# changelog

author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Arkady L. Shane <tigro@msvsphere-os.ru> - 3.0.103-1.inferit
changelog:
  - Fix re-declarations of builtin functions with clang 10
  - Add missing constructor (fix build)
  - Fix runtime_id


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-1
changelog:
  - Fixed debuginfo going to separate package (Patch1)
  - Added F25/F26 RIL and fixed the version info (Patch2)
  - Added F25/F26 RIL in Microsoft.NETCore.App suported runtime graph (Patch3)
  - SPEC file cleanup


author: Nemanja Milosevic <nmilosev@fedoraproject.org> - 1.1.0-2
changelog:
  - SPEC cleanup
  - git removal (using all tarballs for reproducible builds)
  - more reasonable versioning


author: Omair Majid <omajid@redhat.com> - 2.0.0-2
changelog:
  - Move libicu/libcurl/libunwind requires to runtime package
  - Make sdk depend on the exact version of the runtime package


author: Omair Majid <omajid@redhat.com> - 2.0.3-4
changelog:
  - Add a test script to sanity check debug and symbol info.
  - Build with clang 5.0
  - Make main package real instead of using a virtual provides (see RHBZ 1519325)


author: Omair Majid <omajid@redhat.com> - 2.1.403-2
changelog:
  - Disable telemetry by default
  - Users have to manually export DOTNET_CLI_TELEMETRY_OPTOUT=0 to enable


author: Omair Majid <omajid@redhat.com> - 3.0.0-0.6.preview6
changelog:
  - Update to .NET Core Runtime 3.0.0-preview6-27804-01 and SDK 3.0.100-preview6-012264
  - Set dotnet installation location in /etc/dotnet/install_location
  - Update targeting packs
  - Install managed symbols
  - Completely conditionalize libunwind bundling


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.16.preview9
changelog:
  - Fix files duplicated between dotnet-apphost-pack-3.0 and dotnet-targeting-pack-3.0
  - Fix dependencies between .NET SDK and the targeting packs


author: Omair Majid <omajid@redhat.com> - 5.0.104-2
changelog:
  - Mark files under /etc/ as config(noreplace)
  - Add an rpm-inspect configuration file
  - Add an rpmlintrc file
  - Enable gating for release branches and ELN too


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.3
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-2958


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: - John W. Linville <linville@redhat.com> - 1.7.0-2
changelog:
  - Use EXTRA_CFLAGS to include standard Fedora compiler flags in build
  - Set CONFIG_RTE_MACHINE=default to build for least-common-denominator machines
  - Turn-off build of librte_acl, since it does not build on default machines
  - Turn-off build of physical device PMDs that require kernel support
  - Clean-up the install rules to match current packaging
  - Correct changelog versions 1.0.7 -> 1.7.0
  - Remove ix86 from ExclusiveArch -- it does not build with above changes


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-4
changelog:
  - Copy the headers instead of broken symlinks into -devel package
  - Force sane mode on the headers
  - Avoid unnecessary %exclude by not copying unpackaged content to buildroot
  - Clean up summaries and descriptions
  - Drop unnecessary kernel-devel BR, we are not building kernel modules


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-5
changelog:
  - Avoid unnecessary use of %global, lazy expansion is normally better
  - Drop unused destdir macro while at it
  - Arrange for RTE_SDK environment + directory layout expected by DPDK apps
  - Drop config from main package, it shouldn't be needed at runtime


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-6
changelog:
  - Avoid variable expansion in the spec here-documents during build
  - Drop now unnecessary debug flags patch
  - Add a spec option to build a combined library


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-7
changelog:
  - Policy compliance: move static libraries to -devel, provide dpdk-static
  - Add a spec option to build as shared libraries


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-2
changelog:
  - Enable librte_vhost, which buildrequires fuse-devel
  - Enable physical NIC drivers that build (e1000, ixgbe) for VFIO use


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-3
changelog:
  - Fix -Wformat clash preventing i40e driver build, enable it
  - Fix -Wall clash preventing enic driver build, enable it


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-5
changelog:
  - Add DT_NEEDED for external dependencies (pcap, fuse, dl, pthread)
  - Enable combined library creation, needed for OVS
  - Enable shared library creation, needed for sanity


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-10
changelog:
  - Drop symbol versioning patches, always do library version for shared
  - Add comment on the combined library thing


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1695.gitc2ce3924.1
changelog:
  - Add spec magic to easily switch between stable and snapshot versions
  - Add tarball snapshot script for reference
  - Update to pre-2.0 git snapshot


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.2
changelog:
  - Move config changes from spec after "make config" to simplify things
  - Move config changes from dpdk-config patch to the spec


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.3
changelog:
  - Add spec option to build kernel modules too
  - Build eventfd-link module too if kernel modules enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1906.git00c68563.1
changelog:
  - New snapshot
  - Remove bogus devname module alias from eventfd-link module
  - Whack evenfd-link to honor RTE_KERNELDIR too


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1911.gitffc468ff.1
changelog:
  - New snapshot
  - Disable kernel module build by default
  - Add patch to fix missing defines/includes for external applications


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2049.git2f95a470.1
changelog:
  - New snapshot
  - Add spec option for enabling vhost-user instead of vhost-cuse
  - Build requires fuse-devel only with vhost-cuse
  - Add virtual provide for vhost user/cuse tracking


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2086.git263333bb.2
changelog:
  - Switch (back) to vhost-user, thus disabling vhost-cuse support
  - Build requires fuse-devel for now even when fuse is unused


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-2
changelog:
  - Remove the broken kmod stuff
  - Add a new dkms-based eventfd_link subpackage if vhost-cuse is enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-3
changelog:
  - Dont depend on fuse when built for vhost-user support
  - Drop version from testpmd binary, we wont be parallel-installing that


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-4
changelog:
  - Drop unused pre-2.0 era patches
  - Handle vhost-user/cuse selection automatically based on the copr repo name


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-7
changelog:
  - Drop pointless build conditional, the linker script is here to stay
  - Drop vhost-cuse build conditional, vhost-user is here to stay
  - Cleanup comments a bit
  - Enable parallel build again
  - Dont build examples by default


author: Panu Matilainen <pmatilai@redhat.com> - 2.1.0-1
changelog:
  - Update to dpdk 2.1.0 final
    - Disable ABI_NEXT
    - Rebase patches as necessary
    - Fix build of ip_pipeline example
    - Drop no longer needed -Wno-error=array-bounds
    - Rename libintel_dpdk to libdpdk


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-1
changelog:
  - Update DPDK to 2.2.0 final
  - Add README and MAINTAINERS docs
  - Adopt new upstream standard installation layout, including
    dpdk_nic_bind.py renamed to dpdk_nic_bind
  - Move the unversioned pmd symlinks from libdir -devel
  - Establish a driver directory for automatic driver loading
  - Disable CONFIG_RTE_SCHED_VECTOR, it conflicts with CONFIG_RTE_MACHINE default
  - Disable experimental cryptodev library
  - More complete dtneeded patch
  - Make option matching stricter in spec setconf
  - Update driverctl to 0.59


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-2
changelog:
  - Use a different quoting method to avoid messing up vim syntax highlighting
  - A string is expected as CONFIG_RTE_MACHINE value, quote it too
  - Enable librte_vhost NUMA-awareness


author: Panu Matilainen <pmatilai@redhat.com> - 16.07-1
changelog:
  - Update to DPDK 16.07 (#1383195)
  - Disable unstable bnx2x driver (#1330589)
  - Enable librte_vhost NUMA support again (#1279525)
  - Enable librte_cryptodev, its no longer considered experimental
  - Change example prefix to dpdk- for consistency with other utilities
  - Update driverctl to 0.89


author: John W. Linville <linville@redhat.com> - 16.11.2-3
changelog:
  - Enable i40e driver in PowerPC along with its altivec intrinsic support
  - Add PCI probing support for vfio-pci devices in Power8


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Jens Freimann <jfreimann@redhat.com> - 18.11.2-3
changelog:
  - Add fix for wrong pointer calculation to fix Covscan issue
  - https://cov01.lab.eng.brq.redhat.com/covscanhub/task/135452/log/added.html


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-10
changelog:
  - Fix etags local command injection vulnerability (#2175189)
  - Fix htmlfontify.el command injection vulnerability (#2175178)
  - Fix ob-latex.el command injection vulnerability (#2180587)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519)
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.5-9
changelog:
  - emacs "deadlocked" after using mercurial with huge amounts of ignored files in the repository (#1232422)
  - GDB interface gets confused by non-ASCII (#1283412)


author: Jan Synáček <jsynacek@redhat.com> - 1:25.0.95-3
changelog:
  - workaround: emacs build failure due to high memory consumption on ppc64 (#1356919)
    (patch provided by Sinny Kumari)


author: Richard W.M. Jones <rjones@redhat.com> - 1:25.3-2
changelog:
  - Rebuild to try to fix: libwebkit2gtk-4.0.so.37: undefined symbol:
    soup_auth_manager_clear_cached_credentials


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-12
changelog:
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Disable xwidgets (RHEL-14549)


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Related: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.28.5-25
changelog:
  - Resolves: RHEL-29169 (Composer: Cursor jumps to the starting line when "return" key is pressed at the end of the line)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-23
changelog:
  - Resolves: RHEL-12398 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1764818 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1765005 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-14
changelog:
  - Resolves: RHEL-19376 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-125
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14031


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-127
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5397
  - fence_zvmip: document required user permissions in metadata/manpage
    Resolves: RHEL-14343


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18132
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20915
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-22174


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.2
changelog:
  - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer
    Resolves: RHEL-7734
  - bundled jinja2: fix CVE-2024-34064
    Resolves: RHEL-35655


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.5
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-56840


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-129.7
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76492


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.23-1
changelog:
  - new upstream release
  - new package fence-agents-amt-ws
  - new package fence-agents-compute
  - new package fence-agents-drac
  - new package fence-agents-hds-cb
  - new package fence-agents-mpath
  - new package fence-agents-sanbox2
  - new package fence-agents-sbd
  - new package fence-agents-vbox
  - new package fence-agents-vmware
  - new package fence-agents-xenapi


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.24-12
changelog:
  - fence-agents-common: remove fence_scsi_check files
  - fence-scsi: add "fence_scsi_check_hardreboot"


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - new upstream release
  - fence_vmware_soap / fence_ovh: use Python 2 till python3-suds bug
    is fixed


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-11
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1654968
  - fence_scsi: add watchdog retry support
    Resolves: rhbz#1654976
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1654616
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1654973


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-13
changelog:
  - fence-agents-scsi: add missing fence-agents-common dependency
    Resolves: rhbz#1665170
  - fence_azure_arm: add bundled directory to search path
    Resolves: rhbz#1650214


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-23
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1709780
  - fence_rhevm: fix encoding issues
    Resolves: rhbz#1712263


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-25
changelog:
  - fence_redfish: add header for full Redfish spec compliance
    Resolves: rhbz#1704228
  - fence_scsi: fix to match new node ID format
    Resolves: rhbz#1714458


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_aliyun: add RAM role support
    Resolves: rhbz#1732766
  - fence_ilo4_ssh/fence_ilo5_ssh: add monitor timeout warning
    Resolves: rhbz#1734811
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751704


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760201
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1771594


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41
changelog:
  - fence_mpath: add plug parameter support to be able to use pcmk_host_map
    Resolves: rhbz#1753228
  - fence_mpath: fix --reserve parameter typo
    Resolves: rhbz#1798641


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-42
changelog:
  - fence-agents-lpar: build on non-ppc64le arch's
    Resolves: rhbz#1804907
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1810457


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-47
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1827652
  - fence_compute/fence_evacuate: fix --insecure parameter
    Resolves: rhbz#1830776
  - fence_scsi: add readonly parameter
    Resolves: rhbz#1750596


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-52
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
    Resolves: rhbz#1860544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-54
changelog:
  - fence_azure_arm: fix MSI support
    Resolves: rhbz#1818157
  - fence_mpath: allow spaces for comma-separated devices and add
    support for space-separated devices
    Resolves: rhbz#1851115
  - fence_ipmilan: add ability to increase ipmitool verbosity
    Resolves: rhbz#1853973
  - fence_lpar: fix list-status action
    Resolves: rhbz#1861926
  - all agents: make telnet a weak dependency
    Resolves: rhbz#1851232


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-59
changelog:
  - fencing: add disable-timeout parameter and make it true by default
    for Pacemaker 2.0+
    Resolves: rhbz#1470813, rhbz#1436429


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-61
changelog:
  - fence_scsi: dont write key to device if it's already registered,
    and dont write device to file when cluster is started again
    Resolves: rhbz#1841087


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-69
changelog:
  - fencing: add "stonith_status_sleep" parameter to set sleep between
    status calls during STONITH action
    Resolves: rhbz#1780825


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-79
changelog:
  - fence_amt_ws: fix "or" causing dead code
    Resolves: rhbz#2010710
  - fence_gce: add proxy support
    Resolves: rhbz#1969953


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-94
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2080994


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-96
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072421


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-99
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2092921


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-111
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152105


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-112
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#1787178


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-114
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183158


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-3
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132010


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.0.0-4
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage

    Resolves: rhbz#2138825


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-8
changelog:
  - Disable Open MPI's vader byte transfer layer while running tests on 32-bit x86 platforms
    as it is known to be troublesome <https://github.com/open-mpi/ompi/issues/4260>.
    This resolves FTBFS issue (BZ#1518038).


author: Merlin Mathesius <mmathesi@redhat.com> - 3.3.5-11
changelog:
  - Regenerate autoconf files using current tools so proper build flags
    from redhat-rpm-config are used. This resolves BZ#1548473.


