traceback on non-complete datetime information (Jarek Polok)
  - parsehdr: Skip broken dependency with bad (non-numerical) epoch and print warning about that
    (https://lists.fedoraproject.org/pipermail/devel/2015-August/213882.html)
  - misc: cr_str_to_evr(): Return NULL instead of "0" for bad (non-numerical) epoch
  - updateinfo: Fix a typo in the package release attribute (Luke Macken)
  - CMake: Don't require CXX compiler
  - Tests for different checksum type for RPMs and repodata files (#31)
  - Support different checksum type for RPMs and repodata files (#31)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.10.0-1
changelog:
  - Python 3 support (made by Ralph Bean)
  - Modify gen_rst.py to indicate --sqliterepo is an option too (Neal Gompa)
  - Do not compress manpages at generation time (Neal Gompa)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.10.0-4
changelog:
  - Don't own python3_sitearch dir in python3 subpkg
  - Use %license macro
  - Follow modern packaging guidelines
  - Cleanups in spec file
  - Follow packaging guidelines about SourceURL
  - Fix license


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-30
changelog:
  - 1386751 - cups-lpd program did not catch all legacy usage of ISO-8859-1
  - 1441860 - CUPS may fail to start if NIS groups are used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1626372


author: Yann Dirson <yann.dirson@vates.tech> - 9.49.41-2.1
changelog:
  - Reinstate creation of utmp group, and remove dependency on XS' fork
    of the setup RPM where it has been transfered for them.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.1
changelog:
  - Cut the corosynclib-devel build dependency by disabling the cluster subpackage
  - Cut the dlm-devel build dependency by disabling the lockd subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.2
changelog:
  - Drop the obsolete lvm2-sm-config subpackage
  - It was unused, and it didn't require the right Release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-16.1
changelog:
  - Rebase on 7:2.02.180-16
  - *** Ustream changelog ***
  - * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
  - - CA-368585 Drop sm-config sub-package
  - - CA-380627 Suppress errors when attempting to start services
  - - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-18.1
changelog:
  - Rebase on 7:2.02.180-18
  - *** Upstream changelog ***
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-18
    - CP-46075: Disable cluster and cmirror as not used and introduce extra deps
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-17
    - CP-46075: Compatible with XS9
    * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
    - CA-368585 Drop sm-config sub-package
    - CA-380627 Suppress errors when attempting to start services
    - CA-384527 add lvm filter to skip nbd device scan


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1957522)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986841)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el7
changelog:
  - Drop gdb-linux_perf-bundle.patch and v1.5-libipt-static.patch.
  - Include gdb-dts-use-decltype.patch.
  - Rebase to 10.2 (RH BZ 1958327)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-5
changelog:
  - Revert "Bundle a version of tar to make it compatible in EL7"
  - Keep BR: perl(Digest)
  - Remove --clamp-mtime option on tar of el7.
  - Add Requires perl(Digest::MD5) and perl(Digest::SHA*) on dpkg-perl (#1628409)


author: Sérgio Basto <sergio@serjux.com> - 1.18.25-8
changelog:
  - Requires perl(MIME::Lite) on dpkg-dev (rhbz #1678637)
  - Adds check section and performs unit tests but ignores failures


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.2-5
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)
  - modernize spec


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.47.0-1.1
changelog:
  - Replace %ldconfig_scriptlets with what it would evaluate to
  - This macro would require epel-rpm-macros, which is not available in XCP-ng 8.2


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.2
changelog:
  - CA-383046: Use the emulated RTC to implement time services
  - CA-383095: Add a patch to fix an unusual Windows PXE boot hang
  - CP-45175: Add debug messages to XenVariable
  - CP-45175: Disable the BGRT
  - CP-45175: Add extra debug statements
  - CP-45175: Tweak debug levels
  - Include g++ from devtoolset as a build requirement


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.4.1
changelog:
  - Sync with 20220801-1.7.4
  - *** Upstream changelog ***
  - * Fri Feb 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.4
  - - CA-388017: Fix most PixieFail vulnerabilities
  - - Fix CVE-2023-45229 - Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  - - Fix CVE-2023-45230 - Buffer overflow in the DHCPv6 client via a long Server ID option
  - - Fix CVE-2023-45231 - Out of Bounds read when handling a ND Redirect message with truncated options
  - - Fix CVE-2023-45232 - Infinite loop when parsing unknown options in the Destination Options header
  - - Fix CVE-2023-45233 - Infinite loop when parsing a PadN option in the Destination Options header
  - - Fix CVE-2023-45234 - Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  - - Fix CVE-2023-45235 - Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.5.1
changelog:
  - Sync with 20220801-1.7.5
  - *** Upstream changelog ***
  - * Wed Mar 20 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.5
  - - CA-390410: Disable some unneeded modules
  - - CA-390410: Downgrade some errors to warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.7.1
changelog:
  - Sync with 20220801-1.7.7
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.7
  - - CA-388489: Fix CVE-2023-45236, CVE-2023-45237, and additional fix for CVE-2023-45229
  - * Tue May 14 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.6
  - - CP-46076: Support xs9 build


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-1123
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-1
changelog:
  - Upstream removed the tarball for 1.12.2, which made Source0 invalid.
  - There is a new version (1.12.4), so update to the new version.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-2
changelog:
  - Strip libfakeroot-*.so (RHBZ#596735).
  - Verified that libguestfs still builds and runs with this change (this
    represents a fairly aggressive test of fakeroot).


author: Dominik Mierzejewski <rpm@greysector.net> - 1.24-1
changelog:
  - update to 1.24 (#1750054)
  - update source URL
  - drop obsolete patches
  - point to working URLs
  - make testsuite more verbose for the future
  - Apply all patches from Debian package (should fix libuser build)
  - fix root privilege faking for copied files/dirs (bug 887001)
  - fix LD_LIBRARY_PATH for multilib environment (bug 1241527)
  - update License: tag
  - don't strip the libraries in install, just keep the executable bit
  - when converting from latin1 to utf8, don't use the converted file
    if the conversion failed: the pt manpage is already utf8
  - alternativize libfakeroot and faked as well (bug 817088)
  - include Portugese manpages
  - add missing BR: libcap-devel
  - autogenerate most of the file list


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Simone Caronni <negativo17@gmail.com> - 2.2.4-7
changelog:
  - Removed ms-dos fonts.
  - Added check.
  - Replace make macro with actual command.
  - Added compile flags to make command.


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-25
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - improve filesystem content file to include symlinks and rootdir


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Petr Machata <pmachata@redhat.com> - 2.5.35-15
changelog:
  - Rename flex-static to flex-devel so that it gets to repositories of
    minor multi-lib arch (i386 on x86_64 etc.)
  - Resolves: #674301


author: Petr Machata <pmachata@redhat.com> - 2.5.36-1
changelog:
  - Rebase to 2.5.36
    - Drop flex-2.5.35-sign.patch, flex-2.5.35-hardening.patch,
      flex-2.5.35-gcc44.patch, flex-2.5.35-missing-prototypes.patch
    - Add flex-2.5.36-bison-2.6.1.patch
    - Add a subpackage doc
  - Resolves #842073


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.19.2-1.3
changelog:
  - Add xapi-24.19.2-update-new-fingerprint-fields-on-DB-upgrade.backport.patch, backported from XAPI project
  - Add xapi-24.19.2-more-fingerprint-field-updates-fixes.XCP-ng.patch to complement the fix
  - Fixes an issue where new fingerprint fields are not populated, which under
    some circumstances makes pool join fail.


author: Yann Dirson <yann.dirson@vates.tech> - 24.39.1-1.1
changelog:
  - Update to upstream 24.39.1-1
  - Reformat changelog to allow diffing with upstream
  - Adjust change to avoid pulling upgrade-pbis-to-winbind (XS8-only)
  - Reworked non-installation of yum plugins
  - Adjust xapi-23.31.0-open-openflow-port.XCP-ng.patch for file rename
  - Adjust xapi-24.11.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch
  - Drop xapi-24.16.0-openvswitch-config-update-fix-python2ism-in-python3.patch,
    merged upstream
  - Drop backport: xapi-24.19.2-update-new-fingerprint-fields-on-DB-upgrade.backport.patch
  - Drop ipv6 patches merged into v24.31.0
  - Drop xapi-24.19-2-fix-pem-fingerprint-startup.XCP-ng.patch now that #6006 is merged
  - New xen-api-24.39.1-test-disable-cancellable-sleep.patch: disable "cancellable sleep"
  flaky test
  - Add missing Requires: python3-wrapt
  - More traces for is_component_enabled (PR #6280)
  - IPMI fixes from psafont for testing (PR #6261)
  - Bump version requirement on jemalloc to get required libjemalloc.so.2
  - Upstream changelog:
    * Tue Jan 14 2025 Vincent Liu <shuntian.liu2@cloud.com> - 24.39.1-1
    - CA-404512: Add feature flag to the new clustering interface
    
    * Tue Nov 26 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-2
    - Bump release and rebuild
    
    * Mon Nov 25 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-1
    - IH-728: Refactor tracing logic
    - Update datamodel_lifecycle.ml
    - CA-401274: Remove external auth limitation during set_hostname_live
    - CP-49134: tracing: do not destroy stacktrace
    - CP-49078: Use Hashtbl within Schema
    - opam: update vhd packages' opam metadata
    - maintenance: compatibility with cstruct 6.2.0
    - CA-402326: Fetch SM records from the pool to avoid race
    - CA-402654: Partially revert 3e2e970af
    - CA-402263, xapi_sr_operatrions: don't include all API storage operations in all_ops
    
    * Wed Nov 13 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-3
    - Bump release and rebuild
    
    * Wed Nov 13 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-2
    - Bump release and rebuild
    
    * Mon Nov 11 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-1
    - CP-50475: Remove unnecessary Parallel atoms from the xenopsd queues
    - CP-50475: parallelize device ops during VM lifecycle ops
    - xapi_stdext_unix/test: Fix intermittent systemd cram test failure
    - Fix a build warning with GCC 12.3.0
    - Remove use of deprecated syslog Standard* type
    - CA-400860: rrdp-netdev - drop xenctrl, use xenstore to get UUIDs from domids instead
    - CP-51870: Delegate restarting systemd services order to systemd
    - CP-51938: Generate XML alert for cluster health
    - CP-50546: Remove initscripts family
    - Remove notion of weird string from sexpr library
    - CA-399396: Adjust the jemalloc parameters for memory performance
    - CP-52039: Drop Semaphore from Xapi_stdext_threads
    - CA-400560: Fix version segment division error
    - Do not include xapi-clusterd.service in toolstack.target
    - CA-401324: Update pvsproxy socket location
    - CA-400560: Support tilde in RPM version/release comparison
    - CA-401404: Only check previous active service status
    - CA-401242: avoid long-running, idle connections on VDI.pool_migrate
    - xapi_vdi: replaces nested if-elses with monadic Result
    - datamodel: Add all VDI operations to the SR operations variant
    - CA-401498: Fix test_systemd occasional timeout
    - CA-399629: make daily-license-check aware of never
    - license_check: clean up interface
    - license_check: update the concept of "never"
    - daily_license_check: Do not use floats for handling time
    - CA-400060: Introduce new field for sm class
    - CA-400060: Sm feature intersection
    - CA-400060: Reject pool join if sm features mismatch
    - Document Rbac module
    
    * Tue Oct 29 2024 Christian Lindig <christian.lindig@cloud.com> - 24.36.0-1
    - CA-400559: API Error too_many_groups is not in go SDK
    - chore: annotate types for non-returning functions
    - CA-400199: open /dev/urandom on first use
    
    * Wed Oct 23 2024 Christian Lindig <christian.lindig@cloud.com> - 24.35.0-1
    - CA-398341: Populate fingerprints of CA certificates on startup
    - CP-51527: Add --force option to pool-uninstall-ca-certificate
    - CA-400924 - networkd: Add bonds to `devs` in network_monitor_thread
    
    * Mon Oct 21 2024 Christian Lindig <christian.lindig@cloud.com> - 24.34.0-1
    - fix(test): avoid running XAPI hooks in unit tests
    - IH-715 - rrdp-netdev: Remove double (de)serialization
    - fixup! IH-715 - rrdp-netdev: Remove double (de)serialization
    - chore: update datamodel versions
    - IH-577 Implement v7 UUID generation
    - Update wire-protocol.md to have working Python3 code examples
    - Added WLB_VM_RELOCATION to the list of recognized messages.
    - Python command correction.
    - Remove unused Http_svr.Chunked module
    - chore: Fix some grammatical errors in cluster alerts
    - buf_io: remove unused function input_line
    - Access pvsproxy via a socket in /run
    - http-svr: change request_of_bio(_exn) to read_request(_exn)
    - xmlrpc_client: remove us of Buf_io
    - http-svr: remove read from Buf_io in read_body
    - xapi_http: unify cases in add_handler
    - Remove BufIO HTTP handler type completely
    - Remove now-unused Buf_io and associated tests
    - CA-400860: make CPU and netdev RRDD plugins pick up changes in domains
    - CP-51683: Make Cluster_health non-exp feature
    
    * Mon Oct 14 2024 Christian Lindig <christian.lindig@cloud.com> - 24.33.0-1
    - CA-392674: nbd_client_manager retry connect on nbd device busy
    - http-lib: add backtrace to logs on connection without response
    - http-lib: convert bash script to cram tests
    - http-lib: prepare test client for more commands
    - http-libs: add test about error logging
    - http-lib: use let@ for perf testing of the client
    - http-lib: make perf shorter
    - CA-399256: Ensure AD domain name check is case insensitive
    - Replace fold with of_list in rbac
    - maintenance: write interface files for vhd-tool
    - maintenance: add interface to vhd-tool's Chunked
    - maintenance: remove data from chd-tool's chunked datastructure
    - Revert "CP-48676: Don't check resuable pool session validity by default"
    - Revert "CP-48676: Reuse pool sessions on slave logins."
    - maintenance: remove unused code from stream_vdi
    
    * Thu Oct 10 2024 Christian Lindig <christian.lindig@cloud.com> - 24.32.0-1
    - xapi-stdect-unix: catch exceptions when testing the server
    - CP-51714: Remove noisy xenopsd debug logs
    - maintenance: avoid deprecated bindings in uuidm 0.9.9
    - ezxenstore: avoid copies when converting to and from uuids
    - CP-50603: Replace `c_rehash` with `openssl rehash` sub command
    - CA-400124: rrd: Serialize transform parameter for data sources
    - CA-400124 - rrdd: only serialize transform when it's not default
    - XSI-1722 fix timer for host heartbeat
    
    * Fri Oct 04 2024 Christian Lindig <christian.lindig@citrix.com> - 24.31.0-1
    - message-switch: remove dependency on async binaries
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.30.0-1
    
    - CP-32622, CP-51483: Switch to epoll
    - CA-399187: Allow gencert to be called without groupid
    - Date: Accept all valid timezones from client, allow sub-second precision
    - CP-50614: Tracing, optimize and reduce overhead
    - xe autocompletion: Fix prefix escaping bug
    - Fix network reset script in static IPv6
    - CA-398128: Be wary that dates in database lose precision
    - Don't use dhcp4 for none mode
    - CA-398138: Handle enum value unknown error for Go SDK
    
    * Mon Sep 16 2024 Christian Lindig <christian.lindig@citrix.com> - 24.29.0-1
    - Use templates to generate `Types.java`
    - Use templates to generate Java classes
    - CP-38343: xenopsd: GC and memory RRD stats
    - CP-38343: use sscanf to parse /proc
    - CA-396743: log non managed devices in PIF.scan
    - CA-396743: make Network.managed reflect PIF.managed
    - CA-396743: forbid setting NBD purpose on unmanaged networks
    - CA-396743: fix bridge name for unmanaged devices
    - Extend Java deserialization support for xen-api dates
    - Minor doc corrections.
    - Removed entries that don't correspond to API messages. Removed obsolete parsing for CSLG failures.
    - C SDK: curl flags are not needed since the SDK does not depend on curl.
    - Expand Go deserialization support for xen-api dates
    - Expand C# deserialization support for xen-api dates
    - Expand C deserialization support for xen-api dates
    - Split generation of Types.java into separate functions
    - Split generation of classes into separate functions
    - CA-397788: Execute pre shutdown hook for xapi
    - Add sr to the Sr_unhealthy error constructor
    - Add more description on sr health
    - CP-49448: Add handling logic for SR health state
    - CP-51352: Compare before setting a new value in `last_active`
    - CP-51352: Configurable threshold for updating `last_active`
    - Add Java SDK to SDK actions
    - Fix syntax in CustomDateDeserializer.java
    - CP-47509: Revisited the setting of response headers to avoid errors when multiple threads use the same session object.
    - CA-397599 XSI-1704 implement setter for blocked ops manually
    