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 102.9.0-3.inferit.3
changelog:
  - Drop distribution info from About dialog (INF-733) (Arkady L. Shane <tigro@msvsphere-os.ru>)
  - fixup! Disable telemetry and geolocation by default


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Adam Jackson <ajax@redhat.com> - 0.11.7-2
changelog:
  - Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide
    somewhere before Fedora 22 which this spec file certainly no longer
    supports.


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: José Expósito <jexposit@redhat.com> - 3.0.0-9
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25175
    Resolves: https://issues.redhat.com/browse/RHEL-25177


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Karsten Hopp <karsten@redhat.com> 1.1.3-3
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/preun requirements
  - use rpm macros


author: Thomas Woerner <twoerner@redhat.com> 1.1.5-1
changelog:
  - new version 1.1.5
    - no /etc/raddb/otppasswd.sample anymore
    - build is pie by default, dropped pie patch
  - fixed build requirement for perl (perl-devel)


author: Thomas Woerner <twoerner@redhat.com> 1.1.6-2
changelog:
  - radiusd expects /etc/raddb to not be world readable or writable
    /etc/raddb now belongs to radiusd, post script sets permissions


author: Thomas Woerner <twoerner@redhat.com> 1.1.7-1
changelog:
  - new versin 1.1.7
  - install snmp MIB files
  - dropped LDAP_DEPRECATED flag, it is upstream
  - marked config files for sub packages as config (rhbz#240400)
  - moved db files to /var/lib/raddb (rhbz#199082)


author: <jdennis@redhat.com> - 1.1.7-3.3.ipa
changelog:
  - add support in rlm_ldap for reading clients from ldap
  - fix TLS parameter controling if a cert which fails to validate
    will be accepted (i.e. self-signed),
    rlm_ldap config parameter=tls_require_cert
    ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
    ldap_set_option() when it should have been ldap_int_tls_config()


author: John Dennis <jdennis@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to current upstream 2.0.3 release
  - Many thanks to Enrico Scholz for his spec file suggestions incorporated here
  - Resolve: bug #438665: Contains files owned by buildsystem
  - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
    to further partition external dependencies.
  - Clean up some unnecessary requires dependencies
  - Add versioned requires between subpackages


author: John Dennis <jdennis@redhat.com> - 2.0.3-2
changelog:
  - remove support for radrelay, it's different now
  - turn off default inclusion of SQL config files in radiusd.conf since SQL
    is an optional RPM install
  - remove mssql config files


author: John Dennis <jdennis@redhat.com> - 2.0.4-1
changelog:
  - upgrade to latest upstream, see Changelog for details
  - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - upgrade to latest upstream, see Changelog for details,
    upstream now has more complete fix for bug #447545, local patch removed


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolves: bug #453761: FreeRADIUS %post should not include chown -R
    specify file attributes for /etc/raddb/ldap.attrmap
    fix consistent use of tabs/spaces (rpmlint warning)


author: John Dennis <jdennis@redhat.com> - 2.1.1-1
changelog:
  - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
    permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770


author: John Dennis <jdennis@redhat.com> - 2.1.1-3
changelog:
  - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
  - remove diaupadmin packages, it's not well supported and there are problems with it.


author: John Dennis <jdennis@redhat.com> - 2.1.1-8
changelog:
  - add --with-system-libtool to configure as a workaround for
  undefined reference to lt__PROGRAM__LTX_preloaded_symbols


author: John Dennis <jdennis@redhat.com> - 2.1.3-1
changelog:
  - upgrade to latest upstream release, upstream summary follows:
    The focus of this release is stability.
    Feature Improvements:
      * Allow running with "user=radiusd" and binding to secure sockets.
      * Start sending Status-Server "are you alive" messages earlier, which
        helps with proxying multiple realms to a home server.
      * Removed thread pool code from rlm_perl.  It's not necessary.
      * Added example Perl configuration to raddb/modules/perl
      * Force OpenSSL to support certificates with SHA256. This seems to be
        necessary for WiMAX certs.
    Bug fixes:
      * Fix Debian patch to allow it to build.
      * Fix potential NULL dereference in debugging mode on certain
        platforms for TTLS and PEAP inner tunnels.
      * Fix uninitialized memory in handling of vendor definitions
      * Fix parsing of quoted (but non-string) attributes in the "users" file.
      * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
      * use SUN_LEN in control socket, to avoid truncation on some platforms.
      * Correct internal handling of "debug condition" to prevent it from
        being over-written.
      * Check return code of regcomp in "unlang", so that invalid regular
        expressions are caught rather than mishandled.
      * Make rlm_sql use <ltdl.h>.  Addresses bug #610.
      * Document list "type = status" better.  Closes bug #580.
      * Set "default days" for certificates, because OpenSSL won't do it.
        This closes bug #615.
      * Reference correct list in example raddb/modules/ldap. Closes #596.
      * Increase default schema size for Acct-Session-Id to 64. Closes #540.
      * Fix use of temporary files in dialup-admin.  Closes #605 and
        addresses CVE-2008-4474.
      * Addressed a number of minor issues found by Coverity.
      * Added DHCP option 150 to the dictionary.  Closes #618.


author: John Dennis <jdennis@redhat.com> - 2.1.6-1
changelog:
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * radclient exits with 0 on successful (accept / ack), and 1
        otherwise (no response / reject)
      * Added support for %{sql:UPDATE ..}, and insert/delete
        Patch from Arran Cudbard-Bell
      * Added sample "do not respond" policy.  See raddb/policy.conf
        and raddb/sites-available/do_not_respond
      * Cleanups to Suse spec file from Norbert Wegener
      * New VSAs for Juniper from Bjorn Mork
      * Include more RFC dictionaries in the default install
      * More documentation for the WiMAX module
      * Added "chase_referrals" and "rebind" configuration to rlm_ldap.
        This helps with Active Directory.  See raddb/modules/ldap
      * Don't load pre/post-proxy if proxying is disabled.
      * Added %{md5:...}, which returns MD5 hash in hex.
      * Added configurable "retry_interval" and "poll_interval"
        for "detail" listeners.
      * Added "delete_mppe_keys" configuration option to rlm_wimax.
        Apparently some WiMAX clients misbehave when they see those keys.
      * Added experimental rlm_ruby from
        http://github.com/Antti/freeradius-server/tree/master
      * Add Tunnel attributes to ldap.attrmap
      * Enable virtual servers to be reloaded on HUP.  For now, only
        the "authorize", "authenticate", etc. processing sections are
        reloaded.  Clients and "listen" sections are NOT reloaded.
      * Updated "radwatch" script to be more robust.  See scripts/radwatch
      * Added certificate compatibility notes in raddb/certs/README,
        for compatibility with different operating systems. (i.e. Windows)
      * Permit multiple "-e" in radmin.
      * Add support for originating CoA-Request and Disconnect-Request.
        See raddb/sites-available/originate-coa.
      * Added "lifetime" and "max_queries" to raddb/sql.conf.
        This helps address the problem of hung SQL sockets.
      * Allow packets to be injected via radmin.  See "inject help"
        in radmin.
      * Answer VMPS reconfirmation request.  Patch from Hermann Lauer.
      * Sample logrotate script in scripts/logrotate.freeradius
      * Add configurable poll interval for "detail" listeners
      * New "raddebug" command.  This prints debugging information from
        a running server.  See "man raddebug.
      * Add "require_message_authenticator" configuration to home_server
        configuration.  This makes the server add Message-Authenticator
        to all outgoing Access-Request packets.
      * Added smsotp module, as contributed by Siemens.
      * Enabled the administration socket in the default install.
        See raddb/sites-available/control-socket, and "man radmin"
      * Handle duplicate clients, such as with replicated or
        load-balanced SQL servers and "readclients = yes"
    Bug fixes
      * Minor changes to allow building without VQP.
      * Minor fixes from John Center
      * Fixed raddebug example
      * Don't crash when deleting attributes via unlang
      * Be friendlier to very fast clients
      * Updated the "detail" listener so that it only polls once,
        and not many times in a row, leaking memory each time...
      * Update comparison for Packet-Src-IP-Address (etc.) so that
        the operators other than '==' work.
      * Did autoconf magic to work around weird libtool bug
      * Make rlm_perl keep tags for tagged attributes in more situations
      * Update UID checking for radmin
      * Added "include_length" field for TTLS.  It's needed for RFC
        compliance, but not (apparently) for interoperability.
      * Clean up control sockets when they are closed, so that we don't
        leak memory.
      * Define SUN_LEN for systems that don't have it.
      * Correct some boundary conditions in the conditional checker ("if")
        in "unlang".  Bug noted by Arran Cudbard-Bell.
      * Work around minor building issues in gmake.  This should only
        have affected developers.
      * Change how we manage unprivileged user/group, so that we do not
        create control sockets owned by root.
      * Fixed more minor issues found by Coverity.
      * Allow raddb/certs/bootstrap to run when there is no "make"
        command installed.
      * In radiusd.conf, run_dir depends on the name of the program,
        and isn't hard-coded to "..../radiusd"
      * Check for EOF in more places in the "detail" file reader.
      * Added Freeswitch dictionary.
      * Chop ethernet frames in VMPS, rather than droppping packets.
      * Fix EAP-TLS bug.  Patch from Arnaud Ebalard
      * Don't lose string for regex-compares in the "users" file.
      * Expose more functions in rlm_sql to rlm_sqlippool, which
        helps on systems where RTLD_GLOBAL is off.
      * Fix typos in MySQL schemas for ippools.
      * Remove macro that was causing build issues on some platforms.
      * Fixed issues with dead home servers.  Bug noted by Chris Moules.
      * Fixed "access after free" with some dynamic clients.

  - fix packaging bug, some directories missing execute permission
    /etc/raddb/dictionary now readable by all.


author: John Dennis <jdennis@redhat.com> - 2.1.7-1
changelog:
  - enable building of the rlm_wimax module
  - pcap wire analysis support is enabled and available in utils subpackage
  - Resolves bug #523053 radtest manpage in wrong package
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * Full support for CoA and Disconnect packets as per RFC 3576
        and RFC 5176.  Both receiving and proxying CoA is supported.
      * Added "src_ipaddr" configuration to "home_server".  See
        proxy.conf for details.
      * radsniff now accepts -I, to read from a filename instead of
        a device.
      * radsniff also prints matching requests and any responses to those
        requests when '-r' is used.
      * Added example of attr_filter for Access-Challenge packets
      * Added support for udpfromto in DHCP code
      * radmin can now selectively mark modules alive/dead.
        See "set module state".
      * Added customizable messages on login success/fail.
        See msg_goodpass && msg_badpass in log{} section of radiusd.conf
      * Document "chase_referrals" and "rebind" in raddb/modules/ldap
      * Preliminary implementation of DHCP relay.
      * Made thread pool section optional.  If it doesn't exist,
        the server will run single-threaded.
      * Added sample radrelay.conf for people upgrading from 1.x
      * Made proxying more stable by failing over, rather than
        rejecting the first request.  See "response_window" in proxy.conf
      * Allow home_server_pools to exist without realms.
      * Add dictionary.iea (closes bug #7)
      * Added support for RFC 5580
      * Added experimental sql_freetds module from Gabriel Blanchard.
      * Updated dictionary.foundry
      * Added sample configuration for MySQL cluster in raddb/sql/ndb
        See the README file for explanations.
    Bug fixes
      * Fixed corner case where proxied packets could have extra
        character in User-Password attribute.  Fix from Niko Tyni.
      * Extended size of "attribute" field in SQL to 64.
      * Fixes to ruby module to be more careful about when it builds.
      * Updated Perl module "configure" script to check for broken
        Perl installations.
      * Fix "status_check = none".  It would still send packets
        in some cases.
      * Set recursive flag on the proxy mutex, which enables safer
        cleanup on some platforms.
      * Copy the EAP username verbatim, rather than escaping it.
      * Update handling so that robust-proxy-accounting works when
        all home servers are down for extended periods of time.
      * Look for DHCP option 53 anywhere in the packet, not just
        at the start.
      * Fix processing of proxy fail handler with virtual servers.
      * DHCP code now prints out correct src/dst IP addresses
        when sending packets.
      * Removed requirement for DHCP to have clients
      * Fixed handling of DHCP packets with message-type buried in the packet
      * Fixed corner case with negation in unlang.
      * Minor fixes to default MySQL & PostgreSQL schemas
      * Suppress MSCHAP complaints in debugging mode.
      * Fix SQL module for multiple instance, and possible crash on HUP
      * Fix permissions for radius.log for sites that change user/group,
        but which don't create the file before starting radiusd.
      * Fix double counting of packets when proxying
      * Make %l work
      * Fix pthread keys in rlm_perl
      * Log reasons for EAP failure (closes bug #8)
      * Load home servers and pools that aren't referenced from a realm.
      * Handle return codes from virtual attributes in "unlang"
        (e.g. LDAP-Group).  This makes "!(expr)" work for them.
      * Enable VMPS to see contents of virtual server again
      * Fix WiMAX module to be consistent with examples.  (closes bug #10)
      * Fixed crash with policies dependent on NAS-Port comparisons
      * Allowed vendor IDs to be be higher than 32767.
      * Fix crash on startup with certain regexes in "hints" file.
      * Fix crash in attr_filter module when packets don't exist
      * Allow detail file reader to be faster when "load_factor = 100"
      * Add work-around for build failures with errors related to
        lt__PROGRAM__LTX_preloaded_symbols.  libltdl / libtool are horrible.
      * Made ldap module "rebind" option aware of older, incompatible
        versions of OpenLDAP.
      * Check value of Fall-Through in attr_filter module.


author: John Dennis <jdennis@redhat.com> - 2.1.7-3
changelog:
  - resolves: bug #522111 non-conformant initscript
    also change permission of /var/run/radiusd from 0700 to 0755
    so that "service radiusd status" can be run as non-root


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - resolves: bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - bug 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-7
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.11-1
changelog:
  - Upgrade to latest upstream release: 2.1.11
  - Remove the following two patches as upstream has incorporated them:
      freeradius-radtest-ipv6.patch
      freeradius-lt-dladvise.patch
  - Upstream changelog for 2.1.11:
    Feature improvements
    * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
      All vendors need to read it and follow its directions.
    * Microsoft SoH support for PEAP from Phil Mayers.
      See doc/SoH.txt
    * Certificate "bootstrap" script now checks for certificate expiry.
      See comments in raddb/eap.conf, and then "make_cert_command".
    * Support for dynamic expansion of EAP-GTC challenges.
      Patch from Alexander Clouter.
    * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
      section.
    * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
    * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
    * Experimental redis support from Gabriel Blanchard.
      See raddb/modules/redis and raddb/modules/rediswho
    * Add "key" to rlm_fastusers.  Closes bug #126.
    * Added scripts/radtee from original software at
      http://horde.net/~jwm/software/misc/comparison-tee
    * Updated radmin "man" page for new commands.
    * radsniff now prints the hex decoding of the packet (-x -x -x)
    * mschap module now reloads its configuration on HUP
    * Added experimental "replicate" module.  See raddb/modules/replicate
    * Policy "foo" can now refer to module "foo".  This lets you
      over-ride the behavior of a module.
    * Policy "foo.authorize" can now over-ride the behavior of module
      "foo", "authorize" method.
    * Produce errors in more situations when the configuration files
      have invalid syntax.

    Bug fixes
    * Ignore pre/post-proxy sections if proxying is disabled
    * Add configure checks for pcap_fopen*.
    * Fix call to otp_write in rlm_otp
    * Fix issue with Access-Challenge checking from 2.1.10, when the
      debug flag was set after server startup.  Closes #116 and #117.
    * Fix typo in zombie period start time.
    * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
    * Allow radtest to use spaces in shared secret.
      Patch from Cedric Carree.
    * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
      Patch from James Ballantine.
    * Remove MN-FA key generation.  The NAS does this, not AAA.
      Patch from Ben Weichman.
    * Include dictionary.mikrotik by default.  Closes bug #121.
    * Add group membership query to MS-SQL examples.  Closes bug #120.
    * Don't cast NAS-Port to integer in Postgresql queries.
      Closes bug #112.
    * Fixes for libtool and autoconf from Sam Hartman.
    * radsniff should read the dictionaries in more situations.
    * Use fnmatch to check for detail file reader==writer.
      Closes bug #128.
    * Check for short writes (i.e. disk full) in rlm_detail.
      Closes bug #130.  Patches and testing from John Morrissey.
    * Fix typo in src/lib/token.c.  Closes bug #124
    * Allow workstation trust accounts to use MS-CHAP.
      Closes bug #123.
    * Assigning foo=`/bin/echo hello` now produces a syntax error
      if it is done outside of an "update" section.
    * Fix "too many open file descriptors" problem when using
      "verify client" in eap.conf.
    * Many fixes to dialup_admin for PHP5, by Stefan Winter.
    * Allow preprocess module to have "hints = " and "huntgroups =",
      which allows them to be empty or non-existent.
    * Renamed "php3" files to "php" in dialup_admin/
    * Produce error when sub-TLVs are used in a dictionary.  They are
      supported only in the "master" branch, and not in 2.1.x.
    * Minor fix in dictionary.redback.  Closes bug #138.
    * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
    * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
      Closes bug #118.
    * DHCP fixes to send unicast packets in more situations.
    * Fix to udpfromto, to enable it to work on IPv6 networks.
    * Fixes to the Oracle accounting_onoff_query.
    * When using both IPv4 and IPv6 home servers, ensure that we use the
      correct local socket for proxying.  Closes bug #143.
    * Suppress messages when thread pool is nearly full, all threads
      are busy, and we can't create new threads.
    * IPv6 is now enabled for udpfromto.  Closes bug #141
    * Make sqlippool query buffer the same size as sql module.
      Closes bug #139.
    * Make Coa / Disconnect proxying work again.
    * Configure scripts for rlm_caching from Nathaniel McCallum
    * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
    * Updated password routines to use time-insensitive comparisons.
      This prevents timing attacks (though none are known).
    * Allow sqlite module to do normal SELECT queries.
    * rlm_wimax now has a configure script
    * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
      files.  See share/dictionary for explanations.
    * Check for duplicate module definitions in the modules{} section,
      and refuse to start if duplicates are found.
    * Check for duplicate virtual servers, and refuse to start if
      duplicates are found.
    * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
    * Check pre-conditions before running radmin "inject file".
    * Don't over-ride "no match" with "match" for regexes.
      Closes bug #152.
    * Make retry and error message configurable in mschap.
      See raddb/modules/mschap
    * Allow EAP-MSCHAPv2 to send error message to client.  This change
      allows some clients to prompt the user for a new password.
      See raddb/eap.conf, mschapv2 section, "send_error".
    * Load the default virtual server before any others.
      This matches what users expect, and reduces confusion.
    * Fix configure checks for udpfromto.  Fixes Debian bug #606866
    * Definitive fix for bug #35, where the server could crash under
      certain loads.  Changes src/lib/packet.c to use RB trees.
    * Updated "configure" checks to allow IPv6 udpfromto on Linux.
    * SQL module now returns NOOP if the accounting start/interim/stop
      queries don't do anything.
    * Allow %{outer.control: ... } in string expansions
    * home_server coa config now matches raddb/proxy.conf
    * Never send a reply to a DHCP Release.


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.12-2
changelog:
  - rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf
    remove config(noreplace) because it must match files section and
    permissions differ between versions.
  - fixup macro usage for /var/run & /var/lib


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#781744
    systemd service file incorrectly listed pid file as
    /var/run/radiusd/radiusd which it should have been
    /var/run/radiusd/radiusd.pid


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#781877 (from RHEL5) rlm_dbm_parse man page misspelled
  - resolves: bug#760193 (from RHEL5) radtest PPPhint option is not parsed properly


author: John Dennis <jdennis@redhat.com> - 2.1.12-6
changelog:
  Fixing bugs in RHEL6 rebase, applying fixes here as well
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.2.0-0
changelog:
  - Add new patch to avoid reading .rpmnew, .rpmsave and other invalid
    files when loading config files
  - Upgrade to new 2.2.0 upstream release
  - Upstream changelog for 2.1.12:
    Feature improvements
    * 100% configuration file compatible with 2.1.x.
      The only fix needed is to disallow "hashsize=0" for rlm_passwd
    * Update Aruba, Alcatel Lucent, APC, BT, PaloAlto, Pureware,
      Redback, and Mikrotik dictionaries
    * Switch to using SHA1 for certificate digests instead of MD5.
      See raddb/certs/*.cnf
    * Added copyright statements to the dictionaries, so that we know
      when people are using them.
    * Better documentation for radrelay and detail file writer.
      See raddb/modules/radrelay and raddb/radrelay.conf
    * Added TLS-Cert-Subject-Alt-Name-Email from patch by Luke Howard
    * Added -F <file> to radwho
    * Added query timeouts to MySQL driver.  Patch from Brian De Wolf.
    * Add /etc/default/freeradius to debian package.
      Patch from Matthew Newton
    * Finalize DHCP and DHCP relay code.  It should now work everywhere.
      See raddb/sites-available/dhcp, src_ipaddr and src_interface.
    * DHCP capabilitiies are now compiled in by default.
      It runs as a DHCP server ONLY when manually enabled.
    * Added one letter expansions: %G - request minute and %I request
      ID.
    * Added script to convert ISC DHCP lease files to SQL pools.
      See scripts/isc2ippool.pl
    * Added rlm_cache to cache arbitrary attributes.
    * Added max_use to rlm_ldap to force connection to be re-established
      after a given number of queries.
    * Added configtest option to Debian init scripts, and automatic
      config test on restart.
    * Added cache config item to rlm_krb5. When set to "no" ticket
      caching is disabled which may increase performance.

    Bug fixes
    * Fix CVE-2012-3547.  All users of 2.1.10, 2.1.11, 2.1.12,
      and 802.1X should upgrade immediately.
    * Fix typo in detail file writer, to skip writing if the packet
      was read from this detail file.
    * Free cached replies when closing resumed SSL sessions.
    * Fix a number of issues found by Coverity.
    * Fix memory leak and race condition in the EAP-TLS session cache.
      Thanks to Phil Mayers for tracking down OpenSSL APIs.
    * Restrict ATTRIBUTE names to character sets that make sense.
    * Fix EAP-TLS session Id length so that OpenSSL doesn't get
      excited.
    * Fix SQL IPPool logic for non-timer attributes.  Closes bug #181
    * Change some informational messages to DEBUG rather than error.
    * Portability fixes for FreeBSD.  Closes bug #177
    * A much better fix for the _lt__PROGRAM__LTX_preloaded_symbols
      nonsense.
    * Safely handle extremely long lines in conf file variable expansion
    * Fix for Debian bug #606450
    * Mutex lock around rlm_perl Clone routines. Patch from Eike Dehling
    * The passwd module no longer permits "hashsize = 0".  Setting that
      is pointless for a host of reasons.  It will also break the server.
    * Fix proxied inner-tunnel packets sometimes having zero authentication
      vector.  Found by Brian Julin.
    * Added $(EXEEXT) to Makefiles for portability.  Closes bug #188.
    * Fix minor build issue which would cause rlm_eap to be built twice.
    * When using "status_check=request" for a home server, the username
      and password must be specified, or the server will not start.
    * EAP-SIM now calculates keys from the SIM identity, not from the
      EAP-Identity.  Changing the EAP type via NAK may result in
      identities changing.  Bug reported by Microsoft EAP team.
    * Use home server src_ipaddr when sending Status-Server packets
    * Decrypt encrypted ERX attributes in CoA packets.
    * Fix registration of internal xlat's so %{mschap:...} doesn't
      disappear after a HUP.
    * Can now reference tagged attributes in expansions.
      e.g. %{Tunnel-Type:1} and %{Tunnel-Type:1[0]} now work.
    * Correct calculation of Message-Authenticator for CoA and Disconnect
      replies.  Patch from Jouni Malinen
    * Install rad_counter, for managing rlm_counter files.
    * Add unique index constraint to all SQL flavours so that alternate
      queries work correctly.
    * The TTLS diameter decoder is now more lenient.  It ignores
      unknown attributes, instead of rejecting the TTLS session.
    * Use "globfree" in detail file reader.  Prevents very slow leak.
      Closes bug #207.
    * Operator =~ shouldn't copy the attribute, like :=.  It should
      instead behave more like ==.
    * Build main Debian package without SQL dependencies
    * Use max_queue_size in threading code
    * Update permissions in raddb/sql/postgresql/admin.sql
    * Added OpenSSL_add_all_algorithms() to fix issues where OpenSSL
      wouldn't use methods it knew about.
    * Add more sanity checks in dynamic_clients code so the server won't
      crash if it attempts to load a badly formated client definition.


author: John Dennis <jdennis@redhat.com> - 2.2.0-1
changelog:
  - resolves: bug#876564 - fails to start without freeradius-mysql
  - use upstream version of freeradius-exclude-config-file.patch


author: John Dennis <jdennis@redhat.com> - 2.2.0-3
changelog:
  - specify homedir (/var/lib/radiusd) for radiusd user in useradd,
    do not permit useradd to default the homedir.


author: John Dennis <jdennis@redhat.com> - 3.0.0-4
changelog:
  - resolves: bug#1031035
    remove radeapclient man page,
    upstream no longer supports radeapclient, use eapol_test instead
  - resolves: bug#1031061
    rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
  - move man pages for utils into utils subpackage from doc subpackage
  - fix HAVE_EC_CRYPTO test to include f20
  - add new directory /var/run/radiusd/tmp
    update mods-available/eap so tls-common.verify.tmpdir to point to it


author: John Dennis <jdennis@redhat.com> - 3.0.1-1
changelog:
  - Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
    This is a roll-up of all upstream bugs fixes found in 3.0.0
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - fixes bugs 1053020 1044747 1048474 1043036


author: John Dennis <jdennis@redhat.com> - 3.0.1-2
changelog:
  - resolves: bug#1055073 (fedora 1055072)
    rlm_ippool; bad config file attribute and fails to send reply attributes
  - resolves: bug#1055567 (fedora 1056227)
    bad mysql sql syntax
  - change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
    where gdb will not display source information, only <command-line>


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-4
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.2-1
changelog:
  - Upgrade to upstream 3.0.2 release, configuration compatible with 3.0.1.
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - Fixes bugs 1058884 1061408 1070447 1079500


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.3-1
changelog:
  - Upgrade to upstream 3.0.3 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Minor configuration parsing change: "Double-escaping of characters in Perl,
    and octal characters has been fixed. If your configuration has text like
    "\\000", you will need to remove one backslash."
  - Additionally includes post-release fixes for:
    * case-insensitive matching in compiled regular expressions not working,
    * upstream issue #634 "3.0.3 SIGSEGV on config parse",
    * upstream issue #635 "3.0.x - rlm_perl - strings are still
      escaped when passed to perl from FreeRADIUS",
    * upstream issue #639 "foreach may cause ABORT".
  - Fixes bugs 1097266 1070447


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.3-2
changelog:
  - Add explicit dependency on OpenSSL package with fixed CVE-2014-0160
    (Heartbleed bug).
  - Add confirmation of CVE-2014-0160 being fixed in OpenSSL to radiusd.conf.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
changelog:
  - Upgrade to upstream 3.0.4-rc2 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
changelog:
  - Upgrade to upstream 3.0.4 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Resolves: Bug#1099620