    * Tue Sep 10 2024 Christian Lindig <christian.lindig@citrix.com> - 24.28.0-1
    - Update record_util tests to the current state
    - IH-689: Include auto-generated record_util
    - Introduce mli for xapi_clustering
    - Make Daemon.enabled as an Atomic.t
    - CA-398438: Signal exit to the watcher thread
    - Remove the condition check for Daemon.enabled
    - fix(CI): feature/py3 has been merged, refer to master now
    - fix(WLS): disable non-root unit test
    - Update the docs for Volume.compose
    - CP-51042: Introduce new SR.scan2 for SMAPI{v1,v2,v3}
    - Replace Xapi_sr.scan with Xapi_sr.scan2
    - CP-50422: Destroy authentication cache in disable_external_auth
    - CP-32625: xenops-cli - replace handwritten JSON prettifier with yojson
    - IH-666: Report guest AD domain name and host name in the API
    - CP-47617: Expose backwards compat info to update packaging tooling
    - CP-46933: Expose XAPI API version in the output of HTTP API /updates
    - [maintenance]: mark data only dirs as such
    - [maintenance] disable preprocessor for modules that do not need them
    - [maintenance] only copy test_data when running tests
    - [maintenance]: reduce run count for test_timer
    - [maintenance]: speed up device_number_test
    - [maintenance]: reduce iteration count for unixext_test
    - [maintenance]: speed up vhd tests
    - [maintenance]: reduce sleeps in concur-rpc-test.sh
    - [maintenance]: vhd_format_lwt_test: speed up by using Cstruct.compare
    
    * Wed Sep 04 2024 Christian Lindig <christian.lindig@citrix.com> - 24.27.0-1
    - CA-390883 CP-46112 CP-47334 CP-47555 CP-47653 CP-47869 CP-47935 CP-48466
    - CP-49148 CP-49896 CP-49900 CP-49901 CP-49902 CP-49903 CP-49904 CP-49906
    - CP-49907 CP-49909 CP-49910 CP-49911 CP-49912 CP-49913 CP-49914 CP-49915
    - CP-49916 CP-49918 CP-49919 CP-49920 CP-49921 CP-49922 CP-49923 CP-49925
    - CP-49926 CP-49927 CP-49928 CP-49930 CP-49931 CP-49934 CP-49975 CP-50091
    - CP-50099 CP-50100 CP-50172
    - Move Pyhton code to Python 3
    - CP-51278: define import_activate datapath operation
    - Fixup link.
    - Update VM failover planning document.
    - xe autocompletion: Only show required/optional prefixes when parameter name is
    - xe autocompletion: Exclude previously entered parameters before deciding
    
    * Thu Aug 29 2024 Christian Lindig <christian.lindig@citrix.com> - 24.26.0-1
    - quicktest: disable open 1024 fds on startup for now
    
    * Thu Aug 29 2024 Christian Lindig <christian.lindig@citrix.com> - 24.25.0-1
    - Quicktest: actually run the quickcheck tests too
    - xapi-fd-test: fix compatibility with old losetup
    - xapi-fd-test: fix BLK tests
    - xapi-fd-test: fix BLK EBADF
    - Quicktest: add unixext_test
    - xapi_fd_test: introduce testable_file_kind
    - xapi-fd-test: introduce with kind list
    - xapi-fd-test: introduce testable_file_kinds
    - xapi-fd-test: generate inputs for select
    - unixext_test: add test for select
    - CP-32622: introduce select-as-epoll in Unixext
    - xapi-fd-test: switch to testing Unixext.select
    - CP-32622: Thread.wait_timed_read/wait_timed_write
    - xenctrlext: remove xenforeignmemory module
    - IH-676: improve xe autocompletion
    - Allow xapi_globs specifications with descriptions
    - CP-50053: Add authentication cache
    - Cache external authentication results
    - Add feature flag to block starting VMs
    - Add feature flag to block starting VM appliances
    - Update datamodel lifecycle
    - http-lib: log reason that causes lack of response
    
    * Thu Aug 22 2024 Christian Lindig <christian.lindig@citrix.com> - 24.24.0-1
    - Add temporary exception for deprecation of `xmlStringDecodeEntities`
    - new-docs: Toggle hidden documentation only on header clicks
    - Revert "CP-51042: Raise error in sr-scan when SR.stat finds an unhealthy SR"
    
    * Tue Aug 20 2024 Christian Lindig <christian.lindig@citrix.com> - 24.23.0-1
    - CP-49212: Update datamodel for non-CDN update
    - CP-49212: Add UT for update datamodel for non-CDN update
    - CP-49213: Add new tar unpacking module
    - CP-49213: UT for add new tar unpacking module
    - CP-49214: Upload and sync bundle file
    - CP-49214: Allowed operations for sync bundle
    - CP-49214: UT for upload and sync bundle file
    - CP-49214: Refactor cli_operations
    - CP-49526: Resolve non-CDN design comments
    - CA-396540: Add API error for bundle syncing failure
    - CP-49217: Update datamodel_lifecycle
    - CP-49217: Update schem in Cli_operations.pool_sync_bundle
    - CP-49217: Bump up schema vsn
    - CP-51042: Raise error in sr-scan when SR.stat finds an unhealthy SR
    - CP-49217: Refine test_tar_ext and add copyright
    
    * Thu Aug 15 2024 Ming Lu <ming.lu@cloud.com> - 24.22.0-1
    - IH-662 - helpers.ml: Move to a threadsafe Re.Pcre instead of Re.Str
    - CP-50181: Percent decode all Uri paths before using them
    - clock: use external qcheck-alcotest
    - CP-50448: move quickcheck tests into internal libraries
    - Catch system exit in observer.py to close gracefully
    - CP-49876: Create spans for observer.py itself
    - CP-50121: Remove bc package from XS9 dom0
    - dune: declare stresstests dependencies
    - Update qcheck-alcotest dependencies
    - docs: add design documents for certificate-related features
    - CA-396479: Use default value for unknown enums in Java
    - Default to "UNRECOGNIZED" when using `toString()` of Type enums
    - xapi-idl: Delete String.{explode,implode} functions
    - xapi-idl: do not use custom operators for bit manipulations
    - xapi-idl: Refactor out find_index and add it to Listext
    - CP-50426: Add tracing to external auth functions
    - ci: use the names of binaries, not libraries in stresstests
    - CA-395789: Add polling to cluster health state update
    - ci: Avoid breaking through the opam sandbox in tests
    - ci: use ocaml-setup v3
    - ci: Do not spend time pinning packages
    - CA-389345: fix incorrect data type in python3
    - CP-50444: Intrument `http_svr`
    - CI: use ubuntu-22.04 for SDK too
    - CI: avoid mixing caches from different OSes
    - openvswitch-config-update: fix python2ism in python3
    - CA-396635: Wait for corosync to update its info
    - CP-50518: Add stub for crypt_r to ocaml/auth
    - CP-50444: Intrument `request_of_bio`
    - tracing: fix `make check` warnings
    - tracing: increase the default maximum number of spans in a trace
    - CP-50444: Add specialized function for tracing http requests to `Http.Request`
    - Output if parameter is required in JSON backend
    - Python SDK: Move "Packaging" section out of the public docs
    - Allow remediation commits for DCO
    - CI: fix spurious failure on busy system
    - CA-397171: Replace libjemalloc.so.1 with libjemalloc.so.2
    - CA-392685: Replace /tmp/network-reset  with /var/tmp/network-reset to persist tmp file after reboot
    - Retroactively sign off 8337fa94b76097428621d1e1987
    - CA-396751: write updated RRDD data before headers
    - CA-397268: vbd.create failed: The device name is invalid
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.21.0-1
    - Improve build and test times
    - maintenance: delete unused fields
    - xapi: update mirage-crypto version
    - mirage-rng: Initialize it only in tests and selfcert
    
    * Thu Jul 25 2024 Ming Lu <ming.lu@cloud.com> - 24.20.0-2
    - Bump release and rebuild
    
    * Wed Jul 24 2024 Ming Lu <ming.lu@cloud.com> - 24.20.0-1
    - xe-xentrace: fix binary location
    - scripts/xentrace: detect host CPU spikes and dump xentrace
    - CA_388624: fix(C SDK): fix build failure with recent GCC
    - build: add sdk-build-c Makefile rule to test building C SDK locally
    - gen_api: generate an all_<enum> for enum types
    - fix(Host.set_numa_affinity_policy): be consistent about accepting mixed case
    - test(record_util): make a copy to test for backwards compatibility
    - test(record_util): add tests for all enums
    - redo_log: report redo log as broken if we cannot find the block device
    - CA-389506: fix platform:nested_virt typo
    - CA-389241: import-update-key compatible with xs8 and xs9
    - CA-381119: use JsonRPC V2 for error replies
    - CP-46944: Update yum plugins to dnf plugins (#5526)
    - Routine feature branch sync (#5531)
    - XenAPI.py: use correct type for 'verbose' and 'allow_none' with Python3
    - XenAPI: suppress pytype false positives
    - remove XenAPI.py from pytype expected to fail list
    - CP-48623: use persistent unix socket connection for SM to XAPI communication
    - CP-48623: avoid querying the API version, it is not used
    - CP-48623: avoid 4 additional API calls after each SM login
    - CP-45921: Use dnf as package manager for XS9 (#5534)
    - CP-48221: Support new gpg for XS9 (#5543)
    - [maintenance]: disable implicit transitive deps
    - fix(dune): avoid "module unavailable" errors when running dune build @check
    - CP-47001: [xapi-fdcaps]: dune plumbing for new library
    - CP-47001: [xapi-fd-test]: dune plumbing for a new test framework
    - CP-47001: [xapi-fdcaps]: add -principal flag
    - CP-47001: [xapi-fdcaps]: optional coverage support
    - CP-47001: [xapi-fdcaps]: add properties module and tests
    - CP-47001: [xapi-fdcaps]: add operations module and tests
    - CP-47001: [xapi-fdcaps]: wrap more Unix operations
    - CP-47001: [xapi-fdcaps] runtime tests for read-write properties
    - CP-47001: [xapi-fdcaps-test]: add observations module
    - CP-47001: [xapi-fdcaps-test]: add generate module
    - CP-47001: [unixext-test]: add quickcheck-style test
    - CP-47001: Add unit tests for threadext
    - CP-47001: [unixext-test]: add test for Unixext.proxy
    - Unix.time_limited_write: fix timeout behaviour on >64KiB writes/reads
    - Unix.time_limited_{read,write}: replace select with Polly
    - add Unixext.time_limited_single_read
    - CP-32622: replace select with Thread.delay
    - CP-32622: Delay: replace select with time_limited_read
    - CP-32622: replace select in proxy with polly
    - CP-32622: move new libraries to proper subdir
    - Update update.precheck/apply to be compatible with yum and dnf (#5564)
    - IH-543: Add IPMI DCMI based power reading rrdd plugin
    - CP-32622: Use Unix.sleepf for sleeps instead of select
    - CP-47536: drop Unix.select in newcli
    - CP-47536: test for Buf_io timeouts
    - [maintenance]: quicktest: add the ability to run without XAPI
    - CP-47536: add ezxenstore quicktest
    - master_connection: log why we failed to connect
    - xapi.conf: introduce test_open
    - xapi_main: enable backtraces earlier to get backtraces from early startup failures
    - fix(XenAPI.py): fix pylint warning
    - CA-394343: After clock jump the xapi assumed the host is HOST_OFFLINE
    - IH-642 Restructure xs-trace to use Cmdliner
    - Refactor watcher creation code
    - Only create watcher once
    - Refactor cluster change watcher interval
    - Add new internal API cstack_sync
    - CP-394109: Alert only once for cluster host leave/join
    - Feature flag the cstack_sync call
    - CP-50193: Update new fingerprint fields on DB upgrade
    - CP-50108: Use Ipaddr instead of string-based CIDR handling
    - Fix pytype warnings.
    - dune: fix tests to packages
    - CP-50259 simplify raising error in record_util
    - Refactor to use List apis
    - Add new check for new parameters' default value
    - Refactored HTTP_actions template.
    - CP-50259 simplify parsing size with kib, mib, etc suffix
    - Update datamodel lifecycle
    - xapi-cli-server: simplifications around error handling
    - xapi-cli-server: remove function s2sm to serialize data
    - xapi-cli-server: remove function s2brm to serialize data
    - CP-49101: Fix pylint error
    - CA-395626: Fix (server status report generation report)
    - CP-50078: Instrument xapi-storage-script with tracing (#5808)
    - context: `complete_tracing` should be called last
    - context: catch error inside span
    - tracing: Instrument task related functionality
    - time: use `Date.now` over `Unix.time` in `taskHelper.ml`
    - formatting: Use `let@` and `match` statements.
    - CA-395626: Add a unit test to detect incorrect cookie parsing
    - quicktest: associate unit-test with xapi package
    - CP-50270: Set the correct parent in `make_connection`
    - gen_empty_custom: avoid wildcards for actions
    - CA-390277: Add API to fetch references matching a query
    - xapi-cli-server: use helper remote in migrate function
    - CA-390277: Reduce record usage on CLI cross-pool migrations
    - Refactor: Move to default optional parameters when they were reimplemented by hand
    - Moved PS destructors to a template.
    - Add -run-only and -list-tests parameters to quicktests
    - CP-50079: Add correct cookie parsing alongside the old style
    - CP-50079: Expands http quicktests to also check parsing of cookies.
    - CP-50079: Remove legacy sync_config_files interface
    - CP-50079: Remove unused unixpwd function and its associated tests
    - quality-gate: fix list.hd
    - CP-49811: Remove redundant method object from span name
    - CA-395784: fix(xapi-fd-test): do not generate <1us timeouts
    - CA-395784: fix(xapi-fd-test): timeouts get converted to microseconds, must be at least 1
    - CA-395784: fix(buf_io_test): the timeout is per read, not per function call
    - CP-49875: Group the auto_instrumentation spans by module
    - CP-49634: Add alerting for Corosync upgrade
    - CA-395512: process SMAPIv3 API calls concurrently (default off)
    - vhd-tool, xen-api-client: Remove duplicated cohttp_unbuffered_io module
    - vhd-tool, ezxenstore: Remove duplicate xenstore module
    - Fix Short/Long duration printing
    - forkexecd: do not clip commandline in logs
    - CA-395174: Try to unarchive VM's metrics when they aren't running
    - rrdd_proxy: Change *_at to specify the IP address
    - rrdd_proxy: Use Option to encode where VMs might be available at
    - http-lib: avoid double-queries to the radix tree
    - rrdd_proxy: Return 400 on bad vm request
    - CA-394148: Fix dry-run handling in xe-restore-metadata
    - CA-393578: Fix vbd cleanup in metadata scripts
    - CA-383491: [Security fix] Use debugfs on xe-restore-metadata probes
    - Updates to Portable SR Functionality
    - Fixes for shellcheck
    - Remove unused `yes` parameter in xe-backup-metadata
    - Remove ineffectual parameter wiping (#5868)
    - CP-47536: Drop posix_channel and channel_helper: unused and a mix of Unix/Lwt
    - opam: dunify vhd-tool's metadata
    - CP-47536: replace Protocol_unix.scheduler.Delay with Threadext.Delay
    - fix(xapi-idl): replace PipeDelay with Delay, avoid another Thread.wait_timed_read
    - opam: dunify message-switch-unix's metadata
    - IH-507: xapi_xenops: raise an error when the kernel isn't allowed
    - IH-507: Do not allow guest kernels in /boot/
    
    * Tue Jul 16 2024 Ming Lu <ming.lu@cloud.com> - 24.19.2-1
    - CA-395626: Fix (server status report generation report)


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Josef Ridky <jridky@redhat.com> - 1.5.7-1
changelog:
  - Rebase to the latest upstream release 1.5.7 (#1435848)
  - Fix manpage command examples (#1353981) in separate commit


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29.el7_5.1
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621156)
    - CVE-2018-15910 (bug #1621157)
    - CVE-2018-16542 (bug #1621380)


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Yanko Kaneti <yaneti@declera.com> - 1.1-5.20130122
changelog:
  - Newer upstream snapshot. Minor upstream rearrangement.
  - Remove checkout script from sources and add to git.
  - Try to actually use the bundled mathml2. Fix warnings.