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
changelog:
  - Fix abort on home server triggers.
  - Fix segfault upon example.pl read failure.
  - Fix example.pl permissions.
  - Fix integer handling in various cases.
  - Fix dhcpclient's dictionary.dhcp loading.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
changelog:
  - Fix OpenSSL version parsing when checking for compatibility at run time.
    Resolves: Bug#1173821
  - Don't remove backslash from unknown escape sequences in LDAP values.
    Resolves: Bug#1173526
  - Improve dhcpclient and rad_counter online help.
    Resolves: Bug#1146966
  - raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
    to trigger variables from module configurations.
    Resolves: Bug#1155961
  - Fix ipaddr option fallback onto ipv6.
    Resolves: Bug#1168868
  - raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
    Resolves: Bug#1168247
  - Disable rlm_rest building explicitly to avoid unintended builds on some
    architectures breaking RPM build.
    Resolves: Bug#1162156
  - Add -D option support to dhcpclient.
    Related: Bug#1146939
  - Don't install rbmonkey - a test tool only useful to developers.
    Related: Bug#1146966
  - Update clients(5) man page
    Resolves: Bug#1147464
  - Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
  - Fix file configuration item parsing.
  - Fix a number of trigger issues.
    Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
                          files'"
    Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
                          opened,closed or fail
    Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
                          fails/opens/closes
    Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
                          and incomplete
  - Fix two omissions from radtest manpage.
    Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
                          of radtest man page
    Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
    confirm heartbleed is fixed.
    Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
                          OpenSSL version check


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.7-1
changelog:
  - Upgrade to upstream v3.0.7 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1133959
  - Add freeradius-rest package containing rlm_rest module.
    Resolves: Bug#1196276


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.8-1
changelog:
  - Upgrade to upstream v3.0.7 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1133959


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.9-1
changelog:
  - Upgrade to upstream v3.0.9 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1133959


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1133959
  - Remove rlm_eap_tnc support as the required package "tncfhh" was retired.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-7
changelog:
  - Make sure FreeRADIUS starts after IPA, directory, and Kerberos servers
  - Don't rotate radutmp, as it's not a log file
  - Logrotate with "systemctl" instead of "service"
  - Remove executable bits from "radiusd.service"


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Fix three cases of comparing pointers to zero characters
  - Support OpenSSL v1.1.0
    Resolves: Bug#1385588


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-3
changelog:
  - Do not fail logrotate if radiusd is not running.
  - Fix output to log file specified with -l option.
  - Fix long hostnames interpreted as IP addresses.
  - Avoid clashes with libtool library symbols.
  - Remove mentions of Auth-Type = System from docs.
  - Improve ip/v4/v6/addr documentation.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix permissions of default key files in raddb/certs.
  - Require OpenSSL version we built with, or newer, to avoid startup failures
    due to runtime OpenSSL version checks.
    Resolves: Bug#1299388
  - Fix some issues found with static analyzers.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.14-1
changelog:
  - Upgrade to upstream v3.0.14 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Fix TLS resumption authentication bypass (CVE-2017-9148)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-1
changelog:
  - Upgrade to upstream v3.0.15 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Resolves: Bug#1471848 CVE-2017-10978 freeradius: Out-of-bounds read/write
                          due to improper output buffer size check in
                          make_secret()
  - Resolves: Bug#1471860 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1471861 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1471863 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1471864 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1471865 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()
  - Resolves: Bug#1456220 freeradius-3.0.15 is available


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.15-4
changelog:
  - Python 2 binary package renamed to python2-freeradius
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-6
changelog:
  - Use mariadb-connector-c-devel instead of mysql-devel or mariadb-devel
    Resolves: Bug#1493904 Use mariadb-connector-c-devel instead of mysql-devel
                          or mariadb-devel


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-16
changelog:
  - Add make to Requires(post) to fix certificate generation on install.
    Resolves: Bug#1628213 FreeRADIUS fails to start due to default certificate
                          permissions


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-18
changelog:
  - Actually apply patches added previously.
    Related: Bug#1612512 Man page scan results for freeradius


author: Alexander Scheel <ascheel@redhat.com> - 3.0.17-1
changelog:
  - Update to FreeRADIUS server version 3.0.17
  - Adds OpenSSL HMAC patches from upstream (unreleased)
  - Adds Python2 shebang patches from upstream (unreleased)


author: Alexander Scheel <ascheel@redhat.com> - 3.0.17-4
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699417 authentication bypass with an invalid curve attack
    Resolves: bz#1699421 fake authentication using reflection


author: Alexander Scheel <ascheel@redhat.com> - 3.0.20-1
changelog:
  - Update to FreeRADIUS server version 3.0.20
  - Introduce Python 3 support; resolves: bz#1623069
  - DoS issues due to multithreaded BN_CTX access; resolves: bz#1818809
  - Create tmp files in /run; resolves: bz#1805975


author: Alexander Scheel <ascheel@redhat.com> - 3.0.20-2
changelog:
  - Fix breakage caused by OpenSSL FIPS regression
    Related: bz#1855822
    Related: bz#1810911
    Resolves: bz#1672285


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-36.20180115git8f52c7e
changelog:
  - Update to latest snapshot.
  - Make GSS support optional and disable it for now (#1534094 and FreeRDP #4348,


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-16
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805017


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747213).
  - Include upstream patches that fix issues reported by covscan (#1747530):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790054):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Yara Ahmad <yahmad@redhat.com> - 2.36.1-4
changelog:
  - Fix addr2line from gcc-toolset-11-binutils having errors while compiling code 
    using LTO and Dwarf5  (#2153811)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - fix wstring conversions in filesystem::path (PR libstdc++/95048, #2220896)
  - mark non-exported function always_inline (PR libstdc++/105671, #2221740)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Florian Weimer <fweimer@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160701)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110582)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 10.1.1-1.1
changelog:
  - correct instructions for creation of newlib tarball, filter out sun-rpc
    licensed code that is never used during the package build


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - add symlink to liblto_plugin.so in /usr/lib/bfd-plugins
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Marek Polacek <polacek@redhat.com> 10.2.1-1.2
changelog:
  - avoid stack overflow in std::vector (PR libstdc++/94540, #1859670)
  - adjust some libstdc++_nonshared.a symbols
  - apply gcc10-libgfortran-compat-2.patch


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 11.1.1-2
changelog:
  - update from Fedora gcc 11.1.1-2
  - fix up mausezahn miscompilation (PR tree-optimization/100566)
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)
  - add a few Provides: bundled (#1859893)


author: Marek Polacek <polacek@redhat.com> 11.1.1-6
changelog:
  - update from Fedora gcc 11.1.1-6 (#1946782)
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
     fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
     libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
     middle-end/100250, middle-end/100307, middle-end/100574,
     middle-end/100684, middle-end/100732, middle-end/100876,
     middle-end/101062, middle-end/101167, target/99842, target/99939,
     target/100310, target/100777, target/100856, target/100871,
     target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986838)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs target/100208, target/100316, target/102761
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - apply DTS-specific testsuite patches (#1996085)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-29952)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217812)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon libiberty.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 2.0-1
changelog:
  - Fixes for problems reported by the package submission review:
     * Add %license entry to %file section.
     * Update License and BuildRequires tags.
     * Add Requires tag.
     * Remove %clean.
     * Add %check.
     * Clean up the %changelog.
  - Update to use version 2 of the specification and sources.


author: Nick Clifton <nickc@redhat.com> - 2.3-1
changelog:
  - Add annobin-tests subpackage containing some preliminary tests.
  - Remove link-time test for unsupported targets.


author: Nick Clifton <nickc@redhat.com> - 3.4-1
changelog:
  - Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB.  (#1539664)
  - Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository.


author: Nick Clifton <nickc@redhat.com> - 3.6-1
changelog:
  - Add --ignore-gaps option to check-abi.sh script.
  - Use this option in the abi-test check.
  - Tweak hardening test to skip pic and stack protection checks.


author: Nick Clifton <nickc@redhat.com> - 5.0-1
changelog:
  - Bias file start symbols by 2 in order to avoid them confused with function symbols.  (#1554332)
  - Version jump is to sync the version number with the annobin plugins internal version number.


author: Nick Clifton <nickc@redhat.com> - 5.6-1
changelog:
  - Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files.


author: Nick Clifton <nickc@redhat.com> - 7.0-1
changelog:
  - Add -debug-rpm= option to annocheck.
  - Only use a 2 byte offset for the initial symbol on PowerPC.


author: Nick Clifton <nickc@redhat.com> - 7.1-1
changelog:
  - Skip some checks for relocatable object files, and dynamic objects.
  - Stop bogus complaints about stackrealignment not being enabled.


author: Nick Clifton <nickc@redhat.com> - 8.0-1
changelog:
  - Use a prefix for all annobin generated symbols, and make them hidden.
  - Only generate weak symbol definitions for linkonce sections.


author: Nick Clifton <nickc@redhat.com> - 8.11-1
changelog:
  - Handle function sections properly.  Handle .text.startup and .text.unlikely sections.  Improve gap detection and reporting.  (#1601055)


author: Nick Clifton <nickc@redhat.com> - 8.22-1
changelog:
  - Reduce version check to gcc major version number only.  Skip compiler option checks if binary not built with gcc.  (#1603089)


author: Nick Clifton <nickc@redhat.com> - 8.28-1
changelog:
  - Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
  - Merge ranges where one is wholly covered by another.


author: Nick Clifton <nickc@redhat.com> - 8.31-1
changelog:
  - Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
  - Fix bugs in section-size tool.
  - Fix bug in built-by tool.


author: Nick Clifton <nickc@redhat.com> - 8.33-1
changelog:
  - Add timing tool to report on speed of the checks.
  - Add check for conflicting use of the -fshort-enum option.
  - Add check of the GNU Property notes.
  - Skip check for -O2 if compiled with -Og.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.38-1
changelog:
  - Generate notes and groups for .text.hot and .text.unlikely sections.
  - When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
  - Similarly put exit section notes into .text.exit.foo.  (#1630574)
  - Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed.


author: Nick Clifton <nickc@redhat.com> - 8.46-1
changelog:
  - Annobin:   Fix section name selection for startup sections.
  - Annocheck: Improve gap skipping heuristics.   (#1630574)


author: Nick Clifton <nickc@redhat.com> - 8.66-1
changelog:
  - Annocheck: Do not ignore -Og when checking to see if an optimization level has been set.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.67-1
changelog:
  - Annocheck: Only skip specific checks for specific symbols.  (#1666823)
  - Annobin: Record the setting of the -fomit-frame-pointer option.


author: Nick Clifton <nickc@redhat.com> - 8.68-1
changelog:
  - Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary.


author: Nick Clifton <nickc@redhat.com> - 8.69-1
changelog:
  - Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
  - Annocheck: Add a note displaying tool.


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703499)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 8.81-1
changelog:
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 8.83-1
changelog:
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.


author: Nick Clifton <nickc@redhat.com> - 9.06-1
changelog:
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.11-1
changelog:
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.12-1
changelog:
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)


author: Nick Clifton <nickc@redhat.com> - 9.13-1
changelog:
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.


author: Nick Clifton <nickc@redhat.com> - 9.14-1
changelog:
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.


author: Nick Clifton <nickc@redhat.com> - 9.24-1
changelog:
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.28-1
changelog:
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)


author: Nick Clifton <nickc@redhat.com> - 9.31-1
changelog:
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.


author: Nick Clifton <nickc@redhat.com> - 9.36-1
changelog:
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.37-1
changelog:
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.


author: Nick Clifton <nickc@redhat.com> - 9.45-1
changelog:
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.


author: Nick Clifton <nickc@redhat.com> - 9.52-1
changelog:
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)


author: Nick Clifton <nickc@redhat.com> - 9.62-1
changelog:
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)


author: Nick Clifton <nickc@redhat.com> - 9.63-1
changelog:
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)


author: Petr Pisar <ppisar@redhat.com> - 9.66-3
changelog:
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough


author: Nick Clifton <nickc@redhat.com> - 9.68-1
changelog:
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.


author: Nick Clifton <nickc@redhat.com> - 9.74-1
changelog:
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.78-1
changelog:
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.80-1
changelog:
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.


author: Nick Clifton <nickc@redhat.com> - 9.88-1
changelog:
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)


author: Nick Clifton <nickc@redhat.com> - 9.89-1
changelog:
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)


author: Nick Clifton <nickc@redhat.com> - 9.90-1
changelog:
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.


author: Nick Clifton <nickc@redhat.com> - 9.92-1
changelog:
  - Annocheck: Fix memory corruption.  (#1996963)
  - spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.


author: Nick Clifton <nickc@redhat.com> - 9.93-1
changelog:
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - spec file: Add the installation of the annobon sources into /usr/src/annobin.


author: Nick Clifton <nickc@redhat.com> - 9.95-1
changelog:
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.


author: Nick Clifton <nickc@redhat.com> - 10.01-1
changelog:
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.


author: Nick Clifton <nickc@redhat.com> - 10.04-1
changelog:
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.


author: Nick Clifton <nickc@redhat.com> - 10.08-1
changelog:
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.


author: Nick Clifton <nickc@redhat.com> - 10.10-1
changelog:
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.


author: Nick Clifton <nickc@redhat.com> - 10.12-1
changelog:
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.


author: Nick Clifton <nickc@redhat.com> - 10.13-1
changelog:
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)


author: Nick Clifton <nickc@redhat.com> - 10.16-1
changelog:
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.21-1
changelog:
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: Nick Clifton <nickc@redhat.com> - 10.39-1
changelog:
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)


author: Nick Clifton <nickc@redhat.com> - 10.40-1
changelog:
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)


author: Nick Clifton <nickc@redhat.com> - 10.41-1
changelog:
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.


author: Nick Clifton <nickc@redhat.com> - 10.66-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.72-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.74-1
changelog:
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.


author: Nick Clifton <nickc@redhat.com> - 10.76-3
changelog:
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.85-1
changelog:
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.


author: Nick Clifton <nickc@redhat.com> - 10.91-1
changelog:
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.


author: Nick Clifton <nickc@redhat.com> - 10.93-1
changelog:
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)


author: Nick Clifton <nickc@redhat.com> - 11.09-1
changelog:
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.


author: Nick Clifton <nickc@redhat.com> - 12.02-1
changelog:
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.


author: Nick Clifton <nickc@redhat.com> - 12.04-1
changelog:
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53572)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79974)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217911)
  - Spec File: Build static libraries with -fno-lto.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22817)
  - [2.40-18: was a failed attempt to fix RHEL-22817]


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153227)


author: Keith Seitz <keiths@redhat.com> - 12.1-4.el8
changelog:
  - Backport "Add a recursion limit to the demangle_const function
    in the Rust demangler."
    (Nick Clifton, RHEL-4237)


author: Nick Clifton <nickc@redhat.com> - 9.07-1
changelog:
  - Rebase to 9.07 release:
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Rebuild againt latest gcc-10.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.
  - Do not skip positive results.
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
  - Allow compiler used to run tests to be specified on the command line.  (#1723401)


author: Nick Clifton <nickc@redhat.com> - 2.32-17
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1779417)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> 2.29.1-4
changelog:
  - Have readelf suggest the use of --use-dynamic when there are dynamic relocs that could have been displayed.  (#1507694)


author: Nick Clifton <nickc@redhat.com> 2.29.1-14
changelog:
  - Fix creation of PowerPC64 function call stubs.  (#1523457)
  - Disable -z defs during build.
  - Disable binary annotations.  (temporary ?)


author: Nick Clifton <nickc@redhat.com> 2.30-5
changelog:
  - Fix assignment of pages to segments. (PR 22758)
  - Inject RPM_LD_FLAGS into the build.  (#1541027)
  - Fix slowdown in readelf when examining files with lots of debug information.  (PR 22802)
  - Remove support for PowerPC speculation barrier insertion.
  - Rebase on 2.30
  - Retire binutils-2.22.52.0.1-relro-on-by-default.patch
  - Retire binutils-2.28-dynamic-section-warning.patch
  - Retire binutils-2.29-skip-rp14918-test-for-arm.patch
  - Retire binutils-2.29.1-gold-start-stop.patch
  - Retire binutils-2.29.1-readelf-use-dynamic.patch
  - Retire binutils-aarch64-pie.patch
  - Retire binutils-coverity.patch
  - Retire binutils-ppc64-stub-creation.patch
  - Retire binutils-strip-delete-relocs.patch
  - Retire binutils-support-v3-build-notes.patch
  - Retire binutils-z-undefs.patch


author: Nick Clifton <nickc@redhat.com> 2.30.90-2
changelog:
  - Revert fix for PR 23161 which was placing unversioned section symbols (_edata, _end, __bss_start) into shared libraries.  (#1599521)


author: Nick Clifton <nickc@redhat.com> 2.30.90-3
changelog:
  - Stop gold from complaining about annobin note relocs against symbols in sections which have been discarded.  (#1600431)


author: Nick Clifton <nickc@redhat.com> - 2.31.1-1
changelog:
  - Rebase to official 2.31.1 GNU Binutils release.
  - Retire: binutils-2.22.52.0.1-export-demangle.h.patch
  - Retire: binutils-2.30-allow_R_AARCH64-symbols.patch
  - Retire: binutils-CVE-2018-10372.patch
  - Retire: binutils-CVE-2018-10373.patch
  - Retire: binutils-CVE-2018-10534.patch
  - Retire: binutils-CVE-2018-10535.patch
  - Retire: binutils-CVE-2018-6323.patch
  - Retire: binutils-CVE-2018-6759.patch
  - Retire: binutils-CVE-2018-7208.patch
  - Retire: binutils-CVE-2018-7568.patch
  - Retire: binutils-CVE-2018-7569.patch
  - Retire: binutils-CVE-2018-7570.patch
  - Retire: binutils-CVE-2018-7642.patch
  - Retire: binutils-CVE-2018-7643.patch
  - Retire: binutils-CVE-2018-8945.patch
  - Retire: binutils-PowerPC-IEEE-long-double-warnings.patch
  - Retire: binutils-debug-section-marking.patch
  - Retire: binutils-gas-build-notes.patch
  - Retire: binutils-gold-llvm-plugin.patch
  - Retire: binutils-ifunc-relocs-in-notes.patch
  - Retire: binutils-linkonce-notes.patch
  - Retire: binutils-missing-notes.patch
  - Retire: binutils-page-to-segment-assignment.patch
  - Retire: binutils-revert-PowerPC-speculation-barriers.patch
  - Retire: binutils-skip-dwo-search-if-not-needed.patch
  - Retire: binutils-speed-up-objdump.patch
  - Retire: binutils-strip-unknown-relocs.patch
  - Retire: binutils-x86-local-relocs.patch
  - Retire: binutils-x86-local-version.patch


author: Nick Clifton <nickc@redhat.com> - 2.31.1-13
changelog:
  - Delay the evaluation of linker script constants until after the configuration options have been set.  (#1624751)


author: Nick Clifton <nickc@redhat.com> - 2.31.1-14
changelog:
  - Fix a potential buffer overrun when parsing a corrupt ELF file.  (#1632912)
  - Add a .attach_to_group pseuo-op to assembler (for use by annobin).  (#1630574)
  - Stop the binutils from statically linking with libstdc++.  (#1630550)
  - Include gold testsuite results in test logs.
  - Disable readelf's reporting of gaps in build notes.  (#1623556)


author: Nick Clifton <nickc@redhat.com> - 2.32-1
changelog:
  - Rebase to GNU Binutils 2.32
  - Retire: binutils-s390-partial-relro.patch
  - Retire: binutils-note-merge-improvements.patch
  - Retire: Retire: binutils-merge-attribute-sections.patch
  - Retire: binutils-gold-discard-version-info.patch
  - Retire: binutils-gas-input-matches-output.patch
  - Retire: binutils-fix-testsuite-failures.patch
  - Retire: binutils-do-not-provide-shared-section-symbols.patch
  - Retire: binutils-disable-readelf-gap-reports.patch
  - Retire: binutils-detect-corrupt-sym-version-info.patch
  - Retire: binutils-delay-ld-script-constant-eval.patch
  - Retire: binutils-clear-version-info.patch
  - Retire: binutils-CVE-2018-20002.patch
  - Retire: binutils-CVE-2018-17358.patch
  - Retire: binutils-2.31-export-demangle.h.patch
  - Retire: binutils-2.28-ignore-gold-duplicates.patch
  - Retire: binutils-2.26-lto.patch


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-15.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783958)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-9
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes.
  - Fix testing failure due to Perl changes related to expanding paths.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Use valgrind_arches macro instead of hardcoding valgrind arch list
  - Drop group tags
  - Drop ldconfig scriptlets
  - Move desktop file validation to check section
  - Drop ancient conflicts


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Keith Seitz <keiths@redhat.com> - 8.2-13.el8
changelog:
  - Backport "Fix terminal problems when error() is called."
    (Alan Hayward RH BZ 1852580)
  - Backport "core file memory access problem."
    (Kevin Buettner, RH BZ 1785126)
  - Backport "Stop the BFD library from issuing a warning message..."
    (Nick Clifton, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-14.el8
changelog:
  - Obsolete earlier versions on x86_64 and conflict with 64-bit
    glibc on ix86. (Keith Seitz, RH BZ 1853140)
  - Really fix 1878810 (Keith Seitz, RH BZ 1878810)


author: Keith Seitz <keiths@redhat.com> - 8.2-15.el8
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903374)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905701)


author: Keith Seitz <keiths@redhat.com> - 8.2-16.el8
changelog:
  - Backport "Fix segfault with nameless fortran modules."
    (Bernhard Heckel, RH BZ 1934673)
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    and related patches.
    (Rogerio Alves et al RH BZ 1854784)


author: Keith Seitz <keiths@redhat.com> - 8.2-19.el8
changelog:
  - Backport "Fix restoring of inferior terminal settings"
  - Backport "Avoid GDB SIGTTOU on catch exec + set follow-exec-mode
    new (PR 23368)"
    (Simon Marchi, RH BZ 2015131)


author: Keith Seitz <keiths@redhat.com> - 8.2-20.el8
changelog:
  - Backport portion of "Fix crash in new DWARF indexer".
    (Tom Tromey, RH BZ 2150363)
  - Backport "Fix assertion failure in copy_type" and
    "Fix PR20630 regression test in gdb.base/printcmds.exp".
    (Tom Tromey and Tom de Vries, RH BZ 2156888)


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-2
changelog:
  - Split out the modules as a subpackage to allows us to depend on the core
    library on the cloud image and not drag every image loader known to man.


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-3
changelog:
  - Split out the xlib code as a subpackage to allows us to depend on the core
    library on the cloud image and not depends on half of Xorg.


author: Tomas Popela <tpopela@redhat.com> - 2.36.12-6
changelog:
  - Backport fixes for CVE-2022-48622
  - Apply patches with git to enable binary patching
  - Resolves: RHEL-30478


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.14-3
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1087071).


author: Tim Waugh <twaugh@redhat.com> 9.15-3
changelog:
  - Avoid shipping ramfs source as its license is unclear. Similarly
    with some documentation and example code (bug #1149617).


author: Tim Waugh <twaugh@redhat.com> 9.15-4
changelog:
  - New ghostscript-x11 package for X11 driver (bug #148939).
  - Ghostscript not requiring X11 is now in ghostscript-core.
  - The 'ghostscript' package requires both of these.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5
changelog:
  - [TEMPORARY] Support for OpenJPEG disabled for builds to pass.
  - Security fix for BZ #1380416 backported.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1
changelog:
  - Rebase to latest ghostscript-9.20. Major changes in this rebase:
    - OpenJPEG support has been re-enabled
    - ijs-config custom tool has been removed (pkg-config is used by default)
    - old irrelevant patches removed (changes are part of upstream release now)
    - remaining patches has been updated & renamed
    - no API/ABI changes according to upstream


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2
changelog:
  - Added security fixes for:
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-7976 (bug #1382294)
    - CVE-2016-7978 (bug #1382300)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4
changelog:
  - complete cleanup in ghostscript specfile according to FPG
  - libgs -- new separate package (Ghostscript library)
  - libgs-devel -- new separate subpackage (devel files for Ghostscript library)
  - libijs -- now shipped as a separate package on Pagure
  - ghostscript-tools-fonts -- new subpackage
  - ghostscript-tools-printing -- new subpackage
  - ghostscript-core -- changed to transitional metapackage
  - package is now completely debundled from already packaged software/resources
  - versioned paths for documentation, resources, etc. are no longer used
  - LPR setup scripts removed (no longer shipped)
  - added symlinks for direct resources location to speedup Ghostscript startup times
  - Ghostscript's search path updated to include only fonts locations as a backup
  - support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)
  - examples/ folder dropped from *-doc subpackage


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8
changelog:
  - Switch to %ldconfig_scriptlets
    >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.25-1
changelog:
  - rebase to latest upstream version to fix issues discovered in previous CVE fixes (bug #1631701 and #1626997)


author: Martin Osvald <mosvald@redhat.com> - 9.25-2
changelog:
  - Resolves: #1652937 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1642586 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1642580 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1642941 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1656336 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1660571 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660830 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661280 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1668891 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators (700317)


author: Martin Osvald <mosvald@redhat.com> - 9.25-3
changelog:
  - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1691414 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)
  - fix included for ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - fix for pdf2dsc regression added to allow fix for CVE-2019-3839


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Richard Lescak <rlescak@redhat.com> - 9.27-3
changelog:
  - fixed drifting text to the right when printing
  - added Requirement for jbig2dec
  - added patch for CVE-2020-16301
  - Resolves: rhbz#2097515, rhbz#2097448


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.27-16
changelog:
  - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-15067 CVE-2020-27792 ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c
  - RHEL-67051 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67051 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67051 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Todd Zullinger <tmz@pobox.com> - 1.8.5.3-2
changelog:
  - Drop unused python DESTIR patch
  - Consolidate settings for Fedora 19+ and EL 7+
  - Use new rpm filtering on Fedora 19+ and EL 7+
  - Rebuild with file-5.14-14 (#1026760)


author: Petr Stodulka <pstodulk@redhat.com> - 2.4.2-2
changelog:
  - split create subpackage git-core (perl-less) from git package
  - git package requires git-core and it has same tool set as
    before
  - relevant docs are part of git-core package too
  - removed proved and obsoletes in git for git-core


author: Petr Stodulka <pstodulk@gmail.com> - 2.4.4-2
changelog:
  - git-svn - added requires for perl-Digest-MD5 (#1218176)
  - solve troubles with infinite loop due to broken symlink (probably
    shouldn't be problem here, but it's reproducible manually)
    (#1204193)