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Anderson Sasaki <ansasaki@redhat.com> 3.3.29-8
changelog:
  - Backported --sni-hostname option which allows overriding the hostname
    advertised to the peer (#1444792)
  - Improved counter-measures in TLS CBC record padding for lucky13 attack
    (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
  - Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
    (CVE-2018-10846, #1589708)
  - Address p11tool issue in object deletion in batch mode (#1375307)
  - Backport PKCS#11 tests from master branch. Some tests were disabled due to
    unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
    generation without login, and certificates do not inherit ID from the private
    key)
  - p11tool explicitly marks certificates and public keys as NOT private objects
    and private keys as private objects
  - Enlarge buffer size to support resumption with large keys (#1542461)
  - Legacy HMAC-SHA384 cipher suites were disabled by default
  - Added DSA key generation to p11tool (#1464896)
  - Address session renegotiation issue using client certificate (#1434091)
  - Address issue when importing private keys into Atos HSM (#1460125)


author: Jakub Čajka <jcajka@redhat.com> - 1.13-1
changelog:
  - Rebase to go1.13
  - Fix for CVE-2019-9512, CVE-2019-9514, CVE-2019-14809
  - Resolves: BZ#1741815, BZ#1741826, BZ#1743130


author: Jakub Čajka <jcajka@redhat.com> - 1.15-1
changelog:
  - Rebase to go1.15
  - Security fix for CVE-2020-16845 and CVE-2020-14040
  - Resolves BZ#1867100 and BZ#1853654


author: Jakub Čajka <jcajka@redhat.com> - 1.15.5-1
changelog:
  - Rebase to go1.15.5
  - Security fix for CVE-2020-28362, CVE-2020-28367 and CVE-2020-28366
  - Resolves: BZ#1897637, BZ#1897645 and BZ#1897648


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-29
changelog:
  - Removing OPTFLAGS
  - Introducing full RELRO
  - Missing header dir in Makefile.in / depend
  - Fixing UsrMove for i686 (mv -f says 'directory not empty')


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.24.0-29.1
changelog:
  - Update to 0.24.0-29
  - *** Upstream changelog ***
  - * Tue Aug 15 2023 Rob Hoes <rob.hoes@citrix.com> - 0.24.0-28
  - - Bump release and rebuild
  - [... skipping rebuild-only entries]
  - * Fri Apr 14 2023 Christian Lindig <christian.lindig@citrix.com> - 0.24.0-14
  - - XSI-1404 increase StartLimitBurst to 25
  - [... skipping rebuild-only entries]


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.25.0-1.1
changelog:
  - Update to 0.25.0-1
  - *** Upstream changelog ***
  - * Thu Aug 31 2023 Rob Hoes <rob.hoes@citrix.com> - 0.25.0-1
  - - Log PID on exit; make message more explicit


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.0.0-4.1
changelog:
  - Sync with 24.0.0-4
  - *** Upstream changelog ***
  - [mostly rebuilds]
  - * Mon Mar 18 2024 Rob Hoes <rob.hoes@citrix.com> - 24.0.0-1
  - - Re-release with new version number consistent with xapi's version scheme


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.1.0-2.1
changelog:
  - Sync with 24.1.0-2
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-2
  - - Bump release and rebuild
  - * Thu May 23 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-1
  - - CP-48969: log only first time that NVML can't be opened
  - - ci: update all actions


author: Till Maas <opensource@till.name> - 1.2.4-4
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1217080
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#1159012
  - Documented --fixed-regexp option
    Resolves: rhbz#1103259
  - Updated pcre buildrequires to require pcre-devel >= 7.8-7
    Related: rhbz#1217080


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-3
changelog:
  - Speedup DFA for long patterns and fixed begline/endline matching
    Resolves: rhbz#1413029
  - Added support for GREP_LEGACY_EGREP_FGREP_PS environmental variable which
    controls how egrep, fgrep show in ps output
    Resolves: rhbz#1297441


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: rmarshall@redhat.com - 8.28-21
changelog:
  - Resolve issues with the recent grubby logic patches that
    appeared on the ppc platform. Fix a problem that occurred
    on systems where no kernel update had ever been installed.
    Resolves: rhbz#1285601
  - Specify the actual prune_debug file in sources.
    Resolves: rhbz#1285601


author: rmarshall@redhat.com - 8.28-23
changelog:
  - Fixes --info flag on s390/s390x.
    Related: rhbz#1285601
  - Fixes --set-default-index on s390/s390x.
    Related: rhbz#1285601
  - Allows prune_debug to run on s390/s390x.
    Resolves: rhbz#1285601


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.11.2-1.1
changelog:
  - Update to 1.11.2-1
  - *** Upstream changelog ***
  - * Tue Nov 29 2022 Xihuan Yang <xihuan.yang@citrix.com> - 1.11.2-1
  - - CP-39690: Add Ubuntu Jammy 11 (experimental) template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.0-1.1
changelog:
  - Update to 2.0.0-1
  - *** Upstream changelog ***
  - * Thu Jan 19 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-1
  - Switch upstream to GitHub
  - - Build for Python 3 and drop Python 2 support
  - - CP-41654: Check for duplicate uuids and reflabels in templates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - * Mon Mar 25 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.10-1
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.13-1.1
changelog:
  - Rebase on 2.0.13-1
  - *** Upstream changelog ***
    * Tue Nov 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.13-1
    - CP-50305: Remove '(preview') from Windows Server 2025 template
    * Thu Sep 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.12-1
    - CP-50304 Add Windows Server 2025 preview template
    * Tue Sep 03 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.11-1
    - CP-47949 Add New Guest template Ubuntu 24.04
    - CP-47949 Remove 'preview' label from RHEL9, Rocky9, CentOS Stream 9 and Debian 12


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:2.0.9-3
changelog:
  - drop renaming to guile2
  - fix multilib conflicts
  - fix post scriptlet to not remove files on upgrade
  - remove obsolete code from slib trigger
  - fix weekdays in changelog


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.16.xcpng.1-1
changelog:
  - Loosely rebase packaging on XS's 10.10.16-1, bringing:
    - declaring support for 4KN-capable SR
    - run tests on package build
  - Update to v10.10.16.xcpng.1 release, bringing:
    - deprecate legacy BIOS boot
    - support for upgrading from old MBR to new GPT layout
    - allow 4KN-capable SR type to be used


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.16.xcpng.2-1
changelog:
  - Update to v10.10.16.xcpng.2 release, bringing:
    - Make the unsupported / for-troubleshooting status of kernel-alt more obvious


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.10.6.xcpng.2-2
changelog:
  - Remove 0001-Prevent-upgrading-from-platform-3.4.0.patch
    - Makes upgrading from 8.3 or XenServer 8 possible again


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.1-1
changelog:
  - Update to v10.10.19.xcpng.1 release, bringing:
    - #151: Fix UEFI Restore
    - CA-392758: Remove Firmware Boot Selected flag check
    - CP-49195: Allows to preserve first partition from MBR layout
    - CP-49641: Ignore errors mounting/unmounting explicit mount points
    - CA-392935: Release device if partition does not need to be resized
    - CA-392916: Create directory for mount= option
    - Better support for SDX upgrade
    - CA-391659: Set correct partition type restoring XS 7.1
    - CP-47625: Replace mkinitrd with dracut command
    - CA-391027: Mount devices specified by mount= only when needed
    - CA-389160: Filter secrets when logging results/answers during failures


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.2-1
changelog:
  - Update to v10.10.19.xcpng.2 release, bringing:
    - Fix installation of kernel-alt package when in kernel-alt mode


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.3-1
changelog:
  - Update to v10.10.19.xcpng.3 release, bringing:
    - fix usage of driver disks such as intel-igb
    - fix abusive logging at "critical" level


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.4-1
changelog:
  - Update to v10.10.19.xcpng.4 release, bringing:
    - Preserve stunnel certs
    - Mark 'Dual Stack' as experimental
    - Boot mode checks
    - Misc debugging improvements


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.2.0-1
changelog:
  - CA-329206: Get network settings from the correct PIF
  - CP-31507: Add more detailed error codes
  - Pylint cleanup


author: Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.1-1
changelog:
  - CA-392310: Handle LV mount point from URLs
  - Allow specifying fs type in args for upgrade
  - CP-51969: Add support for "platform" argument


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Spec cleanup
  - drop unused configure options
  - Install desktop file (fixes bz#1541785)


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.1.0-1
changelog:
  - HTTP server can reuse binding address now
  - Notify when HTTP server is ready
  - Better error handling and command logs
  - SIGTERM can be safely sent to NBD server


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 1.5.0-1
changelog:
  - Prevent stacktrace during SIGTERM signal and open_device call
  - Robustify nbdkit startup: always wait for sockpath to be created
  - Handle broken pipe errors for python 3
  - Fix nbdkit plugin location for python 3
  - Don't force stdout/stderr flush
  - Fix libs import using underscores instead of dashes


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.252-8.5
changelog:
  - Updated pci, usb and vendor ids
    Resolves: #1386133 #1424763
  - Removed module nx_crypto from blacklist on PowerPCs
    Resolves: #1264326


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.6.pre2
changelog:
  - Added patch to fix a memory leak in resolver.c (#782275, #861582)
  - Run autoreconf to recognize aarch64 (#925579)
  - Added patch to fix needlessly caused assertion failure when using
    nss-myhostname (#839750, #847124, #868065, #961236, #1007434)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.3-3
changelog:
  - IlmBase.pc: +Requires.private: gl glu
  - -devel: drop hard-coded libGL/pkgconfig deps, let rpm autodetect now


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.1-5
changelog:
  - Fix upstream test failure in Pod-Simple-Texinfo
    Resolves: #970986
  - Fix @enumerate does not support start numbers greater than nine
    Resolves: #1134160


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.22.20-6
changelog:
  - CA-386057: Enable legacy-rx by default to resolve performance issue
  - Note: 2.22.20-5 is for Yangtze


author: Gael Duperrey <gduperrey@vates.fr> - 2.22.20-3.1
changelog:
  - initial package, version 2.22.20-3.1
  - Synced from XS driver SRPM intel-i40e-2.22.20-3.xs8~2_1.src.rpm


author: David Morel <david.morel@vates.tech> - 2.26.8-1
changelog:
  - Update from Intel's latest driver 2.26.8
  - NEED_AUX_BUS=2 compiles auxiliary bus code within the driver, but our kernel
    already provides it. This leads to redefinition of AUXILIARY_MODULE_PREFIX,
    so remove it to make the driver compile.


author: Gael Duperrey <gduperrey@vates.fr> - 1.8.8-1
changelog:
  - initial package, version 1.8.8
  - Synced from XS driver SRPM intel-ice-1.8.8-1.el7.centos.src.rpm
  - change firmware to live in /lib/firmware/override


author: Stephen Cheng <stephen.cheng@cloud.com> - Version: 5.10.214-3
changelog:
  - CP-48894: Modify checksum
  - The checksum was wrongly grenerated in the previous commit due to xenpkg upgrade


author: Thierry Escande <thierry.escande@vates.tech> - 5.10.214-3.1
changelog:
  - Obsoletes igc-module RPM
  - Import XCP-ng specific patches from obsolete igc-module RPM
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: David Morel <david.morel@vates.tech> - 20250127-1
changelog:
  - Update to publicly released microcode-20250211
  - Security updates for:
      - INTEL-SA-01166
      - INTEL-SA-01213
      - INTEL-SA-01139
      - INTEL-SA-01228
  - Updates for multiple functional issues
  - Upstream update drops files for older Sapphire Rapids steppings, we kept the previous versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - remove python3 fix that has been upstreamed
  - Sync with 2.0.6-1
  - *** Upstream changelog ***
    * Wed Jul 24 2024 Lin Liu <lin.liu@citrix.com> - 2.0.6-1
    - CA-395874: Some python3 fix


author: Alon Levy <alevy@redhat.com>
changelog:
  - Update to 0.50.0
  - Drop patch carried for bz#568845 (schemas-merge) per last comment
    in that bug.


author: Jon Ciesla <limburgher@gmail.com> - 0.50.2-1
changelog:
  - Latest stable release.
  - Merge review BZ 225902 fixes:
  - Removed Obsoletes/Provides for xml-i18n-tools.
  - Swapped gettext/gettext-devel Requires, BuildRequires.
  - Added %check section.


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-24.1
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
  - Propagate errors on service stop (RHBZ#1563168)
  - Avoid overwriting parent's return code (RHBZ#1563168)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Update release notes to 11.0.20.1+1
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Update README.md to match the version in later RHEL releases
  - Resolves: rhbz#2236229


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11320


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12217
  - Resolves: RHEL-12910
  - Resolves: RHEL-12913
  - Resolves: RHEL-11320
  - Resolves: RHEL-13227
  - Resolves: RHEL-13217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19642


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.ea
changelog:
  - Update to jdk-11.0.22+6 (EA)
  - Update release notes to 11.0.22+6
  - Switch to EA mode
  - Drop local copy of JDK-8312489 which is now included upstream
  - Resolves: RHEL-21031


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Update release notes to 11.0.22+7
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20966


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.23+1 (EA)
  - Update release notes to 11.0.23+1
  - Switch to EA mode
  - Speed up PPC build by removing ppc64le --with-jobs=1 workaround


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30914


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2
changelog:
  - Fix 11.0.22 release date in NEWS
  - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Sebastien Willmann <sebastien.willmann@gmail.com> - 0.6.0-0.3.rc2
changelog:
  - Removed static package
  - Preserving timestamp on installed files
  - Added guard grep to the sed expression
  - Removed duplicated doc files
  - Removed dependency on pkgconfig
  - Changed base package group


author: Björn Esser <fedora@besser82.io> - 0.10.5-1
changelog:
  - Update to version 0.10.5
  - Use %license and %doc properly
  - Add generated CMake-target
  - Move %check after %install
  - Remove Group-tag, needed for el <= 5, only
  - Drop Patch0, not needed anymore
  - Disabled Werror
  - Add disttag
  - Use cmake instead of scons


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.22.1
changelog:
  - Update to 4.19.19-8.0.22
  - *** Upstream changelog ***
  - * Fri Dec 09 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.22
  - - Fix booting PVH dom0 with UEFI
  - - Fix nvmefc-boot-connections.service.
  - - CA-364458 / XSA-396: PV frontends vulnerable to attack by backends
  - - CA-368126 / XSA-403: Linux disk/nic frontends data leaks
  - - CA-369758 / XSA-423: Guest triggerable NIC reset/abort/crash via netback
  - - CA-373544 / XSA-424: Guests can trigger deadlock in netback


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.29.1
changelog:
  - Update to 4.19.19-8.0.29
  - *** Upstream changelog ***
  - * Fri Aug 11 2023 Stephen Cheng <stephen.cheng@citrix.com> - 4.19.19-8.0.29
  - - CP-41018: Backport auxiliary bus support
  - * Wed Aug 09 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.28
  - - CP-43107: backport NVMe/FC patches
  - * Mon Jul 31 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.27
  - - CA-379289: Add a fix for XSA-432
  - * Thu Apr 13 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.26
  - - CA-371727: Fix evaluation of _PDC ACPI method on dom0
  - - CA-376418: Backport fixes to XSA-423
  - * Thu Mar 16 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.25
  - - CP-42067: add an ELFNOTE about PV-IOMMU support
  - * Mon Mar 06 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.24
  - - CA-375558: Fix nbd ref counting bug
  - - CA-375244: Ensure DLM reconnects after network outage
  - * Mon Feb 13 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.23
  - - CP-41370: Remove Citrix logo
  - - Strip stale config.ini metadata


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.32.1
changelog:
  - Update to 4.19.19-8.0.32
  - *** Upstream changelog ***
  - * Wed Oct 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.32
  - - CA-384066: fix netback vifs queue length
  - - Declare setup and dependencies for building live patches
  - * Fri Sep 29 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.31
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT
  - - CA-383484: Backport fix for XSA-441
  - * Thu Sep 07 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.30
  - - CA-381221: Make NFS timeouts more consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.33.1
changelog:
  - Sync with 4.19.19-8.0.33
  - *** Upstream changelog ***
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-8.0.33
  - - CA-387401: Fix for XSA-448