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 2.4.5-2
changelog:
  - Comply with modern Emacs packaging guidelines on recent Fedora
    No longer split out emacs-git and emacs-git-el sub-packages on recent Fedora
    Require emacs-filesystem on recent Fedora (#1234552)


author: Konrad Scherer <Konrad.Scherer@windriver.com>
changelog:
  - Workaround missing git subtree documentation in prebuilt docs (bug 1320210)
  - Only add git-cvsserver binary once if the core dir matches the bin dir as it
    does on el5 (bug 1320210)


author: Todd Zullinger <tmz@pobox.com> - 2.8.2-4
changelog:
  - Use perl(MOD::NAME) format for perl-DBD-SQLite and perl-Digest-MD5 deps
  - Define __global_ldflags on EL < 7 (#1337137)


author: Todd Zullinger <tmz@pobox.com> - 2.11.1-3
changelog:
  - Remove unnecessary rsync requirement from git-core
  - Move gnome-keyring credential helper from git-core to git
  - Enable libsecret credential helper
  - Run git test suite
  - Use %{_mandir} in git/git-core file list filters
  - Fix version of emacs-git and emacs-git-el provides
  - Clean up contrib/{credential,subtree} to avoid cruft in git-core-doc
  - Fix a number of macro-in-comment warnings from rpmlint


author: Petr Stodulka <pstodulk@redhat.com> - 2.11.1-3
changelog:
  - remove non-ASCII characters from description and title of packages
  - fix requiremets
  - fix spec to be compatible for other systems
  - remove deprecated credential-gnome-keyring


author: Petr Stodulka <pstodulk@redhat.com> - 2.13.3-2
changelog:
  - Move documentation files from all subpackages into the %{_pkgdocdir}
    directory, so links inside doc and man files are correct
    Resolves: #1357438
  - Quiet a few rpmlint complaints regarding hidden files in contrib dir
  - Remove explicit libcurl requirement from git-core


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.14.0-2
changelog:
  - Add a build-time dependency on python2-devel for p4
    Resolves: #1479713
  - Skip all grep tests on s390x for now because it failes intermittently


author: Todd Zullinger <tmz@pobox.com> - 2.15.0-2
changelog:
  - Fix git-clone memory exhaustion (CVE-2017-15298)
    Resolves: #1510455, #1510457
  - Disable cross-directory hardlinks
  - Drop ancient obsoletes for git and git-arch
  - Update summary/description of numerous subpackages
  - Fix shebang in a few places to silence rpmlint complaints
  - Fix t9020-remote-svn failure when setting PYTHON_PATH
  - Rename %gitcoredir to %gitexecdir; upstream uses the latter
  - Move commands which no longer require perl into git-core
  - Move filter-branch out of core, it needs perl now
  - Improve test suite coverage


author: Todd Zullinger <tmz@pobox.com> - 2.15.1-3
changelog:
  - Include verbose logs in build output for 'make test' failures
  - Use %autosetup macro to unpack and patch source
  - Remove second make invocation for doc build/install
  - Fix builds using '--without docs'
  - Mark git-core-docs sub-package noarch
  - Avoid failures in svnserve tests when run in parallel
  - Run tests in parallel by default on Fedora
  - Skip 'git svn branch' tests which fail intermittently
  - Re-enable grep tests on s390x


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Avoid excluding non-existent .py[co] files in %doc
  - Remove obsolete gnome-keyring credential helper


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Add %{emacs_filesystem} to simplify emacs support
  - Use .in template for git@.service to ensure paths are substituted


author: Todd Zullinger <tmz@pobox.com> - 2.16.0-1
changelog:
  - Update to 2.16.0
  - Use 'prove' as test harness, enable shell tracing
  - Disable t5000-tar-tree.sh on x86 in f28


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-2
changelog:
  - git-svn: avoid segfaults in 'git svn branch', re-enable t9128, t9141, and
    t9167
  - Drop obsolete BuildRoot, Group, %clean, and buildroot cleanup


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-3
changelog:
  - Order %files and %packages sections by name
  - Remove obsolete %defattr
  - Don't package contrib/svn-fe in %doc
  - Split git-subtree into a separate package


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.0.rc0
changelog:
  - Update to 2.17.0-rc0
  - Adjust for simplified perl install
  - Require git-core rather than git for git-daemon
  - Rename gitweb httpd config file
  - Install contrib/diff-highlight (#1550251)


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.1.rc1.1
changelog:
  - Drop .py extension from contrib/hooks/multimail/git_multimail.py
  - Remove unnecessary "chmod +x contrib/hooks/*"


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Allow git-p4 subpackage to be toggled via --with/--without
  - Use %bcond_(with|without) to enable/disable python3
  - Add support for disabling python2


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - daemon: use --log-destination=stderr with systemd
  - daemon: fix condition for redirecting stderr
  - git-svn: avoid uninitialized value warning


author: Pavel Cahyna <pcahyna@redhat.com>
changelog:
  - Use BuildRequires: perl-interpreter per the packaging guidelines
  - Update conditions for future RHEL


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-4
changelog:
  - Fix segfault in rev-parse with invalid input (#1581678)
  - Move TEST_SHELL_PATH setting to config.mak


author: Todd Zullinger <tmz@pobox.com> - 2.17.1-3
changelog:
  - Use %apply_patch for aarch64 zlib patch, return to %autosetup
  - Disable jgit tests on s390x, they're unreliable
  - Use %make_build and %make_install


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
    Problem caused by changes in #1633973 and #1491151.
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
changelog:
  - apply upstream run-command PATH fix (CVE-2018-19486)
  - config: document value 2 for protocol.version (upstream patch)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1.5.5-1
changelog:
  - Update to latest release
  - Add -devel and -unit-test-devel subpackages
  - Add post/preun scriptlets for global enablement


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26-1
changelog:
  - Update to released glibc 2.26.
  - Auto-sync with upstream master,
    commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
  - getaddrinfo: Release resolver context on error in gethosts (swbz#21885)


author: Florian Weimer <fweimer@redhat.com> - 2.26-2
changelog:
  - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
  - Remove nosegneg 32-bit Xen PV support libraries (#1482027)
  - Adjust spec file to RPM changes


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-3
changelog:
  - Auto-sync with upstream master,
    commit 403143e1df85dadd374f304bd891be0cd7573e3b:
  - x86-64: Align L(SP_RANGE)/L(SP_INF_0) to 8 bytes (swbz#21955)
  - powerpc: Add values from Linux 4.8 to <elf.h>
  - S390: Add new s390 platform z14.
  - Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
    swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
    swbz#21920, swbz#21854)
  - NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
  - i386: Do not set internal_function
  - assert: Suppress pedantic warning caused by statement expression (swbz#21242)
  - powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
  - sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
  - Remove __qaddr_t, __long_double_t
  - Fix uc_* namespace (swbz#21457)
  - nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
  - aarch64: Optimized memcpy for Qualcomm Falkor processor
  - manual: Document getcontext uc_stack value on Linux (swbz#759)
  - i386: Add <startup.h> (swbz#21913)
  - Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
  - Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
  - x86-64: Add FMA multiarch functions to libm
  - i386: Support static PIE in start.S
  - Compile tst-prelink.c without PIE (swbz#21815)
  - x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
  - x86: Remove __memset_zero_constant_len_parameter (swbz#21790)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 2.26-4
changelog:
  - Remove 'Buildroot' tag, 'Group' tag, and '%clean' section, and don't
    remove the buildroot in '%install', all per Fedora Packaging Guidelines
    (#1476839)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-5
changelog:
  - Auto-sync with upstream master,
    commit 2585d7b839559e665d5723734862fbe62264b25d:
  - Do not use generic selection in C++ mode
  - Do not use __builtin_types_compatible_p in C++ mode (#1481205)
  - x86-64: Check FMA_Usable in ifunc-mathvec-avx2.h (swbz#21966)
  - Various locale fixes (swbz#21750, swbz#21960, swbz#21959, swbz#19852)
  - Fix sigval namespace (swbz#21944)
  - x86-64: Optimize e_expf with FMA (swbz#21912)
  - Adjust glibc-rh827510.patch.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-6
changelog:
  - Auto-sync with upstream master,
    commit b5889d25e9bf944a89fdd7bcabf3b6c6f6bb6f7c:
  - assert: Support types without operator== (int) (#1483005)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-8
changelog:
  - Auto-sync with upstream master,
    commit a8410a5fc9305c316633a5a3033f3927b759be35:
  - Obsolete matherr, _LIB_VERSION, libieee.a.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-10
changelog:
  - Use an architecture-independent system call list (#1484729)
  - Drop glibc-fedora-include-bits-ldbl.patch (#1482105)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-11
changelog:
  - Auto-sync with upstream master,
    commit 3d7b66f66cb223e899a7ebc0f4c20f13e711c9e0:
  - string/stratcliff.c: Replace int with size_t (swbz#21982)
  - Fix tgmath.h handling of complex integers (swbz#21684)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-13
changelog:
  - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
  - Auto-sync with upstream master,
    commit 5f9409b787c5758fc277f8d1baf7478b752b775d:
  - Various locale fixes (swbz#22022, swbz#22038, swbz#21951, swbz#13805,
    swbz#21971, swbz#21959)
  - MIPS/o32: Fix internal_syscall5/6/7 (swbz#21956)
  - AArch64: Fix procfs.h not to expose stdint.h types
  - iconv_open: Fix heap corruption on gconv_init failure (swbz#22026)
  - iconv: Mangle __btowc_fct even without __init_fct (swbz#22025)
  - Fix bits/math-finite.h _MSUF_ expansion namespace (swbz#22028)
  - Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-14
changelog:
  - Build glibc with -O2 (following the upstream default).
  - Auto-sync with upstream master,
    commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
  - malloc: Abort on heap corruption, without a backtrace (swbz#21754)
  - getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
  - getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
  - Place $(elf-objpfx)sofini.os last (swbz#22051)
  - Various locale fixes (swbz#15332, swbz#22044)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-15
changelog:
  - Auto-sync with upstream master,
    commit b38042f51430974642616a60afbbf96fd0b98659:
  - Implement tmpfile with O_TMPFILE (swbz#21530)
  - Obsolete pow10 functions
  - math.h: Warn about an already-defined log macro


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-16
changelog:
  - Auto-sync with upstream master,
    commit 1e2bffd05c36a9be30d7092d6593a9e9aa009ada:
  - Add IBM858 charset (#1416405)
  - Update kernel version in syscall-names.list to 4.13
  - Add Linux 4.13 constants to bits/fcntl-linux.h
  - Add fcntl sealing interfaces from Linux 3.17 to bits/fcntl-linux.h
  - math: New generic powf, log2f, logf
  - Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
  - Mark __dso_handle as hidden (swbz#18822)
  - Skip PT_DYNAMIC segment with p_filesz == 0 (swbz#22101)
  - glob now matches dangling symbolic links (swbz#866, swbz#22183)
  - nscd: Release read lock after resetting timeout (swbz#22161)
  - Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
  - Fix dlclose/exit race (swbz#22180)
  - x86: Add SSE4.1 trunc, truncf (swbz#20142)
  - Fix atexit/exit race (swbz#14333)
  - Use execveat syscall in fexecve (swbz#22134)
  - Enable unwind info in libc-start.c and backtrace.c
  - powerpc: Avoid misaligned stores in memset
  - powerpc: build some IFUNC math functions for libc and libm (swbz#21745)
  - Removed redundant data (LC_TIME and LC_MESSAGES) for niu_NZ (swbz#22023)
  - Fix LC_TELEPHONE for az_AZ (swbz#22112)
  - x86: Add MathVec_Prefer_No_AVX512 to cpu-features (swbz#21967)
  - x86: Add x86_64 to x86-64 HWCAP (swbz#22093)
  - Finish change from “Bengali” to “Bangla” (swbz#14925)
  - posix: fix glob bugs with long login names (swbz#1062)
  - posix: Fix getpwnam_r usage (swbz#1062)
  - posix: accept inode 0 is a valid inode number (swbz#19971)
  - Remove redundant LC_TIME data in om_KE (swbz#22100)
  - Remove remaining _HAVE_STRING_ARCH_* definitions (swbz#18858)
  - resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
  - Add miq_NI locale for Miskito (swbz#20498)
  - Fix bits/math-finite.h exp10 condition (swbz#22082)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-17
changelog:
  - Move nss_compat to the main glibc package (#1400538)
  - Auto-sync with upstream master,
    commit 11c4f5010c58029e73e656d5df4f8f42c9b8e877:
  - crypt: Use NSPR header files in addition to NSS header files (#1489339)
  - math: Fix yn(n,0) without SVID wrapper (swbz#22244)
  - math: Fix log2(0) and log(10) in downward rounding (swbz#22243)
  - math: Add C++ versions of iscanonical for ldbl-96, ldbl-128ibm (swbz#22235)
  - powerpc: Optimize memrchr for power8
  - Hide various internal functions (swbz#18822)


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26.90-18
changelog:
  - Auto-sync with upstream master,
    commit 1e26d35193efbb29239c710a4c46a64708643320.
  - malloc: Fix tcache leak after thread destruction (swbz#22111)
  - powerpc:  Fix IFUNC for memrchr.
  - aarch64: Optimized implementation of memmove for Qualcomm Falkor
  - Always do locking when iterating over list of streams (swbz#15142)
  - abort: Do not flush stdio streams (swbz#15436)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-19
changelog:
  - Move /var/db/Makefile to nss_db (#1498900)
  - Auto-sync with upstream branch master,
    commit 645ac9aaf89e3311949828546df6334322f48933:
  - openpty: use TIOCGPTPEER to open slave side fd