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.227-4
changelog:
  - Don't provide kernel Provides
  - We don't want kernel-alt to be pulled as build deps instead of main kernel packages


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.316+1-1
changelog:
  - Import kernel source v4.19.316
  - Rebase and rework needed patches from main kernel repo
  - Sync spec file with main kernel repo v4.19.19-8.0.34.1
  - Fix Requires on python3-xcp-libs


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-1
changelog:
  - Sync spec file with main kernel repo v4.19.19-8.0.36.1
  - Import new patches from main kernel repo (already merged upstream)
  - Update kernel sources to v4.19.320


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-2
changelog:
  - Disable PERF_EVENTS_INTEL_RAPL and INTEL_POWERCLAMP in kernel config as done
    in the main kernel for performance reasons


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 1.0.3-1
changelog:
  - CP-38520: Add Jira support to query released Kernel in last 6 months
  - CA-378916: Drop hard-coded build dependencies
  - CA-378916: Increase the length of module names to 55
  - CA-378916: Run prepare-build script if it exists


author: Thierry Escande <thierry.escande@vates.tech> - 2.0.15-20.1
changelog:
  - Backport patch removing kernel_version(), fixing bug for kernel with
    patchlevel greater than 255


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Andreas Schneider <asn@redhat.com> - 1.0.0-1
changelog:
  - Update to version 1.0.0:
    * Added new test runner with group fixtures. The old runner is deprecated
    * Added an extensible message output formatter
    * Added jUnit XML message output
    * Added subunit message output
    * Added Test Anything Protocol message output
    * Added skip() command
    * Added test_realloc()
    * Added a cmockery compat header
    * Fixed a lot of bugs on Windows


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
      * Added support to catch multiple exceptions
      * Added support to verify call ordering
      * Added support to pass initial data to test cases
      * Added will_return_maybe() for ignoring mock returns
      * Added subtests for groups using TAP output
      * Added support to write multiple XML files for groups
      * Improved documentation
      * Fixed XML output generataion
      * Fixed Windows builds with VS2015


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Tim Smith <tim.smith@citrix.com> - 1.0.3-2
changelog:
  - Create static and devel subpackages to reflect the fact that this is a static
    library used only at build time.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Warren Togami <warren@blockstream.com> - 0.9.8-3
changelog:
  - 0.9.8
  - x86_64  EL7: DFORCE_MONOTONIC_FIX
    aarch64 EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le EL7: DFORCE_MONOTONIC_FIX and FORCE_PTHREAD_NONVER
    ppc64le F30+ FORCE_PTHREAD_NONVER


author: Warren Togami <warren@blockstream.com> - 0.9.8-4
changelog:
  - upstream says to use FORCE_PTHREAD_NONVER on any glibc+arch that gets stuck
    For Fedora 31+ "make test" gets stuck on i686 x86_64 ppc64le s390x


author: Paul Wouters <pwouters@redhat.com> - 0.9.8-5
changelog:
  - Resolves: rhbz#1766749 libfaketime rfe: please add Provides:faketime
  - Use license tag, remove duplicate README entry, update make test target


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Lukas Nykryn <lnykryn@redhat.com> - 219-54
changelog:
  - automount: ack automount requests even when already mounted (#1535135)
  - udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
  - journald-native: Fix typo in MANDLOCK message (#1501017)
  - process-util: make our freeze() routine do something useful (#1540941)
  - dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
  - bus-util.c: fix TasksMax= property assignment (#1537147)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-55
changelog:
  - sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
  - core: Let two more booleans survive a daemon-reload (#1542391)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57
changelog:
  - sd-journal: properly handle inotify queue overflow (#1540538)
  - sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
  - journalctl: Periodically call sd_journal_process in journalctl (#1540538)
  - sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57.1
changelog:
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 219-57.3
changelog:
  - Maintenance: fix guilt apply failure
  - CA-334762: backport UDEV_DISABLE_PERSISTENT_STORAGE_RULES_FLAG
  - CP-38416: Enable static analysis


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39.el7.centos
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: David Morel <david.morel@vates.tech> - 4.12-2.3.1
changelog:
  - Sync with CentOS 8 Stream version 4.12-2.el8.3
  - Build with GCC 11
  - Include fix for CVE-2024-3652 from Alma 8


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.1
changelog:
  - virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
  - conf: Check for user aliases duplicates only (rhbz#1554962)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.3
changelog:
  - qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
  - util: Introduce virStringListMerge (rhbz#1564996)
  - util: Introduce virDevMapperGetTargets (rhbz#1564996)
  - qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.4
changelog:
  - lxc: Drop useless check in live device update (rhbz#1557922)
  - Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
  - qemu: Fix updating device with boot order (rhbz#1557922)
  - conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
  - vmx: check for present/enabled devices earlier (rhbz#1566524)
  - vmx: allocate space for network interfaces if needed (rhbz#1566524)
  - internal: add STRCASEPREFIX (rhbz#1566524)
  - vmx: convert any amount of NICs (rhbz#1566524)
  - qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
  - qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.6
changelog:
  - logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
  - util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
  - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
  - virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.8
changelog:
  - remote: Extract common clearing of event callbacks of client private data (rhbz#1619206)
  - remote: Move the call to remoteClientFreePrivateCallbacks from FreeFunc to CloseFunc (rhbz#1619206)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.11-4
changelog:
  - fix fpath (use autoreconf -f)
  - -devel: tighten deps via %{?_isa}, drop Requires: pkgconfig (add explicit BR: pkgconfig)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Matthias Clasen <mclasen@redhat.com> - 1.1.28-3
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


author: Simon Rowe <simon.rowe@citrix.com> - 2.2.2-1
changelog:
  - CA-289156: Always give a proper Pygrub error when called
  - Set more standard message, and set message as error message


author: Andrew Cooper <andrew.cooper3@citrix.com> - 20191203-1
changelog:
  - Change versioning scheme to avoid an arbitrary 0.1.  Use the date of the
    upstream livepatch-build-tools commit.


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-8
changelog:
  - Fixing use of uninitialized 'vendor_id' value on ppc (#996590)
  - Fixing bogus date in the changelog


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Petr Oros <poros@redhat.com> - B.02.18-8
changelog:
  - Proper detect vendor_id/device_id for virtual functions
  - Sync SMBIOS with latest specification
  - Resolves: #1445473


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Kamil Dudka <kdudka@redhat.com> - 2.8.7-10
changelog:
  - sync the upstream tarball with the current upstream version
  - fix specfile issues reported by the fedora-review script


author: Kamil Dudka <kdudka@redhat.com> - 2.8.8-0.1.dev15
changelog:
  - update to the latest upstream pre-release
  - drop applied patches
  - drop lynx-2.8.6-backgrcolor.patch (#908449)


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.6.2-3
changelog:
  - Resolves:rh#650802-[si] stick characters with cursor, while input with si-wijesekera.mim
  - Resolves:rh#651289-zh-cangjie.mim: excessive space after committing Chinese word
  - Drop obsoletes/provides added in f14


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-10
changelog:
  - Replace expired certificates in the test suite
  - Fix running the test suite against recent OpenSSL versions


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-12
changelog:
  - Fix occasional spurious failures in test_makefile_timeout_fires
    Resolves: #969077
  - Fix incorrect exception handling of SSL_CTX_new (manifesting in FIPS mode)
    Resolves: #879043
  - Add minimal SNI support, based on a patch by Sander Steffann
    <sander@steffann.nl>
    Resolves: #1038795
  - Use only ECC curves available in Fedora in the test suite
    Related: #1038813
  - Fix terminating test suite helper processes when running in Koji
    Related: #1038813
  - Run test suite in %check, don't ship it in the package.  Based on a patch by
    Matěj Cepl <mcepl@redhat.com>.
    Resolves: #1038813


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-14
changelog:
  - Don't assume that export ciphers are enabled in the test suite
    Resolves: #1048887
  - Let the kernel allocate free ports for use by the test suite
    Resolves: #1048887


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-17
changelog:
  - Fix spurious failures of test_cookie_str_changed_mac
    Resolves: #1073950
  - Add support for IP addresses in subjectAltName
    Resolves: #1080142


author: Nikola Forró <nforro@redhat.com> - 12.5-13
changelog:
  - fix SIGSEGV crash in smtp_auth_var()
  - add warning message for empty from variable
    resolves: #1113611


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Michal Schorm <mschorm@redhat.com> - 5.5.52-2
changelog:
  - Extension of mariadb-prepare-db-dir script
  - Resolves: #1356897

  - Rebase to 5.5.52, that also include fix for CVE-2016-6662
    Resolves: #1377974


author: Honza Horak <hhorak@redhat.com> - 1:5.5.56-1
changelog:
  - Rebase to 5.5.56
    That release also fixes the following security issues:
    CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243
    CVE-2017-3244 CVE-2017-3258 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318
    CVE-2017-3291 CVE-2017-3302 CVE-2016-5483/CVE-2017-3600 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1458933
    New deps required by upstream: checkpolicy and policycoreutils-python
    License text removed by upstream: COPYING.LESSER
    Do not ignore test-suite failure
    Downstream script mariadb-prepare-db-dir fixed for CVE-2017-3265
    Resolves: #1458940


author: Honza Horak <hhorak@redhat.com> - 1:5.5.56-2
changelog:
  - Do not fix context and change owner if run by root in mariadb-prepare-db-dir
    Related: #1458940
  - Check properly that datadir includes only expected files
    Related: #1356897


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.60-1
changelog:
  - Rebase to 5.5.60
  - CVE's fixed: #1558256, #1558260, #1559060
    CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
    CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
    CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
    CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
    CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
  - Resolves: #1535217, #1491833, #1511982, #1145455, #1461692


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
  - attempt to fix segfault while passing messages to widgets (#907045, #912033)
  - fix possible segfault when freeing a VFS (#923415)


author: Xiao Ni <xni@redhat.com> - 4.0-4
changelog:
  - Imsm should not allow combing 512 and 4096 sector size disks in
    one volume and Wrong array size shown for array built on 4096
    sector size disks
  - Resolves rhbz#1454390 and rhbz#1454379


author: Gael Duperrey <gduperrey@vates.tech> - 2.1.28_025-1
changelog:
  - Update to version 2.1.28_025
  - Synced from XS driver SRPM microsemi-smartpqi-2.1.28_025-1.xs8~2_1.src.rpm


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New stable version 1.2.5.
  - Enable VDDK plugin on x86-64 only.
  - Small refactorings in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-3
changelog:
  - Fix for CVE-2019-14850 denial of service due to premature opening
    of back-end connection
    resolves: rhbz#1757261


author: Yann Dirson <yann.dirson@valtes.tech> - 6.4-4.20230114
changelog:
  - Restore Fedora changelog and versionning, while keeping other XS-ification
  - XS changelog:
    * Wed Apr 10 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-3
    - CA-391276: Revert previous changes due to regression
    * Wed Mar 13 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-2
    - CA-369899: Update to verion 20240309
    - CA-369899: Use MONOTONIC time instead of REALTIME
    * Tue Jul 11 2023 Tim Smith <tim.smith@citrix.com> - 6.4-1
    - First imported release


author: Yann Dirson <yann.dirson@valtes.tech> - 6.4-5.20240309
changelog:
  - sync with XS 6.4-4
  - unlisted XS changes:
    - Upgrade upstream revision to 20240309
    - Build and run a test program to verify there are no conflicts in lib versions
  - XS changelog:
    * Wed Aug 14 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-4
    - CP-48941: Update ncurses to MONOTONIC


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.1
changelog:
  - Rebase on XS8's 5.7.2-51
  - Undo most changes from snmp.xs.conf, which are related to a proprietary implementation


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.2
changelog:
  - Add net-snmp-5.7.2-no-XENSERVER-MIB.xcp-ng.patch
  - Remove XenServer-specific options from /etc/sysconfig/snmpd


author: Thierry Escande <thierry.escande@vates.tech> - 5.7.2-51.3
changelog:
  - Backport patches for CVE-2022-24805, CVE-2022-24806, CVE-2022-24807,
    CVE-2022-24808, CVE-2022-24809, CVE-2022-24810, and CVE-2022-44793


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-52.1
changelog:
  - Rebase on 5.7.2-52
  - Replace our patch by upstream identical one
  - *** Upstream changelog ***
    * Wed Jul 31 2024 Deli Zhang <deli.zhang@cloud.com> - 5.7.2-52
    - CA-393002: Fix CVE-2022-24805 and CVE-2022-24809 issues


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.13.20131004git
changelog:
  - latest snapshot (#1013530)
  - remove %ifarch alpha condition from %prep
  - improve sctp-statistics.patch (#982638#c10)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Thierry Escande <thierry.escande@vates.tech> - 1.44.3-1.1
changelog:
  - Fix build errors with gcc 4.8
  - Force use of protobuf system packages from XCP-ng repositories
  - Add conditions for protobuf Requires
  - Remove unneeded Requires for nodejs and BuildRequires for httpd and libpfm-devel
  - Add Requires for libyaml
  - Enable and start systemd service at install
  - Create netdata-ui subpackage
  - Add firewall rules management


author: Thierry Escande <thierry.escande@vates.tech> - 1.47.5-4.1
changelog:
  - Update to Netdata v1.47.5
  - Rework patch for gcc 4.8 build errors
  - Remove _vpath_builddir redefinition needed by cmake
  - Use update-alternatives to handle configuration files swap
  - Remove cap_setuid=pe for plugin files that have the setuid bit set
  - Use netdata.service file for systemd < 235
  - Replace 'ExecStop=sleep 3' in systemd service unit with a nicer script
  - *** Upstream changelog ***
  - * Thu Oct 24 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.5-1
  - - Update from upstream
  - * Thu Oct 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.4-1
  - - Update from upstream
  - * Wed Oct 02 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.3-1
  - - Update from upstream
  - * Thu Sep 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.2-1
  - - Update from upstream
  - * Tue Sep 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.1-1
  - - Update from upstream
  - * Fri Aug 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.0-1
  - - Update from upstream
  - * Thu Aug 22 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-5
  - - Fix journald access
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2298058
  - * Thu Aug 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
  - - Remove closed source parts from binary rpms
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2304167
  - * Wed Aug 07 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
  - - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - - Enable go plugin only for Fedora 40+
  - * Mon Jul 29 2024 Miroslav Suchý <msuchy@redhat.com> - 1.46.3-2
  - - convert license to SPDX
  - * Fri Jul 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-1
  - - Update from upstream
  - * Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.46.2-2
  - - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
  - * Mon Jul 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.2-1
  - - Update from upstream
  - * Fri Jun 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.1-1
  - - Update from upstream
  - - Disable go plugin for all builds
  - * Wed Jun 19 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.0-1
  - - Update from upstream
  - * Thu Jun 06 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.6-1
  - - Update from upstream
  - * Thu May 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.5-1
  - - Update from upstream
  - * Thu May 09 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.4-1
  - - Update from upstream
  - * Sat Apr 13 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.3-1
  - - Update from upstream
  - * Fri Apr 05 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.2-1
  - - Update from upstream
  - * Wed Mar 27 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.1-1
  - - Update from upstream
  - * Thu Mar 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.0-1
  - - Update from upstream


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.48
changelog:
  - exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
  - Correctly set the minor version when set in nfsmount.conf (1458504)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Björn Esser <besser82@fedoraproject.org> - 1.9.0-5
changelog:
  - Add conditional for bootstrapping new architectures
  - Use %set_build_flags macro to export buildflags, if available


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - revert sql default language in man pages
  - fix SEC_PKCS12EnableCipher so python-nss tests will still work.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - Include softoken specific patches required by the NSS 3.67
    release including:
  -  sdb timeout fixes.
  -  coverity patch.
  -  fixing private key macing


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79.
  - add reader/writer lock on encrypted attribute access
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 4.14.1-1
changelog:
  - Ocaml 4.14.1
  - Fix the Source0 URL
  - chrpath is no longer needed
  - Use the %license macro
  - Build the test binaries so the tests will run
  - Sync patches with latest Fedora 38


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 4.14.1-6
changelog:
  - Update the license to reflect the one used starting from version 4.04
  - Enable gcc11 in %check on Xenserver 8