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-20
changelog:
  - Auto-sync with upstream branch master,
    commit d8425e116cdd954fea0c04c0f406179b5daebbb3:
  - nss_files performance issue in multi mode (swbz#22078)
  - Ensure C99 and C11 interfaces are available for C++ (swbz#21326)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-21
changelog:
  - Auto-sync with upstream branch master,
    commit 596f70134a8f11967c65c1d55a94a3a2718c731d:
  - Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 (swbz#22052)
  - locale: No warning for non-symbolic character (swbz#22295)
  - locale: Allow "" int_curr_Symbol (swbz#22294)
  - locale: Fix localedef exit code (swbz#22292)
  - nptl: Preserve error in setxid thread broadcast in coredumps (swbz#22153)
  - powerpc: Avoid putting floating point values in memory (swbz#22189)
  - powerpc: Fix the carry bit on mpn_[add|sub]_n on POWER7 (swbz#22142)
  - Support profiling PIE (swbz#22284)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-22
changelog:
  - Auto-sync with upstream branch master,
    commit c38a4bfd596db2be2b9c1f96715bdc833eab760a:
  - malloc: Use compat_symbol_reference in libmcheck (swbz#22050)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-24
changelog:
  - Use make -O to serialize make output
  - Auto-sync with upstream branch master,
    commit 63b4baa44e8d22501c433c4093aa3310f91b6aa2:
  - sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
  - Install correct bits/long-double.h for MIPS64 (swbz#22322)
  - malloc: Fix deadlock in _int_free consistency check
  - x86-64: Don't set GLRO(dl_platform) to NULL (swbz#22299)
  - math: Add _Float128 function aliases
  - locale: Add new locale mjw_IN (swbz#13994)
  - aarch64: Rewrite elf_machine_load_address using _DYNAMIC symbol
  - powerpc: fix check-before-set in SET_RESTORE_ROUND
  - locale: Use U+202F as thousands separators in pl_PL locale (swbz#16777)
  - math: Use __f128 to define FLT128_* constants in include/float.h for old GCC
  - malloc: Improve malloc initialization sequence (swbz#22159)
  - malloc: Use relaxed atomics for malloc have_fastchunks
  - locale: New locale ca_ES@valencia (swbz#2522)
  - math: Let signbit use the builtin in C++ mode with gcc < 6.x (swbz#22296)
  - locale: Place monetary symbol in el_GR, el_CY after the amount (swbz#22019)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 797ba44ba27521261f94cc521f1c2ca74f650147:
  - math: Add bits/floatn.h defines for more _FloatN / _FloatNx types
  - posix: Fix improper assert in Linux posix_spawn (swbz#22273)
  - x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)
  - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
  - malloc: Add single-threaded path to _int_free
  - locale: Add new locale kab_DZ (swbz#18812)
  - locale: Add new locale shn_MM (swbz#13605)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-26
changelog:
  - Auto-sync with upstream branch master,
    commit 6b86036452b9ac47b4ee7789a50f2f37df7ecc4f:
  - CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping
  - powerpc: Use latest string function optimization for internal function calls
  - math: No _Float128 support for ppc64le -mlong-double-64 (swbz#22402)
  - tpi_PG locale: Fix wrong d_fmt
  - aarch64: Disable lazy symbol binding of TLSDESC
  - tpi_PG locale: fix syntax error (swbz#22382)
  - i586: Use conditional branches in strcpy.S (swbz#22353)
  - ffsl, ffsll: Declare under __USE_MISC, not just __USE_GNU
  - csb_PL locale: Fix abmon/mon for March (swbz#19485)
  - locale: Various yesstr/nostr/yesexpr/noexpr fixes (swbz#15260, swbz#15261)
  - localedef: Add --no-warnings/--warnings option
  - powerpc: Replace lxvd2x/stxvd2x with lvx/stvx in P7's memcpy/memmove
  - locale: Use ASCII as much as possible in LC_MESSAGES
  - Add new locale yuw_PG (swbz#20952)
  - malloc: Add single-threaded path to malloc/realloc/calloc/memalloc
  - i386: Replace assembly versions of e_powf with generic e_powf.c
  - i386: Replace assembly versions of e_log2f with generic e_log2f.c
  - x86-64: Add powf with FMA
  - x86-64: Add logf with FMA
  - i386: Replace assembly versions of e_logf with generic e_logf.c
  - i386: Replace assembly versions of e_exp2f with generic e_exp2f.c
  - x86-64: Add exp2f with FMA
  - i386: Replace assembly versions of e_expf with generic e_expf.c


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-27
changelog:
  - Auto-sync with upstream branch master,
    commit f6e965ee94b37289f64ecd3253021541f7c214c3:
  - powerpc: AT_HWCAP2 bit PPC_FEATURE2_HTM_NO_SUSPEND
  - aarch64: Add HWCAP_DCPOP bit
  - ttyname, ttyname_r: Don't bail prematurely (swbz#22145)
  - signal: Optimize sigrelse implementation
  - inet: Check length of ifname in if_nametoindex (swbz#22442)
  - malloc: Account for all heaps in an arena in malloc_info (swbz#22439)
  - malloc: Add missing arena lock in malloc_info (swbz#22408)
  - malloc: Use __builtin_tgmath in tgmath.h with GCC 8 (swbz#21660)
  - locale: Replaced unicode sequences in the ASCII printable range
  - resolv: More precise checks in res_hnok, res_dnok (swbz#22409, swbz#22412)
  - resolv: ns_name_pton should report trailing \ as error (swbz#22413)
  - locale: mfe_MU, miq_NI, an_ES, kab_DZ, om_ET: Escape / in d_fmt (swbz#22403)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-28
changelog:
  - Auto-sync with upstream branch master,
    commit cccb6d4e87053ed63c74aee063fa84eb63ebf7b8:
  - sigwait can fail with EINTR (#1516394)
  - Add memfd_create function
  - resolv: Fix p_secstodate overflow handling (swbz#22463)
  - resolv: Obsolete p_secstodate
  - Avoid use of strlen in getlogin_r (swbz#22447)
  - lv_LV locale: fix collation (swbz#15537)
  - S390: Add cfi information for start routines in order to stop unwinding
  - aarch64: Optimized memset for falkor


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-29
changelog:
  - Enable -fstack-clash-protection (#1512531)
  - Auto-sync with upstream branch master,
    commit a55430cb0e261834ce7a4e118dd9e0f2b7fb14bc:
  - elf: Properly compute offsets of note descriptor and next note (swbz#22370)
  - cs_CZ locale: Base collation on iso14651_t1 (swbz#22336)
  - Implement the mlock2 function
  - Add _Float64x function aliases
  - elf: Consolidate link map sorting
  - pl_PL locale: Base collation on iso14651_t1 (swbz#22469)
  - nss: Export nscd hash function as __nss_hash (swbz#22459)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-30
changelog:
  - Add build dependency on bison
  - Auto-sync with upstream branch master,
    commit 7863a7118112fe502e8020a0db0fa74fef281f29:
  - math: New generic sinf (swbz#5997)
  - is_IS locale: Base collation on iso14651_t1 (swbz#22519)
  - intl: Improve reproducibility by using bison (swbz#22432)
  - sr_RS, bs_BA locales: make collation rules the same as for hr_HR (wbz#22534)
  - hr_HR locale: various updates (swbz#10580)
  - x86: Make a space in jmpbuf for shadow stack pointer
  - CVE-2017-17426: malloc: Fix integer overflow in tcache (swbz#22375)
  - locale: make forward accent sorting the default in collating (swbz#17750)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-31
changelog:
  - Add elision tunables.  Drop related configure flag.  (#1383986)
  - Auto-sync with upstream branch master,
    commit 37ac8e635a29810318f6d79902102e2e96b2b5bf:
  - Linux: Implement interfaces for memory protection keys
  - math: Add _Float64, _Float32x function aliases
  - math: Use sign as double for reduced case in sinf
  - math: fix sinf(NAN)
  - math: s_sinf.c: Replace floor with simple casts
  - et_EE locale: Base collation on iso14651_t1 (swbz#22517)
  - tr_TR locale: Base collation on iso14651_t1 (swbz#22527)
  - hr_HR locale: Avoid single code points for digraphs in LC_TIME (swbz#10580)
  - S390: Fix backtrace in vdso functions


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-32
changelog:
  - Obsolete the libcrypt-nss subpackage (#1525396)
  - armhfp: Disable -fstack-clash-protection due to GCC bug (#1522678)
  - ppc64: Disable power6 multilib due to GCC bug (#1522675)
  - Auto-sync with upstream branch master,
    commit 243b63337c2c02f30ec3a988ecc44bc0f6ffa0ad:
  - libio: Free backup area when it not required (swbz#22415)
  - math: Fix nextafter and nexttoward declaration (swbz#22593)
  - math: New generic cosf
  - powerpc: POWER8 memcpy optimization for cached memory
  - x86-64: Add sinf with FMA
  - x86-64: Remove sysdeps/x86_64/fpu/s_sinf.S
  - math: Fix ctanh (0 + i NaN), ctanh (0 + i Inf) (swbz#22568)
  - lt_LT locale: Base collation on copy "iso14651_t1" (swbz#22524)
  - math: Add _Float32 function aliases
  - math: Make cacosh (0 + iNaN) return NaN + i pi/2 (swbz#22561)
  - hsb_DE locale: Base collation on copy "iso14651_t1" (swbz#22515)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-34
changelog:
  - Auto-sync with upstream branch master,
    commit bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f:
  - copy_file_range: New function to copy file data
  - nptl: Consolidate pthread_{timed,try}join{_np}
  - nptl: Implement pthread_self in libc.so (swbz#22635)
  - math: Provide a C++ version of iseqsig (swbz#22377)
  - elf: remove redundant __libc_enable_secure check from fillin_rpath
  - math: Avoid signed shift overflow in pow (swbz#21309)
  - x86: Add feature_1 to tcbhead_t (swbz#22563)
  - x86: Update cancel_jmp_buf to match __jmp_buf_tag (swbz#22563)
  - ld.so: Examine GLRO to detect inactive loader (swbz#20204)
  - nscd: Fix nscd readlink argument aliasing (swbz#22446)
  - elf: do not substitute dst in $LD_LIBRARY_PATH twice (swbz#22627)
  - ldconfig: set LC_COLLATE to C (swbz#22505)
  - math: New generic sincosf
  - powerpc: st{r,p}cpy optimization for aligned strings
  - CVE-2017-1000409: Count in expanded path in _dl_init_path (#1524867)
  - CVE-2017-1000408: Compute correct array size in _dl_init_paths (#1524867)
  - x86-64: Remove sysdeps/x86_64/fpu/s_cosf.S
  - aarch64: Improve strcmp unaligned performance


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-35
changelog:
  - Remove sln (#1531546)
  - Remove Sun RPC interfaces (#1531540)
  - Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
  - Auto-sync with upstream branch master,
    commit f1a844ac6389ea4e111afc019323ca982b5b027d:
  - CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
  - i386: In makecontext, align the stack before calling exit (swbz#22667)
  - x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
  - elf: check for rpath emptiness before making a copy of it
  - elf: remove redundant is_path argument
  - elf: remove redundant code from is_dst
  - elf: remove redundant code from _dl_dst_substitute
  - scandir: fix wrong assumption about errno (swbz#17804)
  - Deprecate external use of libio.h and _G_config.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 579396ee082565ab5f42ff166a264891223b7b82:
  - nptl: Add test for callee-saved register restore in pthread_exit
  - getrlimit64: fix for 32-bit configurations with default version >= 2.2
  - elf: Add linux-4.15 VDSO hash for RISC-V
  - elf: Add RISC-V dynamic relocations to elf.h
  - powerpc: Fix error message during relocation overflow
  - prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-38
changelog:
  - nptl: Fix stack guard size accounting (#1527887)
  - Remove invalid Obsoletes: on glibc-header provides
  - Require python3 instead of python during builds
  - Auto-sync with upstream branch master,
    commit 09085ede12fb9650f286bdcd805609ae69f80618:
  - math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
  - x86-64: Add sincosf with vector FMA


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Arjun Shankar <arjun@redhat.com> - 2.28-79
changelog:
  - Remove unwanted whitespace from size lines and account for top chunk in
    malloc_info output (#1735747)


author: Arjun Shankar <arjun@redhat.com> - 2.28-80
changelog:
  - Fix race condition in tst-clone3 and add a new ldconfig test,
    tst-ldconfig-bad-aux-cache (#1764226)


author: Patsy Griffin <patsy@redhat.com> - 2.28-114
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1811796)


author: Patsy Griffin <patsy@redhat.com> - 2.28-130
changelog:
  - Fix avx2 strncmp offset compare condition check (#1871394)
  - Add strncmp and strcmp testcases for page boundary


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Arjun Shankar <arjun@redhat.com> - 2.28-174
changelog:
  - Introduce new glibc-doc.noarch subpackage (#2021671)
  - Move the reference manual info pages from glibc-devel to glibc-doc
  - Move debugger interface documentation from glibc to glibc-doc
  - Remove unnecessary README, INSTALL, NEWS files from glibc
  - Remove unnecessary README.timezone and gai.conf files from glibc-common


author: Florian Weimer <fweimer@redhat.com> - 2.28-175
changelog:
  - Fix dl-tls.c assert failure with pthread_create & dlopen (#1991001)
  - Fix x86_64 TLS lazy binding with auditors (#1950056)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Arjun Shankar <arjun@redhat.com> - 2.28-190
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054790)
  - Fix localedef so it can handle symbolic links when generating locale-archive.