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 4.14.1-7
changelog:
  - CA-380523: Discard out_channel buffered data on permanent I/O error
    backport from https://github.com/ocaml/ocaml/pull/12314


author: Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 4.14.1-8
changelog:
  - IH-569: Remove patches for discarding out_channels' buffered data,
    they contained non-trivially solvable dangerous bugs


author: Pau Ruiz Safont <pau.safont@citrix.com> - 2.0.10-3
changelog:
  - Update to 2.0.10
  - Fix packaging issues around versions
  - Use correct SPDX identifier for the license


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.4p1-23.3.1 + 0.10.3-2.23.3.1
changelog:
  - Sync with 7.4p1-23.3 + 0.10.3-2.23.3
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.13.1
changelog:
  - Rebase on latest package from CH 8.3 Preview
  - Re-add changes to produce openvswitch-ipsec subpackage


author: David Morel <david.morel@vates.fr> - 2.5.3-2.3.13.2
changelog:
  - Backport fix for CVE-2023-1668: Remote traffic denial of service via crafted packets with IP proto 0
  - Comment out tests that fail
  - Enable make check in spec file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.14.1
changelog:
  - Update to 2.5.3-2.3.14
  - Drop openvswitch-2.5.3-CVE-2023-1668.backport.patch, now patched in XenServer's RPM
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-1.1
changelog:
  - Update to 2.17.7-1
  - Add openvswitch-2.17.7-comment-failing-tests.XCP-ng.patch (Benjamin Reis)
  - Add openvswitch-2.17.7-add-pythonpath-ipsec.XCP-ng.patch (Benjamin Reis)
  - Get ipsec script and service from new sources (Benjamin Reis)
  - *** Upstream changelog ***
  - * Wed Aug 23 2023 Chunjie Zhu <chunjie.zhu@cloud.com> - 2.17.7-1
  - - CP-44181: upgrade to OVS LTS 2.17.7


author: David Morel <david.morel@vates.tech> - 2.17.7-1.2
changelog:
  - Apply fix for CVE-2023-3966, provided in advisory
  - Apply fix for CVE-2023-5366, provided in advisory


author: David Morel <david.morel@vates.tech> - 2.17.7-1.3
changelog:
  - Link with xs-openssl instead of openssl
  - Tweak ovs-ctl script that is used to start ovsdb-server, passing it
    --ssl-ciphers and --ssl-protocols command line parameters to disable weak
    ciphers.


author: David Morel <david.morel@vates.tech> - 2.17.7-1.5
changelog:
  - link back to openssl to avoid issues with XO sdn-controller
  - use ciphers that works with XO sdn-controller and should not be considered as weak-ciphers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-2.1
changelog:
  - Sync with 2.17.7-2
  - *** Upstream changelog ***
  - * Thu Jun 13 2024 Lin Liu <Lin.Liu01@cloud.com> - 2.17.7-2
  - - CP-46117: Refresh patches to build with XS9


author: William Cohen <wcohen@redhat.com> - 0.9.9-17
changelog:
  - Define some  Intel broadwell default unit masks by names
  - Add support for Harrisonville (Denverton SoC)
  - Add support for Skylake-SP server
  - Add support for Kabylake-U/Y
  - Add support for Kabylake-H/S
  - Make Nehalem, Westmere, and Haswell event names unique.


author: William Cohen <wcohen@redhat.com> - 0.9.9-22
changelog:
  - Update ppc64/ppc64le support. rhbz1385007
  - Add recognition check for POWER8NV and POWER8NVL. rhbz1426426


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
  - Fix a bug in recent btrfs patch when an extended partition is examined. 
    (H.J. Lu) (bug #906847)
  - Fix naming of /boot partitions according to their fstab entry (bug #893472)
  - Don't generate .btrfsfix files which will be included in final rpm
  - Fix wrong boot partition set by linux-boot-prober when / and /boot are
    mounted (bug #906886)
  - Factor out 'logger', so that it is run once and logs are piped to it (John
    Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
  - Avoid reference to thread-unsafe strerror rhbz#1378947
  - Fix PKCS#11 OAEP interface rhbz#1191209
  - Update documentation to follow RFC7512 rhbz#1165977


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Akira TAGOH <tagoh@redhat.com> - 1.34.1-2
changelog:
  - Fix duplicate file list for modules.cache
  - s/%define/%global/g
  - Fix bogus date in %changelog
  - Do not suppress the detailed build log.


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Paul Howarth <paul@city-fan.org> - 1:0.17020-1
changelog:
  - Update to 0.17020
    - Change to Shlomi Fish's new E-mail and web address
    - Clarify the licence of lib/Error/Simple.pm (CPAN RT#81277)
    - Correct typos (CPAN RT#85023)
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Avoid provides/requires from examples


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - Update to 1.35:
    - Explain how to use MIME::Types in mod_perl; when you do not read the
      documentation about mod_perl/fork it will work as always, but
      inefficiently
    - subType() did not handle subType's with '+' in them
    - Added video/webm and audio/webm, although not (yet) IANA registered
  - BR: perl(Carp) and perl(Exporter)
  - BR: at least version 1.00 of  perl(Test::Pod)
  - Use a patch rather than scripted iconv to fix character encooding
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.36-1
changelog:
  - Update to 1.36:
    - xlsx and friends had encoding 'binary' (since version 1.30), but should
      have been 'base64' (CPAN RT#80529)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37:
    - Remove text/x-perl, where we also have an application/x-perl
      (CPAN RT#82100)


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38:
    - Add application/vnd.ms-excel.template.macroEnabled.12 and five related
      from http://filext.com/faq/office_mime_types.php (CPAN RT#82616)


author: Paul Howarth <paul@city-fan.org> - 1.000012-1
changelog:
  - Update to 1.000012
    - Improved package detection heuristics
    - Fix ->contains_pod (CPAN RT#84932)
    - Fix detection of pod after __END__ (CPAN RT#79656)
  - This release by ETHER -> update source URL
  - Package new upstream README file


author: Paul Howarth <paul@city-fan.org> - 1.000014-1
changelog:
  - Update to 1.000014
    - Fix reliance on recent Test::Builder
    - Make tests perl 5.6 compatible
  - This release by BOBTFISH -> update source URL


author: Paul Howarth <paul@city-fan.org> - 1.000016-1
changelog:
  - Update to 1.000016
    - Re-release to fix prereqs and other metadata
  - This release by ETHER -> update source URL
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.000018-1
changelog:
  - Update to 1.000018
    - Re-release of de-tainting fix without unstated non-core test dependencies
  - Drop BR: perl(Test::Fatal)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
  - Modernize spec file
  - Specify all dependencies
  - Change license to "(Copyright only) and (Artistic or GPL+)" because of
    ppport.h


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
  - Merge tests sub-package back into main package
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Mark Tutorial.pod as %doc
  - Drop explicit dependency on perl-devel


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Remove build root cleaning, BuildRoot definition and %defattr


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
  - Remove perl(base) from BR
  - Package README and ChangeLog
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.41-8
changelog:
  - Update dependencies and summary
  - Remove pre-RPM-4.9 filters
  - Remove deleting empty directories
  - Update REC-xml-19980210.xml to match new encoding


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
  - Install to vendor directories rather than perl core directories so as to
    avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
  - Reinstate compatibility with old distributions like EL-5
    - Add back buildroot definition and cleaning
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Alex Brett <alex.brett@cloud.com> - 0.8.9-0.31.20140113.2
changelog:
  - CA-393520: Drop ship-label-plugin-in-initrd.patch as not required for XS, and
    causes warnings following removal of fontconfig


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-13
changelog:
  - hll/pp: Fix pp crash when processing base module (#1350806)
  - sepolicy: fix obtaining domain name in HTMLManPages (#1174744)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-14
changelog:
  - Fix export of fcontext socket entries (#1435100)
  - Fix checks whether a module name is passed to semanage-module (#1420527)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-15
changelog:
  - sepolicy: Do not fail when file_contexts.{homedirs,local} are not present (#1395778)
  - fixfiles - use quotes around "$FILEPATH" (#1241946)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-16
changelog:
  - Strip non-printable characters when parsing audit messages (#1406328)
  - Install seobject python module into arch specific path (#1061049)
  - restorecond: Decrease loglevel of termination message (#1422121)
  - semodule_package: do not fail with an empty fc file (#1390535)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-18
changelog:
  - semanage: Enable listing file_contexts.homedirs
  - semanage: Fix manpage author for ibpkey and ibendport pages.
  - semanage: Update man pages for infiniband
  - semanage: Update semanage to allow runtime labeling of ibendports
  - semanage: Update semanage to allow runtime labeling of Infiniband Pkeys
  - semanage: Improve semanage-port man page
  - fixfiles: do not dereference link files in tmp


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-20
changelog:
  - setfiles: Mention customizable types in restorecon man page (#1260238)
  - sepolicy: do not fail when file_contexts.local or .subs do not exist (#1512590)
  - semanage: Fix export of ibendport entries (#1471809)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-22
changelog:
  - semanage: Fix fcontext help message (#1499259)
  - semanage: Improve semanage-user.8 man page (#1079946)
  - semodule: Improve man page (#1337192)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #1034139).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Thierry Escande <thierry.escande@vates.tech> - 3.17.3-1
changelog:
  - Import protobuf cpp sources v3.17.3
  - Remove googletest archive as it's now provided with protobuf sources
  - Add a patch to fix googletest Makefile.am files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Orion Poplawski <orion@cora.nwra.com> - 1.6.5-2
changelog:
  - Enable python3 build for EPEL
  - Include python3-pylint-gui __pycache__ files in gui package (bug #1422609)
  - Cleanup spec
  - Run tests, but they currently fail


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.4-4
changelog:
  - Add conditional for sphinx on rhel.
  - Remove rhel logic from with_python3 conditional.
  - Disable failing tests for Python3.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.1-1
changelog:
  - Update to 2.3.1.
  - Re-enable some tests, ignore others.
  - Docs are available in English and Japanese now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-1
changelog:
  - Update to 2.3.5.
  - Docutils needed now to build README.html.
  - Add some BR optionally used by the testsuite.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973318).
  - Update BR to use python-pexpect instead of pexpect.


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-84
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704362 and rhbz#1703530


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-90
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.70-1
changelog:
  - Version 0.70 (2009-10-29)
    * New "major" version because it may break compatibility
    * Fix __cmp__(): IP('0.0.0.0/0') and IP('0.0.0.0') are not equal
    * Fix IP.net() of the network "::/0": "::" instead of "0.0.0.0".
      IPy 0.63 should fix this bug, but it wasn't.


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.75-1
changelog:
  - Version 0.75 (2011-04-12)
   * IP('::/0').netmask() gives IP('::') instead of IP('0.0.0.0') (BZ#690625)
   * Fix tests for Python 3.1 and 3.2
   * ip.__nonzero__() and (ipa in ipb) return a bool instead of 0 or 1
   * IP('0.0.0.0/0') + IP('0.0.0.0/0') raises an error, fix written by Arfrever
   * Support Python 3: setup.py runs 2to3
   * Update the ranges for IPv6 IPs
   * Fix reverseName() and reverseNames() for IPv4 in IPv6 addresses
   * Drop support of Python < 2.5
   * Include examples and MANIFEST.in in source build (add them to MANIFEST.in)
   * Remove __rcsid__ constant from IPy module
   * Use xrange() instead of range()
   * Use isinstance(x, int) instead of type(x) == types.IntType
   * Prepare support of Python3 (use integer division: x // y)
   * Fix IP(long) constructor: ensure that the address is not too large
   * Constructor raise a TypeError if the type is not int, long, str or unicode
   * 223.0.0.0/8 is now public (belongs to APNIC)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.5.4-1
changelog:
  - Update to 1.5.4
  - Fix for python3 module and anydbm
  - Tried enabling unittests on python3 -- still no joy


author: Robert Kuska <rkuska@redhat.com> - 1.5.4-8
changelog:
  - Change beaker.session to use sha1 instead of md5 because of failures in fips mode
  Resolves: rhbz#996219


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
  - Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-1
changelog:
  - Rebase to version 1.11.1
  - Remove downstream patch that was merged upstream
  Resolves: rhbz#1112999


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-2.20140901git9329daf
changelog:
  - Rebase to latest upstream commit
  - Remove unnecessary sources and patches
  - Specfile cleanup
  Resolves: rhbz#1112999


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2.4-1
changelog:
  - Upstream update 0.2.4
    - Changes i18n.easy_gettext_setup() to return lgettext functions when
      byte strings are requested.


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
  - Bugs fixed
  -
  -  * Crash when merging text nodes in element.remove().
  -  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
  - 3.0 (2012-10-08)
  - ================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * End-of-file handling was incorrect in iterparse() when reading from
  -   a low-level C file stream and failed in libxml2 2.9.0 due to its
  -   improved consistency checks.
  -
  - Other changes
  - -------------
  -
  - * The build no longer uses Cython by default unless the generated C files
  -   are missing.  To use Cython, pass the option "--with-cython".  To ignore
  -   the fatal build error when Cython is required but not available (e.g. to
  -   run special setup.py commands that do not actually run a build), pass
  -   "--without-cython".
  -
  -
  - 3.0beta1 (2012-09-26)
  - =====================
  -
  - Features added
  - --------------
  -
  - * Python level access to (optional) libxml2 memory debugging features
  -   to simplify debugging of memory leaks etc.
  -
  - Bugs fixed
  - ----------
  -
  - * Fix a memory leak in XPath by switching to Cython 0.17.1.
  -
  - * Some tests were adapted to work with PyPy.
  -
  - Other changes
  - -------------
  -
  - * The code was adapted to work with the upcoming libxml2 2.9.0 release.
  -
  -
  - 3.0alpha2 (2012-08-23)
  - ======================
  -
  - Features added
  - --------------
  -
  - * The .iter() method of elements now accepts tag arguments like "{*}name"
  -   to search for elements with a given local name in any namespace.  With
  -   this addition, all combinations of wildcards now work as expected:
  -   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
  -   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
  -   applies to the .getiterator(), .itersiblings(), .iterancestors(),
  -   .iterdescendants(), .iterchildren() and .itertext() methods,  the
  -   strip_attributes(), strip_elements() and strip_tags() functions as well
  -   as the iterparse() function.
  -
  - * C14N allows specifying the inclusive prefixes to be promoted to
  -   top-level during exclusive serialisation.
  -
  - Bugs fixed
  - ----------
  -
  - * Passing long Unicode strings into the feed() parser interface failed to
  -   read the entire string.
  -
  - Other changes
  - -------------
  -
  -
  - 3.0alpha1 (2012-07-31)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Initial support for building in PyPy (through cpyext).
  -
  - * DTD objects gained an API that allows read access to their
  -   declarations.
  -
  - * xpathgrep.py gained support for parsing line-by-line (e.g.
  -   from grep output) and for surrounding the output with a new root
  -   tag.
  -
  - * E-factory in lxml.builder accepts subtypes of known data
  -   types (such as string subtypes) when building elements around them.
  -
  - * Tree iteration and iterparse() with a selective tag
  -   argument supports passing a set of tags.  Tree nodes will be
  -   returned by the iterators if they match any of the tags.
  -
  - Bugs fixed
  - ----------
  -
  - * The .find*() methods in lxml.objectify no longer use XPath
  -   internally, which makes them faster in many cases (especially when
  -   short circuiting after a single or couple of elements) and fixes
  -   some behavioural differences compared to lxml.etree.  Note that
  -   this means that they no longer support arbitrary XPath expressions
  -   but only the subset that the ElementPath language supports.
  -   The previous implementation was also redundant with the normal
  -   XPath support, which can be used as a replacement.
  -
  - * el.find('*') could accidentally return a comment or processing
  -   instruction that happened to be in the wrong spot.  (Same for the
  -   other .find*() methods.)
  -
  - * The error logging is less intrusive and avoids a global setup where
  -   possible.
  -
  - * Fixed undefined names in html5lib parser.
  -
  - * xpathgrep.py did not work in Python 3.
  -
  - * Element.attrib.update() did not accept an attrib of
  -   another Element as parameter.
  -
  - * For subtypes of ElementBase that make the .text or .tail
  -   properties immutable (as in objectify, for example), inserting text
  -   when creating Elements through the E-Factory feature of the class
  -   constructor would fail with an exception, stating that the text
  -   cannot be modified.
  -
  - Other changes
  - --------------
  -
  - * The code base was overhauled to properly use 'const' where the API
  -   of libxml2 and libxslt requests it.  This also has an impact on the
  -   public C-API of lxml itself, as defined in etreepublic.pxd, as
  -   well as the provided declarations in the lxml/includes/ directory.
  -   Code that uses these declarations may have to be adapted.  On the
  -   plus side, this fixes several C compiler warnings, also for user
  -   code, thus making it easier to spot real problems again.
  -
  - * The functionality of "lxml.cssselect" was moved into a separate PyPI
  -   package called "cssselect".  To continue using it, you must install
  -   that package separately.  The "lxml.cssselect" module is still
  -   available and provides the same interface, provided the "cssselect"
  -   package can be imported at runtime.
  -
  - * Element attributes passed in as an attrib dict or as keyword
  -   arguments are now sorted by (namespaced) name before being created
  -   to make their order predictable for serialisation and iteration.
  -   Note that adding or deleting attributes afterwards does not take
  -   that order into account, i.e. setting a new attribute appends it
  -   after the existing ones.
  -
  - * Several classes that are for internal use only were removed
  -   from the lxml.etree module dict:
  -   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  -   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  -   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  -   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  -   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  -   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  -   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  -   _ParserSchemaValidationContext, _XPathContext,
  -   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
  -
  - * Several internal classes can no longer be inherited from:
  -   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  -   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  -   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  -   _XPathContext, _XSLTResolverContext, _XSLTContext,
  -   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
  - 3.0.1 (2012-10-14)
  - Bugs fixed
  -
  -  * LP#1065924: Element proxies could disappear during garbage collection
  -    in PyPy without proper cleanup.
  -  * GH#71: Failure to work with libxml2 2.6.x.
  -  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
  - 3.1.0 (2013-02-10)
  - ==================
  -
  - Features added
  - --------------
  -
  - * GH#89: lxml.html.clean allows overriding the set of attributes that it
  -   considers 'safe'.  Patch by Francis Devereux.
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
  -   a copy of the attributes as a plain Python dict.
  -
  - * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
  -   always used the first namespace mapping that was provided for each
  -   path expression instead of using the one that was actually passed
  -   in for the current run.
  -
  - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  -   without threading support.  Patch by Ulrich Seidl.
  -
  - Other changes
  - -------------
  -
  -
  - 3.1beta1 (2012-12-21)
  - =====================
  -
  - Features added
  - --------------
  -
  - * New build-time option ``--with-unicode-strings`` for Python 2 that
  -   makes the API always return Unicode strings for names and text
  -   instead of byte strings for plain ASCII content.
  -
  - * New incremental XML file writing API ``etree.xmlfile()``.
  -
  - * E factory in lxml.objectify is callable to simplify the creation of
  -   tags with non-identifier names without having to resort to getattr().
  -
  - Bugs fixed
  - ----------
  -
  - * When starting from a non-namespaced element in lxml.objectify, searching
  -   for a child without explicitly specifying a namespace incorrectly found
  -   namespaced elements with the requested local name, instead of restricting
  -   the search to non-namespaced children.
  -
  - * GH#85: Deprecation warnings were fixed for Python 3.x.
  -
  - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
  -
  - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``_ObjectifyElementMakerCaller`` was
  -   removed from the module API of lxml.objectify.
  -
  - * LP#1075622: lxml.builder is faster for adding text to elements with
  -   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
  - 3.2.0 (2013-04-28)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#690319: Leading whitespace could change the behaviour of the string
  -   parsing functions in ``lxml.html``.
  -
  - * LP#599318: The string parsing functions in ``lxml.html`` are more robust
  -   in the face of uncommon HTML content like framesets or missing body tags.
  -   Patch by Stefan Seelmann.
  -
  - * LP#712941: I/O errors while trying to access files with paths that
  -   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
  -   of properly reporting the ``IOError``.
  -
  - * LP#673205: Parsing from in-memory strings disabled network access in the
  -   default parser and made subsequent attempts to parse from a URL fail.
  -
  - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
  -   of overwriting the current value.
  -
  - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  -   allowed by the user provided whitelist.  Patch by Christine Koppelt.
  -
  - 3.1.2 (2013-04-12)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1136509: Passing attributes through the namespace-unaware API of
  -   the sax bridge (i.e. the ``handler.startElement()`` method) failed
  -   with a ``TypeError``.  Patch by Mike Bayer.
  -
  - * LP#1123074: Fix serialisation error in XSLT output when converting
  -   the result tree to a Unicode string.
  -
  - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
  -   by properly exported API function ``xmlBufUse()``.
  -
  - 3.1.1 (2013-03-29)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
  -   an AttributeError in Py3.
  -
  - * Illegal memory access during cleanup in incremental xmlfile writer.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``lxml.etree._BaseParser`` was removed
  -   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
  - 3.2.1 (2013-05-11)
  - ==================
  -
  - Features added
  - --------------
  -
  - * The methods ``apply_templates()`` and ``process_children()`` of XSLT
  -   extension elements have gained two new boolean options ``elements_only``
  -   and ``remove_blank_text`` that discard either all strings or
  -   whitespace-only strings from the result list.
  -
  - Bugs fixed
  - ----------
  -
  - * When moving Elements to another tree, the namespace cleanup mechanism
  -   no longer drops namespace prefixes from attributes for which it finds
  -   a default namespace declaration, to prevent them from appearing as
  -   unnamespaced attributes after serialisation.
  -
  - * Returning non-type objects from a custom class lookup method could lead
  -   to a crash.
  -
  - * Instantiating and using subtypes of Comments and ProcessingInstructions
  -   crashed.


author: David Malcolm <dmalcolm@redhat.com> - 1.1.2-5
changelog:
  - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
  - disable selftests that fail under 3.3


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server
    mode (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 2.1.5.
    Resolves #1557142


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-4
changelog:
  - Add a dependency on python2-pyasn1. It used to be a dependency
    of python2-cryptography, but it is not the case with newer versions.
    (RHBZ #1559133)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-3
changelog:
  - Ugh.  Enable unittests and make a note that the python3 module is totally
    non-functional.  Open a bug for that for the actual package maintainers to
    make a decision on.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-4.20111221hg1498
changelog:
  - Tarball is missing files, use a snapshot to get those files and also pick up
    several bug fixes (one related to serving CGI scripts, another for http
    Continue requests, and a third regarding digest authentication and internet
    explorer)


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.14-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973321).
  - Update URL.
  - Fix changelog entry with an incorrect date (rhbz#973325).


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-3
changelog:
  - Run _build_tables.py to build the lextab.py and yacctab.py; otherwise
    they have to be regenerated at runtime for no benefit.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-4
changelog:
  - Upstream repository is now on github.
  - Fix rpmlint strange-permission complaint.
  - Rename patches, Source1 to all start with pycparser-{version}, to
    simplify updating patches for future upstream releases.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-5
changelog:
  - Renumbered Fedora-specific Patch1 to Patch100
  - Added new Patch1 to fix table generation when the build system
    already has a python-pycparser package installed.
  - Submitted Patch0 and Patch1 as upstream issues.
  - Added comments about patches.


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Tomas Orsava <torsava@redhat.com> - 3-28
changelog:
  - Fix the %py_dist_name macro to not convert dots (".") into dashes, so that
    submodules can be addressed as well Resolves: rhbz#1564095


author: Lumír Balhar <lbalhar@redhat.com> - 3-31
changelog:
  - Converting specfile from F28 to RHEL7
  - Move the macros to the standard RHEL7 macro location at /etc/rpm/,
    instead of Fedora's location at /usr/lib/rpm/macros.d/
  - Import the macros.python{,2} files from the python-devel package where they
    resided until now, and Conflict with that old version of python-devel
  - Import the macros.pybytecompile from Fedora rawhide / RHEL8
  Resolves: rhbz#1660579


author: Miro Hrončok <mhroncok@redhat.com> - 3-32
changelog:
  - %python_provide: Obsolete and provide python36- from python3-
  - %python_provide: Provide python3- from python36-
  Resolves: rhbz#1702719


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-1
changelog:
  - Switch source from distribute to setuptools, that are now uptodate and supported.
  - Update to setuptools 0.8.0.
  - Specfile cleanup (unnecessary Python 3 logic, old RPM stuff, bogus changelog dates)


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Adam Williamson <awilliam@redhat.com> - 1.4.9-1
changelog:
  - New release 1.4.9
  - Backport a patch from master branch to fix Python 3.6 compatibility
  - Modernize spec file somewhat
  - Rename python2 package
  - Enable tests


author: Orion Poplawski <orion@cora.nwra.com> - 1.2.1-4
changelog:
  - Do not run python 2 tests on EPEL7, setuptools is too old
  - Drop python 3 package as this is a backport to python 2


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
  - Update to 1.7.2
  - Disable pytest.deprecated_call() tests
  - Remove versioned pytest
  - Add build requirements pytz


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
  - Add depenency on python-setuptools, fixes RHBZ#1459947
  - Fix parsing of long OIDs, fixes RHBZ#1455755


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Aurelien Bompard <abompard@fedoraproject.org> - 0.1.11-7
changelog:
  - Build for Python3 on EPEL:
    http://fedoraproject.org/wiki/PackagingDrafts:Python3EPEL
  - Modernize the spec a bit (build and install macros, no explicit buildroot)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.1.1-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Yann Dirson <yann.dirson@vates.tech> - 1.12.0-1
changelog:
  - Backport to el7, based on fc36 package
  - Back to old layout
  - Nuke the '(Build)Requires: ... with ...' syntax


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
  - Allow to import pip10's main from pip9's /usr/bin/pip
  - Do not show the "new version of pip" warning outside of venv
  Resolves: rhbz#1569488
  Resolves: rhbz#1571650
  Resolves: rhbz#1573755


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-3
changelog:
  - Converting pip specfile from F28 to RHEL7
  - Disabled building of the Python 2 subpackage
  - Disabled building of docs, because we don't ship its build dependencies in
    RHEL7
  - Updated to a newer version of tests to match the package version
  - Backported Patch3 and Patch4 from Fedora
  Resolves: rhbz#1660573


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tim Smith <tim.smith@cloud.com> - 7.0.0-12
changelog:
  - CA-392001 Cancel all jobs on datapath stop
  - CA-392022 Cancel all jobs on dataplane start
  - CA-392022 Add conflict for older xapi storage-plugins-libs


author: Tim Smith <tim.smith@cloud.com> - 7.0.0-16
changelog:
  - CA-388210: package and install QMP
  - CA-391937: probe block alignment by statx syscall
  - build qemu-dp on rawhide
  - Backport fixes for qcow extended_l2


author: Yann Dirson <yann.dirson@vates.tech> - 2.28.1-4.1
changelog:
  - Fix build invocation using hardcoded (and buggy) paths
  - Remove macros undefined and/or (not) expanding inside the package description
  - Add missing requires (taken from XS' python-opentelemetry.spec)


author: Tomas Orsava <torsava@redhat.com> - 4.14.0-1
changelog:
  - Rebase to rpm 4.14.0 final (http://rpm.org/wiki/Releases/4.14.0)
  - Re-synchronize version/release macros with the rpm Fedora package


author: Tomas Orsava <torsava@redhat.com> - 6-2
changelog:
  - Modifying python-rpm-generators from F29 to be used in RHEL7
  - The regex in pythondist.attr has been modified to only match Python 3
    modules, so that we do not affect the building of python2 files in RHEL7 at
    this late stage
  - Removed python.attr and pythondeps.sh files, because they are contained in
    rpm-build in RHEL7 and we do not want to modify them
  - the pythondist.attr and pythondistdeps.py are completely new, therefore we
    don't need to conflict with anything in RHEL7
  Resolves: rhbz#1660578


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-7
changelog:
  - Converting specfile from F28 to RHEL7
  - Tests disabled because the minimal RHEL7 Python 3 stack does not contain test
    dependencies
  - Disabled building of the Python 2 subpackage
  Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-8
changelog:
  - SRPM renamed from python-setuptools to python3-setuptools
  - Package prepared to contain only Python 3 version
  Resolves: rhbz#1660563


author: Yann Dirson <yann.dirson@vates.tech> - 40.4.1-1.0.1
changelog:
  - Cherry-pick:
    * Wed Sep 19 2018 Randy Barlow <bowlofeggs@fedoraproject.org> - 40.4.1-1
    - Update to 40.4.1 (#1599307).
    - https://github.com/pypa/setuptools/blob/v40.4.1/CHANGES.rst
  - Run bootstrap.py in prep (or setup.py cannot run)
  - (hack) Adjust wheel name with a wildcard to cope with the 40.4.1.post20250122
  version it comes up with


author: Mark Syms <mark.syms@citrix.com> - 0.13.0-1
changelog:
  - add get_iscsi_interfaces to libiscsi
  - Enable SonarQube
  - Run unit tests and fix build dependencies


author: Tomas Orsava <torsava@redhat.com> - 0.30.0a0-8
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Lumír Balhar <lbalhar@redhat.com> - 0.31.1-4
changelog:
  - Converting specfile from F29 to RHEL7
  - Disabled building of the Python 2 subpackage
  - Disabled tests (by setting the bootstrap on - see note)
  - Removed python-wheel-wheel package with the wheel of wheel
  Resolves: rhbz#1660574


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.2-4.2
changelog:
  - Switch updategrub.py to python3, install in /opt/xensource/bin,
    keep a compat symlink for old kernel-alt hardcoding a python2.7 path


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-1.1
changelog:
  - Rebase on 3.0.4-1
  - *** Upstream changelog ***
  - * Thu Mar 14 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-1
  - - CA-389988: Fix USB network handling
  - * Wed Mar 6 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.3-1
  - - CA-371311: Pick up updates to handle USB ethernet cards


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-2.1
changelog:
  - Rebase on 3.0.4-2
  - *** Upstream changelog ***
    * Tue Jun 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-2
    - Add missing package dependencies


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 4.2.1-5.2.4
changelog:
  - CP-46102: Backport bugfixes for PCI passthrough using multifunction devices
    - hw/xen: set pci Atomic Ops requests for passthrough device
    - hw/xen/xen_pt: fix uninitialized variable
    - xen/pass-through: don't create needless register group
    - xen/pass-through: merge emulated bits correctly
    - Emulate the multifunction bit and set it based on the multifunction
      property of the PCIDevice (which can be set using QAPI).


author: Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.5
changelog:
  - CP-46162: Backport patches for building qemu with rawhide(xs9) toolchain
    - Do not ignore malloc value
    - Fix the null pointer errors in configure
    - Fix -Werror=maybe-uninitialized build failure
    - Fix net/eth.c compile errors
    - Compile with -Wno-array-bounds
    - Remove -no-pie linker flag


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.8
changelog:
  - Disable capstone and fdt explicitly
  - CP-42792: Backport a patch to avoid unncessary buffered ioreq polling


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.9
changelog:
  - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - CA-391069: Avoid livelock due to buffered ioreqs


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc
    
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.76-2.1
changelog:
  - Rebase on CH 8.3 Preview
  - Keep qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.63-2
changelog:
  - Version 7.14.63
  - Add qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.76-2
changelog:
  - Merge the two RPMs into one for easier uninstallation
  - Obsoletes qlogic-netxtreme2-alt-4.19.0+1-modules


author: Gael Duperrey <gduperrey@vates.tech> - 10.02.11.00_k-1
changelog:
  - Update to version 10.02.11.00_k
  - Synced from XS driver SRPM qlogic-qla2xxx-10.02.11.00_k-1.xs8~2_1.src.rpm


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-18
changelog:
  - Require sil-abyssinica-fonts in supplemental(#994341)
  - Fully specify requirements on subpackages(#971386)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-22
changelog:
  - Move rpm-plugin-systemd-inhibit man page to that package (#1360706)
  - Fix off by one error in base64 code (#1341913)
  - Add sources to lua to prevent %autosetup failing in some cases (#1359084)
  - Fix refcounting for Python hdr objects (#1358467)
  - Perl dependecy generator: Skip blocks after variable definitions (#1378307)
  - Verify signatures properly (#1371487)
  - Export function in Python binding for yum (#1343692)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-28
changelog:
  - Make sure files in /usr/src/debug are not world writable (RHBZ #1441098)
  - Increase maximal header size (RHBZ #1434656)
  - Increase buffer to be able to render Korean dates (RHBZ #1425231)
  - Add --noconfig option (RHBZ #1406611)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
  - Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Lubos Kardos <lkardos@redhat.com> - 20130529-10
changelog:
  - Allow to use vendor prefix in packages names
  - Include %nfsmountable macro into scl's rpm macros file


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.8.71-9.1
changelog:
  - Rebase on XenServer's 2.8.74-1, but keep versioning consistent with CentOS 7
  - Restore upstream CentOS changelog, that had been deleted by XenServer
  - Add setup-2.8.74-delete-telemetry-user-and-group.XCP-ng.patch
  - *** XenServer changelog ***
  - * Mon Apr 03 2023 Deli Zhang <dzhang@tibco.com> - 2.8.74-1
  - - CP-42642: Add certusers group
  - * Fri Mar 31 2023 Ming Lu <ming.lu@cloud.com> - 2.8.73-1
  - - CP-42024: Add telemetry user and group
  - * Wed Mar 29 2023 Tim Smith <tim.smith@citrix.com> - 2.8.72-2
  - - CP-42509 Merge new passwd and group files on package update
  - * Fri Mar 10 2023 Tim Smith <tim.smith@citrix.com> - 2.8.72-1
  - - Rebuild and move sources
  - * Tue Mar 07 2023 Deli Zhang <dzhang@tibco.com> - 2.8.71-10
  - - CP-41888: Add nagios and nrpe users/groups
  - * Tue Mar 07 2023 Deli Zhang <dzhang@tibco.com> - 2.8.71-9
  - - CP-41888: Import initial package


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.2.3-1.3
changelog:
  - %preun: Move command above exit 0 so that it's executed
  - Properly disable the removed sr_health_check.timer
  - Also remove the dangling symlink if still present due to improper removal
    of the timer in sm-3.2.0-1.5


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.2.3-1.4
changelog:
  - Add 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
  - Restore the sr_health_check service and the code which goes with it.


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.3-1.7
changelog:
  - Import 8.2 LINSTOR changes on 8.3:
  - Robustify HA: use a specific group with a replication count of 3
  - Export helpers in linstor-manager regarding network interfaces
  - Improve health-check helper: more details and simple API
  - Fix pause/unpause: always load a valid VHD chain
  - Robustify remote "vhdutil check" command
  - Robustify SR destruction
  - Prevent diskless destruction on master host
  - Prevent tiebreaker destruction
  - Reduce LINSTOR vhdutil queries


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.3-1.13
changelog:
  - Replace 0030-fix-cleanup.py-bad-live-coalesce-check-regarding-Fil.patch with 0030-fix-getAllocatedSize-is-incorrect-75.patch
  - Ensure correct allocatedSize for FileVDI in cleanup.py


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.3-1.14
changelog:
  - Sync fork-load-daemon script with http-nbd-transfer (v1.5.0)
  - Fix coalesce process for LINSTOR SRs
  - Many code improvements for issues detected by mypy


author: Yann LE BRIS <yann.lebris@vates.tech> - 3.2.3-1.16
changelog:
  - Add 0061-Fix-LVHDSR.load-set-other_conf-in-cond-branch-to-pre.patch
  - Add 0062-fix-cleanup.py-protect-LinstorSR-init-against-race-c.patch
  - Add 0063-Fix-filter-to-reject-other-device-types-77.patch
  - Add 0064-feat-add-HPE-Nimble-multipath-configuration.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.1
changelog:
  - Rebase on 3.2.12-3
  - Sync patches with our latest 3.2.12-8.3 branch
  - Remove patches merged upstream:
    - 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
    - 0030-fix-getAllocatedSize-is-incorrect-75.patch
    - 0047-Define-and-details-attr-on-Failure-mock.patch
    - 0064-feat-add-HPE-Nimble-multipath-configuration.patch
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-3
    - CA-405381: update mpathcount while xapi is not enabled
    * Thu Feb 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-2
    - CA-403593: don't log session refs
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-1
    - CA-400789: Do not exclude parentless VDIs from cacheing
    - CP-52844: allow for open session to be passed to sr_get_capability
    - CP-52852: add handler for xmlrpc ProtocolError
    - fix(cleanup.py): bad live coalesce check regarding FileSR
    * Tue Nov 19 2024 Mark Syms <mark.syms@cloud.com> - 3.2.11-1
    - CP-42675: send messages to Xapi if GC has insufficient space
    - CP-52620: enable read-through cache on persistent leaf
    * Tue Nov 05 2024 Mark Syms <mark.syms@cloud.com> - 3.2.10-1
    - CA-397084: SR scan tries to deactivate LV in use by tapdisk
    - CA-399644: if we make progress do not abort the GC or evaluate criteria
    - CA-400743: perform post snapshot rename in ioretry
    - CA-401068: if iSCSI device path is not found scan the bus
    * Wed Oct 09 2024 Mark Syms <mark.syms@cloud.com> - 3.2.9-3
    - CP-51658: install stop gc helper script
    - CA-399643 Use full paths when stopping fairlock on upgrade
    - CA-396655: check xapi is enabled before starting multipath reporting
    - CA-396658: check xapi is enabled before checking SR health
    - CA-400106: disable leaf coalesce with VDI snapshot secondary
    * Tue Sep 24 2024 Tim Smith <tim.smith@cloud.com> - 3.2.8-2
    - CA-399643 Use full paths when stopping fairlock on upgrade
    * Fri Sep 06 2024 Robin Newton <robin.newton@cloud.com> - 3.2.8-1
    - CA-398958 Cope with concurrent read-only activations
    * Wed Sep 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.7-1
    - CA-398425: correctly check for multiple targets in iSCSI
    * Wed Aug 21 2024 Mark Syms <mark.syms@cloud.com> - 3.2.6-1
    - CA-395560: Log exception details when LUN refresh fails
    - CA-396124: amend criteria under which the garbage collector aborts
    - CA-397084: Log any user of LV at deactivate
    - CP-51214: stop cgrules triggering errors on update
    * Tue Jul 23 2024 Tim Smith <tim.smith@cloud.com> - 3.2.5-1
    - CA-395554 Stop fairlock services on package upgrade
    * Mon Jul 22 2024 Mark Syms <mark.syms@cloud.com> - 3.2.4-1
    - Add missing sg3_utils dependency
    - Update multipath config for Dell, IBM and Nimble arrays


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-5
changelog:
  - Optional separation of TLS client key and certificate files
  - Add patch enabling verification of TLS server (  #864894 )


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-7
changelog:
  - remove world readable permissions of the config file (#962988)
  - revive the authpass patch (#970123)
  - revive improved default config settings which were lost during rebase (#895708)


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
    "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
    and tests-mx32/ioctl_evdev.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
  - Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790052):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
    (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Fix expected alignment for IPC tests (#1795261):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.15-3.1
changelog:
  - Synced from sudo-1.9.15-3.xs8.src.rpm
  - Removed XS-specific test of dist macro to determine buildrequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.15-4.1
changelog:
  - Sync with 1.9.15-4
  - *** Upstream changelog ***
  - * Thu Jul 4 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-4
  -- - Drop python plugin as not required


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-2
changelog:
  - CP-39549: Configure defaults for swtpm_localca
  - CA-363859: Make compatible with GnuTLS 3.3
  - Fix debuginfo generation


author: Edwin Török <edwin.torok@cloud.com> - 0.7.3-3
changelog:
  - CA-371900: Capture output from swtpm during setup
  - Replace patch with upstream backports
  - CP-43409: update TPM manufacturer
  - CP-42059: Use simpler HTTP based REST API


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-8
changelog:
  - Add gnutls-compat.patch back to make compatible with xs8/xs9
  - CA-377995: Fix static analysis warnings


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
  - Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
  - Patch from Peter Robinson <pbrobinson@redhat.com>


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Simon Rowe <simon.rowe@citrix.com> - 2.0.0-1
changelog:
  - CA-293995: Ensure xmllint call is quoted
  - Remove slipstreaming tools
  - Add support for multiple precheck scripts


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-20
changelog:
  - Rebase to fedora 3.11.0
    (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-21
changelog:
  - Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
  - Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
  - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
  - Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
  - Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
  - valgrind 3.13.0 (fedora).
  - Update description.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch
  - Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch
  - Add --error-exitcode=1 to /bin/true check.
  - Add valgrind-3.13.0-xml-socket.patch
  - Add valgrind-3.13.0-ppc64-vex-fixes.patch
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch
  - Workaround gdb/python bug in testsuite (#1434601)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.0.0-2.2
changelog:
  - Remove dependency to secureboot-certificates, for now
  - Add varstored-1.0.0-tolerate-missing-dbx-on-disk.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-1.1
changelog:
  - Update from XS 8.3 prerelease updates
  - *** Upstream changelog ***
  - * Wed Aug 17 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.1.0-1
  - - varstore-sb-state: only load auth data if needed
  - - xapidb_init: Use BACKEND_INIT_FAILURE
  - - CA-366706: Fix signal handling and possible segfault
  - - CP-39854: Implement Platform Attack Reset Mitigation spec
  - - CP-39864 / CP-40029: Implement PPI support
  - * Tue Jul 26 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.0.0-3
  - - Fix license of tools subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.1
changelog:
  - Update to 1.2.0-1
  - Remove varstored-1.0.0-change-certs-directory.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.2.0-1
  - - CP-41616: Move varstored auth dir to /var/lib/varstored
  - - CA-369046: Log the error code if set_variable_from_auth fails
  - - CA-362923: Change output format of create-auth
  - - CP-40832: Add standard UEFI Secure Boot certificates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.2
changelog:
  - Revert part of XCP-ng specific changes, as upstream varstored now uses /var/lib/varstored
    and certs should be available by default now.
  - Add varstored-1.2.0-fix-return-code-for-varstore-sb-state-user.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.3
changelog:
  - Update secureboot-certs script for recent UEFI cert handling in XAPI
  - Remove KEK and db cert databases for now, pending legal advice.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-2.1
changelog:
  - Sync with 1.2.0-2
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 1.2.0-2
  - - Rebuild against libxenstore.so.4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.2
changelog:
  - Auth: Add support to make KEK and DB files optional
  - Auth: Enable AUTH_ONLY_PK_REQUIRED build macro


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.3
changelog:
  - Remove generation and installation of KEK and db files
  - Add helper script to remove pem file from source archive
  - Update source archive with pem files removed


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: Edwin Török <edvin.torok@citrix.com> - 2.0.1-5
changelog:
  - Maintenance: move single source into .spec repo instead of separate repo
  - CP-38218: rename to .py so SonarQube can find it


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.1-1.1
changelog:
  - Update to 2.0.1-1
  - *** Upstream changelog ***
  - * Mon Jan 30 2023 Zhuangxuan Fei <zhuangxuan.fei@cloud.com> - 2.0.1-1
  - - CA-374882: Add new driver microsemi-aacraid as requires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.2-1.1
changelog:
  - Rebase on 2.0.2-1
  - Keep dependency to our mpi3mr-module RPM instead of upstream's new but older broadcom-mpi3mr RPM
  - *** Upstream changelog ***
  - * Wed Nov 22 2023 Mark Syms <mark.syms@citrix.com> - 2.0.2-1
  - - Add broadcom-mpi3mr to required drivers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Rebase on 2.0.3-1
  - Switch dependency from our igc-module to the new intel-igc
  - *** Upstream changelog ***
  - * Fri Apr 19 2024 Stephen Cheng <stephen.cheng@cloud.com> - 2.0.3-1
  - - Add intel-igc to required drivers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.3.7-1.3
changelog:
  - Add import-trusted-keys one-shot service. Replaces old service...
  - ... from xenserver-firstboot (60-import-keys)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Citrix Systems, Inc. <www.citrix.com>
changelog:
  - fix possible buffer overflow if many images are captured
  - fix format error
  - does not take capture twice


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10.2.0-1
changelog:
  - Use xenstored.service rather than socket
  - Specify coredump limit in unit rather than wrapper script
  - CA-308916: Remove special coredump handling


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
  - Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
  - Run internal test suite during build (#1295846)
  - Fix -nv being documented as synonym for two options (#1147572)


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
  - Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
  - Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-3
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries nor produce the debuginfo package at all for now


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.2.0-1
changelog:
  - New version 1.2.0
  - Correctly report error codes when opening an emu stream using a non-sock file
  - Streams support pipes


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-5
changelog:
  - Remove dlm, dlm-lib, corosync and corosynclib
  - We don't use XS's clustering feature which means we don't need them


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-4
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries
  - Do not produce the debuginfo package at all for now


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-23
changelog:
  - Loosely sync with xenserver-release-8.4.0-5
  - *** Upstream changelog ***
  - * Mon Apr 08 2024 Stephen Cheng <stephen.cheng@cloud.com> - 8.4.0-5
  - - CP-47599: Update set-printk-console to Python3
  - * Thu Mar 07 2024 Alex Brett <alex.brett@cloud.com> - 8.4.0-4
  - - CA-389583: Update curlrc cipher specification to openssl format


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-24
changelog:
  - Loosely sync with xenserver-release-8.4.0-10
  - *** Upstream changelog ***
  - * Wed May 22 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-10
  - - CA-392433: Start dhclient on iSCSI BFS interfaces
  - * Thu May 16 2024 Bernhard Kaindl <bernhard.kaindl@cloud.com> - 8.4.0-9
  - - CA-392412: Disable the bpf syscall for unprivileged tasks (not used)
  - * Sat May 11 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-8
  - - CP-46084: Revert and move gnu-free-sans-fonts obsoletion to xs-obsolete-packages
  - * Fri May 10 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-7
  - - CP-46084: Obsolete unused package gnu-free-sans-fonts
  - * Tue May 07 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-6
  - - CP-49083: Do not patch logrotate configuration


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-26
changelog:
  - Don't require the empty kernel-livepatch and xen-livepatch packages
  - Ensure rsyslog and systemd are installed in xcp-ng-release-config's %post


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-27
changelog:
  - Loosely sync with xenserver-release-8.4.0-11
  - *** Upstream changelog ***
  - * Tue Jun 18 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-11
  - - CP-47026: Move mcelog config changes to mcelog.spec


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-28
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 8.3.0-29
changelog:
  - Add 0001-fix-curl-resolve-TLS-issue-caused-by-restrictive-con.patch
  - This adds a cipher to '.curlrc' to fix a TLS Handshake Error with xoa.io


author: Yann Dirson <yann.dirson@vates.tech> - 8.3.0-30
changelog:
  - Sync with xenserver-release-8.4.0-14:
    - 0001-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0002-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch
    - Pull xcp-python-libs-compat (dropped from xapi deps between
      4.19 and 4.39)
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-14
    - CA-403415: Install xcp-python-libs-compat for XS8
    * Fri Oct 04 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-13
    - Enable new RRDD plugins
    * Fri Sep 20 2024 Mark Syms <mark.syms@cloud.com> - 8.4.0-12
    - CA-399511: Change systemd dependencies for vm.slice


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.2-1
changelog:
  - Really disable unwanted repos when running yum update
  - Fix exception handling when a command fails


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.3-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.1.0-1
changelog:
  - Add a new RAW device plugin
  - Add a trash folder to destroy volumes during coalesce
  - Few NBD changes to increase performance (block size, none scheduler, ...)


author: Yann Dirson <yann.dirson@vates.tech> - 1.2.0-1
changelog:
  - Include new zfs-vol volume plugin
  - Change package to noarch
  - Stop shipping qemudisk datapath plugins, qemuback daemon, and other volume plugins
  - Split RPM between libs and individual datapath and volume plugins


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.2.0-3
changelog:
  - Add missing dependency to xapi-storage-script
  - Minor fixes in datapath and volume description
  - Add a comment regarding disabling qemuback.service


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.2.1-1
changelog:
  - Don't install qcow2util.py and qemudisk.py because qcow2 is not yet supported
  - Remove dependency to python2-psutil that was required by qcow2


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Andrew Cooper <andrew.cooper3@citrix.com>
changelog:
  Version 2.4.0
  - Various bug fixes
  - Add debugging info for console rings
  - Allow detection of a Xen debug build
  - Doxygen updates
  - Move classes into namespaces


author: Roger Pau Monné <roger.pau@citrix.com> - 2.6.1
changelog:
  - Fix for fetching dom0 console with kernels >= 5.10
  - Fix to deal with Xen builds without PV32 support.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.4-10.34
changelog:
  - Fixes for
    - XSA-326 CVE-2022-42311 CVE-2022-42312 CVE-2022-42313 CVE-2022-42314
              CVE-2022-42315 CVE-2022-42316 CVE-2022-42317 CVE-2022-42318
    - XSA-414 CVE-2022-42309
    - XSA-415 CVE-2022-42310
    - XSA-416 CVE-2022-42319
    - XSA-417 CVE-2022-42320
    - XSA-418 CVE-2022-42321
    - XSA-419 CVE-2022-42322 CVE-2022-42323
    - XSA-420 CVE-2022-42324
    - XSA-421 CVE-2022-42325 CVE-2022-42326


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.4-10.37
changelog:
  - Initial support for Intel Sapphire Rapids.
  - Don't mark IRQ vectors as pending when the vLAPIC is disabled.  This fixes
    an issue with Linux 5.19 and later.
  - Remove an incorrect but benign warning which occurs for a UEFI VM that
    modifies the vRTC time.
  - Fix overflow with high frequency TSCs.
  - Fix crash on boot with invalid UEFI framebuffer configurations.
  - Fix race condition releasing an IRQ which is in the process of moving
    between CPUs.
  - Fix timer affinity after S3.
  - Drop Introspection Extensions.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.40
changelog:
  - Fix for XSA-426 CVE-2022-27672.
  - More fixes for memory corruption issues in the Ocaml bindings.
  - On xenstored live update, validate the config file before launching
    into the new xenstored.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.41
changelog:
  - Load AMD microcode on all logical processors.
  - Switch to using Python 3.  Retain Python 2 builds of xen.lowlevel in the
    short term until dependent packages have been updated.
  - Fix libfsimage build in the presence of newer Linux headers.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.13.5-10.42
changelog:
  - Fixes for
    - XSA-427 CVE-2022-42332
    - XSA-428 CVE-2022-42333 CVE-2022-42334
    - XSA-429 CVE-2022-42331
  - Move partial python library from xen-tools to xen-dom0-tools.  The content
    was all specific to dom0, and ineligible to be used elsewhere.
  - Reintroduce the python2 pygrub/libfsimage bindings.


author: Andrei Semenov <andrei.semenov@vates.fr> - 4.13.5-10.42.0.fixamdproc.1
changelog:
  - From XenServer: Cope booting in x2APIC mode on AMD systems without XT mode
  - From XenServer: Remove sequential microcode application support. Only parallel application


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 10-1
changelog:
  - Remove xenbuilder files
  - CA-323402: Avoid 900s delay during iSCSI boot when path is down
  - CA-323402: Don't wait for network interfaces to be setup


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 2.0.3-1
changelog:
  - CA-389135: Fix saving RRDs using the hidden --entries=persistent-stats flag
  - CA-389176: Fix collecting the /var/log/xcp-rrdd-plugin logs when --all is used
  - CA-389177: Fix interactive yes/no question mode (if --yestoall is not passed)


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 2.0.5-2
changelog:
  - CP-49659:  Fix collecting kernel module infos with non-latin strings
  - CA-394409: Fix collecting logs for HW certification and tapdisk


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-8
changelog:
  - revert loff_t to off64_t change to preserve xfs.h behavior (#1366291)
  - accomodate lack of ustat() on some arches (#1373605)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Christian Lindig <christian.lindig@citrix.com> - 10.1.0-1
changelog:
  - XSI-301: Print errno when watchdog hypercall fails.
  - XSI-301: remove duplicated unlock_pages lines
  - CA-315962 cleanupwatchdog: Use hypercall's errno
  - CA-315962 cleanupwatchdog: exit when encountering errors on hypercalls
  - CA-315962 cleanupwatchdog: restrict hypercalls to disable watchdogs
  - CA-315962 cleanupwatchdog: simplify hypercall call handling
  - CA-315962 cleanupwatchdog: Allow resetting watchdog slots without an HA file
  - CA-315962: Flush watchdog slots on HA startup


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
  - Fix bashism in spec file (&>)
  - Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
  - Remove perl and autoconf requirement.
  - Create %ghost files {misc|705dpi|...}/fonts.scale.
  - Drop fontdir alias patches
  - Update a few fonts (well, all of them)
      - encodings-1.0.3
      - font-adobe-100dpi-1.0.1
      - font-adobe-75dpi-1.0.1
      - font-adobe-utopia-100dpi-1.0.2
      - font-adobe-utopia-75dpi-1.0.2
      - font-adobe-utopia-type1-1.0.2
      - font-alias-1.0.2
      - font-arabic-misc-1.0.1
      - font-bh-100dpi-1.0.1
      - font-bh-75dpi-1.0.1
      - font-bh-lucidatypewriter-100dpi-1.0.1
      - font-bh-lucidatypewriter-75dpi-1.0.1
      - font-bitstream-100dpi-1.0.1
      - font-bitstream-75dpi-1.0.1
      - font-bitstream-type1-1.0.1
      - font-cronyx-cyrillic-1.0.1
      - font-cursor-misc-1.0.1
      - font-daewoo-misc-1.0.1
      - font-dec-misc-1.0.1
      - font-isas-misc-1.0.1
      - font-jis-misc-1.0.1
      - font-micro-misc-1.0.1
      - font-misc-cyrillic-1.0.1
      - font-misc-ethiopic-1.0.1
      - font-misc-misc-1.1.0
      - font-mutt-misc-1.0.1
      - font-schumacher-misc-1.1.0
      - font-screen-cyrillic-1.0.2
      - font-sony-misc-1.0.1
      - font-sun-misc-1.0.1
      - font-winitzki-cyrillic-1.0.1
      - font-xfree86-type1-1.0.2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.66.0-1.1
changelog:
  - Remove dlm, which is only required by proprietary xapi-clusterd
  - Drop the dlm-devel BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.72.0-1.1
changelog:
  - Update to 6.72.0-1
  - Rediff xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch
  - *** Upstream changelog ***
    * Fri Jul 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.72.0-1
    - upstream: patch rpclib to support python3, and start using it
    - upstream: patch uri packages to parse ipv6 addresses correctly
    - maintenance: Fix issues spotted by the opam linter

    * Mon Jul 17 2023 Edwin Török <edwin.torok@cloud.com> - 6.71.0-2
    - Bump release and rebuild

    * Tue Jul 11 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.71.0-1
    - xs: update xapi-rrd to 1.9.2 (memory leak fix)
    - xs: add goblint for static analysis of C stubs

    * Mon Jul 10 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-2
    - Remove build dependencies, they are opam's normal dependencies

    * Wed Jun 07 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-1
    - xs: update xapi-stdext packages
    - upstream: remove unused dependencies, do not depend on xen
    - xs-extra: update metadata from upstream
    - vhd-format: move from upstream to xs-extra

    * Tue Jun 06 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-2
    - Bump release and rebuild

    * Fri May 05 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-1
    - ocaml: Use correct file contents in ocaml-system.4.14.1
    - upstream: Remove old ocamlformat and odoc-parser

    * Mon Apr 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.68.0-1
    - xs: do not package ezxenstore, it's a part of xen-api
    - ocaml: add 4.14

    * Wed Mar 22 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.67.0-1
    - xs: xenctrl.dummy: do not rsync Xen packages we do not use
    - Make xs-opam self-consistent and able to run unit tests
    - upstream: enforce only known licenses
    - upstream: update dune packages to 3.7.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.74.0-1.1
changelog:
  - Update to 6.74.0-1
  - Drop xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch, applied by XS
  - *** Upstream changelog ***
    * Thu Nov 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.74.0-1
    - xs: update xapi-stext packages to 4.23.0
    - licenses: update package licenses

    * Fri Oct 27 2023 Lin Liu <Lin.Liu01@cloud.com> - 6.73.0-2
    - Build with gcc for xs9

    * Wed Sep 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.73.0-1
    - xs: update polly and qmp
    - upstream: update many packages, there are no breaking changes


author: Benjamin Reis <benjamin.reis@vates.tech> - 6.77.0-1.1
changelog:
  - Rebase on 6.77.0-1
  - Drop xs-opam-repo-6.74.0-metajson.XCP-ng.patch
  - *** Upstream changelog ***
    * Wed Jan 31 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.77.0-1
    - Remove xapi-rd, xapi-inventory and xapi-stext-* packages

    * Wed Dec 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-2
    - Bump release

    * Tue Dec 19 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-1
    - upstream: update ocamlformat to the latest version
    - update inotify to 2.5.0 and uri to 4.4.0

    * Fri Nov 17 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.75.0-1
    - xs: update xapi-rrd to 1.11.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.78.0-1.1
changelog:
  - Rebase on 6.78.0-1
  - *** Upstream changelog ***
    * Thu Mar 07 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.78.0-1
    - Add patch for rpclib to accept empty variants
    - Non-breaking update of upstream dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.80.0-1.1
changelog:
  - Rebase on 6.80.0-1
  - *** Upstream changelog ***
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1

    * Mon May 13 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.79.0-1
    - ocaml: add 4.14.2 packages
    - upstream: update non-breaking packages


author: Yann Dirson <yann.dirson@vates.tech> - 6.86.0-1.1
changelog:
  - Update to 6.86.0-1
  - Refresh removal of dlm package (location changed in source tree)
  - Don't pass "-f" to "rm" while removing packages, to better catch upstream changes
  - Fix typo generating /etc/profile.d/opam.sh
  - Reformat changelog to allow diffing with upstream
  - Upstream changelog:
    * Wed Oct 09 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.86.0-1
    - Include crowbar library
    
    * Tue Oct 08 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.85.0-1
    - Update Uuidm to 0.9.9
    - Use upstream folder structure, use opam-directed tools for managing it
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.84.0-1
    - CA-399172: fix potential crash in Uri.of_string
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.83.0-1
    - Patch Uri packages to add path_unencoded
    - jst-config: fix build on Fedora40
    - Metadata refresh, breaking update of upstream libraries
    - Remove systemd library
    
    * Tue Jul 02 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.81.0-1
    - Update crc to 2.2.0
    - Add qcheck and qcheck-alcotest
    
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.1
changelog:
  - Manually sync with CentOS 8's 1.1.1k-5 as Citrix did not update for CH 8.2.1
  - Use the hobbled sources instead of the full sources, as RHEL/CentOS does
  - Rediff Citrix's patch use-linux-random-header.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-5.2
changelog:
  - Fix failing tests due to expired certificates in test data
  - Disable zlib to remove TLS compression support
  - Remove extraneous --system-ciphers-file configure option


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1:1.1.1k-6.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-6.
  - *** Upstream changelog ***
  - * Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
  - - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - - Resolves: rhbz#2067146


author: David Morel <david.morel@vates.fr> - 1:1.1.1k-9.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-9.
  - Remove update-expired-SCT-certificates patch as it is integrated upstream
  - *** Upstream changelog ***
  - * Wed Feb 08 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
  - - Fixed Timing Oracle in RSA Decryption
  -   Resolves: CVE-2022-4304
  - - Fixed Double free after calling PEM_read_bio_ex
  -   Resolves: CVE-2022-4450
  - - Fixed Use-after-free following BIO_new_NDEF
  -   Resolves: CVE-2023-0215
  - - Fixed X.400 address type confusion in X.509 GeneralName
  -   Resolves: CVE-2023-0286
  - * Thu Jul 21 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-8
  - - Fix no-ec build
  -   Resolves: rhbz#2071020
  - * Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
  - - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  -   Resolves: CVE-2022-2097
  - - Update expired certificates used in the testsuite
  -   Resolves: rhbz#2092462
  - - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  -   Resolves: rhbz#2090372
  - - Fix CVE-2022-2068: the c_rehash script allows command injection
  -   Resolves: rhbz#2098279


author: David Morel <david.morel@vates.tech> - 1:1.1.1k-12.1
changelog:
  - Sync with Centos 8 Stream's 1.1.1k-12.
  - Do not package openssl.cnf at all for xs-openssl, the system-wide one will be
    the one packaged with openssl.
  - disable weak ciphers at compile time
  - *** Upstream changelog ***
  - * Thu Nov 30 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
  - - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
  -   (a proper fix for CVE-2020-25659)
  -   Resolves: RHEL-17696
  - * Wed Nov 15 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
  - - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
  -   excessively long X9.42 DH keys or parameters may be very slow
  -   Resolves: RHEL-16538
  - * Thu Oct 19 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
  - - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
  -   Resolves: RHEL-14245
  - - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
  -   Resolves: RHEL-14239


author: Yann Dirson <yann.dirson@vates.fr> - 10.1.13-1.2
changelog:
  - Update colors to match new branding
  - Bump patchname to xsconsole-10.1.13-define-xcp-ng-colors.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-1.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Oct 04 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.14-1
  - - CP-40640: Show the textual rather than numeric product version


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.6-1.1
changelog:
  - Sync with 11.0.6-1
  - *** Upstream changelog ***
  - * Fri Jun 07 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.6-1
  - - CA-388527: Fix 'timed out' when creating an ISCSI SR
  - * Thu May 16 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.3-1
  - - CA-357771: Remove obsolete strings: StorageLink(CVSM/cslg) leftovers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.8-1.1
changelog:
  - Sync with 11.0.8-1
  - *** Upstream changelog ***
    * Tue Jul 23 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.8-1
    - CA-390512: Improved xenapi error handling
    * Tue Jul 23 2024 Alex Brett <alex.brett@cloud.com> - 11.0.7-1
    - CP-49228: Reintroduce Portable SR feature


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-151
changelog:
  - Add repo-id to repomd timestamp error message.
  - Resolves: bug#1389816
  - Don't recommend makecache if just running.
  - Resolves: bug#1369389
  - Add logging of bad update notice duplicates.
  - Resolves: bug#1194915


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-153
changelog:
  - Filter duplicates when counting security updates.
  - Resolves: bug#1399628
  - sqlitesack: fix filelist queries for duplicate pkgs.
  - Resolves: bug#1391507


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-154
changelog:
  - Add payload_gpgcheck option.
  - Resolves: bug#1343690
  - Add hint about rm -rf for yum clean all.
  - Resolves: bug#1357083
  - Have "yum check" ignore self conflicts.
  - Resolves: bug#1370134
  - Detect installed virtual provide in install().
  - Resolves: bug#1352585
  - Fix reget problems with simple md filenames.
  - Resolves: bug#1397829


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-155
changelog:
  - Don't pollute stderr in FIPS mode.
  - Resolves: bug#1287610
  - Don't require enabled repos for URL installs.
  - Resolves: bug#1175315
  - installonlypkgs: add "installonlypkg(kernel)
  - Resolves: bug#1358492
  - Manpage fixes.
  - Resolves: bug#1386597
  - Resolves: bug#1411575


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-156
changelog:
  - Preload shared libs that we may dlopen().
  - Resolves: bug#1458841
  - Update payload_gpgcheck documentation.
  - Resolves: bug#1451817
  - Make exactarchlist support wildcards and add docs.
  - Resolves: bug#1361609
  - Add usercache config option.
  - Resolves: bug#1432319


author: CentOS Sources <bugs@centos.org> - 3.4.3-158.el7.centos
changelog:
  - CentOS yum config
  -  use the CentOS bug tracker url
  -  retain installonly limit of 5
  -  ensure distrover is always from centos-release
  - Make yum require yum-plugin-fastestmirror


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-37
changelog:
  - needs-restarting: add option for reboot hint.
  - Resolves: bug#1192946
  - needs-restarting: add option to list services.
  - Resolves: bug#1335587
  - reposync: add --download-metadata to the man page.
  - Resolves: bug#1329649
  - debuginfo-install: also respect provides when testing for installonly.
  - Related: bug#1293707


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-40
changelog:
  - needs-restarting: rework reboothint logic.
  - Related: bug#1192946
  - needs-restarting: rebase patch for 1335587.
  - Related: bug#1335587


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-41
changelog:
  - yum-config-manager: only select exact matches from --setopt.
  - Resolves: bug#1403015
  - yum-plugin-verify: set exit status to 1 in case of problems.
  - Resolves: bug#1406891


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-43
changelog:
  - yumdownloader: fix crash on broken srpm metadata.
  - Resolves: bug#1458098
  - package-cleanup: don't remove required dupes.
  - Resolves: bug#1455318
  - fastestmirror: move the logic before MD retrieval.
  - Resolves: bug#1428210
  - yum-debug-dump: improve repo failure handling.
  - Resolves: bug#1445751


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 1.1.31-44
changelog:
  - Add pre-transaction-actions plugin.
  - Resolves: bug#1470647
  - yum-builddep: add --define option.
  - Resolves: bug#1437636
  - verifytree: handle no @core group gracefully.
  - Resolves: bug#1349433
  - verifytree: fix handling of missing comps.
  - Resolves: bug#1333353