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Arjun Shankar <arjun@redhat.com> - 2.28-216
changelog:
  - Retain .gnu_debuglink section for libc.so.6 (#2115830)
  - Remove .annobin* symbols from ld.so
  - Remove redundant ld.so debuginfo file


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.24
changelog:
  - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo
    and AF_UNSPEC.
  - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error
    responses. (RHEL-18039)


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Benjamin Berg <bberg@redhat.com> - 3.28.2-30
changelog:
  - Fix connection list AP selection and SSID display for OWE
    Resolves: #2023156
  - Fix saving passwords for non-wifi connections
    Resolves: #1938944


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 3.28.2-37.inferit
changelog:
  - Check MSVSPHERE_PRETTY_NAME field first to set OS name (adapted patch by Arkady L. Shane for MSVSphere 9)
  - Updated Russian translation


author: Adam Williamson <awilliam@redhat.com> - 3.28.0-7
changelog:
  - Drop unnecessary pkgconfig(NetworkManager) BuildRequire
  - Run autoreconf to avoid automake version mismatch


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 3.28.0-11.inferit
changelog:
  - Location and reporting services option should be off by default
  - Updated Russian translation
  - Rebuilt for MSVSphere 8.9


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Don't set group tags
  - Remove ancient obsoletes
  - Remove gsettings schema scriptlets


author: Alexander Larsson <alexl@redhat.com> - 2.20-2
changelog:
  - Backport fix from svn where newly created keyrings weren't
    found
  - Don't unset default keyring on daemon shutdown


author: Alexander Larsson <alexl@redhat.com> - 2.20-4
changelog:
  - Have the pam module tell the daemon to init the login keyring 
    without using the socket as selinux limits access to that


author: Colin Walters <walters@redhat.com> - 2.22.3.6-2
changelog:
  - Add --disable-acl-prompts; you can't try to maintain integrity
    between two processes with the same UID and no other form of
    access control.


author: Richard Hughes <rhughes@redhat.com> - 2.26.0-2
changelog:
  - Fix a nasty bug that's been fixed upstream where gnome-keyring-daemon
    would hang when re-allocating from a pool of secure memory.


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/gnome-keyring/2.26/gnome-keyring-2.26.1.news


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.5-2
changelog:
  - Fix endless loop when looking for password in login keyring
  - Fix undefined reference to S_ISSOCK (#557970)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - More robust error display and handling
  - [secret-store] Don't save session keyring to disk
  - [dbus] Allow unlocking even when always unlock is not available
  - [dbus] Hide the automatically unlock check when login not usable
  - [login] Fix various issues storing and using auto unlock passwords


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Update URL
  - Use pkgconfig for BuildRequires
  - Use license macro for COPYING and COPYING.LIB
  - Preserve timestamps during install


author: Ray Strode <rstrode@redhat.com> 3.18.0-4
changelog:
  - Fix password handoff in non-autologin case
  - Remove unneccessary part of autologin fix
    Related: #1269581


author: Milan Crha <mcrha@redhat.com> - 3.28.2-5
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.28.2-6
changelog:
  - Resolves: RHEL-10493 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.0-3
changelog:
  - Drop the run-time requirement on ImageMagick
  - Enable Python 2 during the build for itstool
  Resolves: #1564997


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 3.28.1-21.inferit
changelog:
  - Update Russian translation in desktop files
  - Drop gnome-custom-session.desktop
  - Rebuilt for MSVSphere 8.9


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 3.32.0-19.inferit.1
changelog:
  - Removing the 'System Not Registered' notification from GNOME (https://access.redhat.com/solutions/6976776)


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-50
changelog:
  - Fix struts on login screen
    Resolves: #2138941
  - Fix launching network device settings
    Resolves: #1879405


author: Owen Taylor <otaylor@redhat.com> - 2.27.2-1
changelog:
  - Update to 2.27.2
  - Add an explicit dep on gobject-introspection 0.6.5 which is required 
    for the new version


author: Adam Miller <maxamillion@fedoraproject.org> - 2.28.0.20101015git-1
changelog:
  - Added dependency on a git build of gobject-introspect to solve some breakage
  - Also went ahead and made a new git tarball


author: Adam Miller <maxamillion@fedoraproject.org> - 2.29.1-2
changelog:
  - Bumped for new version of mutter and clutter
  - Added version requirement to gjs-devel because of dependency of build


author: Adam Miller <maxamillion@fedoraproject.org> - 2.31.2-2
changelog:
  - Added new version requirements for dependencies based on upstream releases
  - Added new file listings for gnome-shell-clock-preferences binary and .desktop
  - Added gnome-shell man page file listing


author: Owen Taylor <otaylor@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Add libcroco-devel to BuildRequires, apparently it was getting
    pulled in indirectly before
  - Add libcanberra-devel and pulseaudio-libs-devel BuildRequires


author: Nils Philippsen <nils@redhat.com> - 3.0.0.2-1
changelog:
  - Update to 3.0.0.2 (fixes missing import that was preventing extensions from
    loading.)
  - Update source URL


author: Dan Williams <dcbw@redhat.com> - 3.0.1-4
changelog:
  - Fix initial connections to WPA Enterprise access points (#699014)
  - Fix initial connections to mobile broadband networks


author: Owen Taylor <otaylor@redhat.com> - 3.4.0-2
changelog:
  - Change gnome-shell-favourite-apps-firefox.patch to also patch the JS code
    to handle the transition from mozilla-firefox.desktop to firefox.desktop.
    (#808894, reported by Jonathan Kamens)


author: Florian Müllner <fmuellner@redhat.com> - 3.6.1-2
changelog:
  - Remove avoid-redhat-menus patch

    The standard way of supporting a desktop-specific menu layout is
    to set XDG_MENU_PREFIX (which we made gnome-session do now).


author: Kalev Lember <kalevlember@gmail.com> - 3.9.1-2
changelog:
  - Add missing telepathy-logger runtime dep
  - Depend on gnome-session-xsession so that it gets pulled in for
    typical GNOME installs


author: Florian Müllner <fmuellner@redhat.com> - 3.11.90-3
changelog:
  - Add dependency on gnome-control-center - several panels are referenced
    by a number of menu items


author: Ray Strode <rstrode@redhat.com> 3.15.91-2
changelog:
  - Drop dep on NetworkManager-config-connectivity-fedora
    It's already required by fedora-release-workstation


author: Kalev Lember <klember@redhat.com> - 3.17.4-2
changelog:
  - Create empty directories for extensions and search providers
  - Move desktop file validation to %check section
  - Use make_install macro


author: Florian Müllner <fmuellner@redhat.com> - 3.21.90.1-1
changelog:
  - Update to 3.21.90.1
    (Fixes a corrupt .desktop file that made it from the build directory into
     the 3.21.90 tarball)


author: Florian Müllner <fmuellner@redhat.com> - 3.28.3-9
changelog:
  - Fix JS "invalid access" warnings (#1642482, #1637622)
  - Fix new input sources only working after re-login (#1628154)
  - Backport IM support fixes (#1668979)


author: Carlos Garnacho <cgarnach@redhat.com> - 3.32.2-12
changelog:
  - Fix window dragging with tablets in the overview
    Resolves: #1716767
  - Fix high-contrast/symbolic race
    Resolves: #1730612
  - Make perf-tool usable on wayland
    Resolves: #1652178


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-17
changelog:
  - Really allow using perf-tool on wayland
    Resolves: #1652178
  - Fix timed login without user list
    Resolves: #1668895
  - Fix HighContrast/symbolic icon mixup
    Resolves: #1794045
  - Backport introspect API changes
    Resolves: #1837413


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-22
changelog:
  - Wake up lock screen when deactivated programmatically
    Resolves: #1854290
  - Backport better caps-lock warning
    Resolves: #1861357
  - Fix more (harmless) JS warnings
    Resolves: #1881312


author: Ray Strode <rstrode@redhat.com> - 3.32.2-36
changelog:
  - Add ability to lock down password showing
    Resolves: #1770302
  - Add requires on newer mutter version
    Related: #1937866


author: Florian Müllner <fmuellner@redhat.com> - 3.32.2-45
changelog:
  - Fix lock up when previous focus actor is destroyed during modal
    Resolves: #2075231
  - Defend against corrupt notifications file
    Resolves: #2078564


author: Joan Torres Lopez <joantolo@redhat.com> - 3.32.2-58
changelog:
  - Don't hard depend on gnome-session-xsession to allow
    using other session types, e.g. wayland
    Resolves: RHEL-110531


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-2
changelog:
  - add patch to be standard FHS compliant, remove phantomjs
  - update to v5.4.3 upstream community sources


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-7
changelog:
  - further refinement for spec doc section from Xavier Bachelot
  - disable debug_package to avoid empty debugsourcefiles.list


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-8
changelog:
  - add BuildRequires (and unbundle) vendor sources available in Fedora
  - declare Provides for remaining (bundled) vendor go sources
  - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28


author: Xavier Bachelot <xavier@bachelot.org> 5.4.3-9
changelog:
  - Remove extraneous slash (cosmetic)
  - Create directories just before moving stuff in them
  - Truncate long lines
  - Group all golang stuff
  - Simplify BuildRequires/bundled Provides
  - Sort BuildRequires/bundled Provides
  - Fix bundled go packages Provides


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-11
changelog:
  - tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656)
  - build debuginfo package again
  - unbundle BuildRequires for golang-github-hashicorp-version-devel
  - remove some unneeded development files
  - remove macros from changelog and other rpmlint tweaks


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.1-1
changelog:
  - update to v6.0.1 upstream sources, tweak distro config, re-do patch
  - simplify make_webpack.sh script (Elliott Sales de Andrade)
  - vendor/github.com/go-ldap is now gone, so don't unbundle it


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.4-1
changelog:
  - include fix for CVE-2019-15043
  - add patch for uaparser on 32bit systems
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.5-1
changelog:
  - drop uaparser patch now it's upstream
  - add xerrors patch, see https://github.com/golang/go/issues/32246
  - use vendor sources on rawhide until modules are fully supported
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.6-1
changelog:
  - add weak depenency on grafana-pcp
  - add patch to mute shellcheck SC1090 for grafana-cli
  - update to 6.3.6 upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.6.2-1
changelog:
  - added patch0 to set the version string correctly
  - removed patch 004-xerrors.patch, it's now upstream
  - added several patches for golang vendored vrs build dep differences
  - added patch to move grafana-cli binary to libexec dir
  - update to 6.6.2 tagged upstream community sources, see CHANGELOG


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.3-1
changelog:
  - update to 6.7.3 tagged upstream community sources, see CHANGELOG
  - add scripts to list Go dependencies and bundled npmjs dependencies
  - set Grafana version in Grafana UI and grafana-cli --version
  - declare README.md as documentation of datasource plugins
  - create grafana.db on first installation (fixes RH BZ #1805472)
  - change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
  - change permissions of /var/lib/grafana/grafana.db to 640 and
    user/group grafana:grafana (CVE-2020-12458)
  - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-1
changelog:
  - update to 6.7.4 tagged upstream community sources, see CHANGELOG
  - security fix for CVE-2020-13379


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
changelog:
  - update to 7.3.4 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies
  - optionally bundle node.js dependencies and build and test frontend as part of the specfile
  - merge all datasources into main grafana package
  - change default provisioning path to /etc/grafana/provisioning
  - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
changelog:
  - update to 7.3.6 tagged upstream community sources, see CHANGELOG
  - remove dependency on SAML (not supported in the open source version of Grafana)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
changelog:
  - change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
  - add pcp-redis-datasource to allow_loading_unsigned_plugins config option


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
changelog:
  - remove unused cryptographic implementations
  - use cryptographic functions from OpenSSL if FIPS mode is enabled


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
changelog:
  - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
  - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
  - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
  - run integration tests in check phase
  - update FIPS patch with latest changes in Go packaging


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Mark Goodwin <mgoodwin@redhat.com> 0.0.4-1
changelog:
  - add suggested pmproxy URL in config html
  - updated instructions and README.md now that grafana is in Fedora


author: Andreas Gerstmayr <agerstmayr@redhat.com> 0.0.7-1
changelog:
  - converted into a Grafana app plugin, renamed to grafana-pcp
  - redis: support for instance domains, labels, autocompletion, automatic rate conversation
  - live and bpftrace: initial commit of datasources


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.0-1
changelog:
  - bpftrace: support for Flame Graphs
  - bpftrace: context-sensitive auto completion for bpftrace probes, builtin variables and functions incl. help texts
  - bpftrace: parse output of bpftrace scripts (e.g. using `printf()`) as CSV and display it in the Grafana table panel
  - bpftrace: sample dashboards (BPFtrace System Analysis, BPFtrace Flame Graphs)
  - vector: table output: show instance name in left column
  - vector: table output: support non-matching instance names (cells of metrics which don't have the specific instance will be blank)
  - vector & bpftrace: if the metric/script gets changed in the query editor, immeditately stop polling the old metric/deregister the old script
  - vector & bpftrace: improve pmwebd compatibility
  - misc: help texts for all datasources (visible with the **[ ? ]** button in the query editor)
  - misc: renamed PCP Live to PCP Vector
  - misc: logos for all datasources
  - misc: improved error handling


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.2-1
changelog:
  - handle counter wraps (overflows)
  - convert time based counters to time utilization
  - flame graphs: aggregate stack counts by selected time range in the Grafana UI
  - flame graphs: add option to hide idle stacks
  - vector: fix container dropdown in query editor
  - vector: remove container setting from datasource settings page
  - redis: fix value transformations (e.g. rate conversation of counters)
  - request more datapoints from the datasource to fill the borders of the graph panel


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.3-2
changelog:
  - remove node_modules/node-notifier directory from webpack (due to licensing issues)
  - upgrade copy-webpack-plugin, terser-webpack-plugin and remove uglifyjs-webpack-plugin to mitigate XSS vulnerability in serialize-javascript dependency


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.5-1
changelog:
  - upgrade to upstream 1.0.5
  - flame graphs: clean flame graph stacks every 5s (reduces CPU load)
  - general: implement PCP version checks
  - redis: set default sample interval to 60s (fixes empty graph borders)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 2.0.2-2
changelog:
  - vector: do not show all cgroups in the container overview dashboard in case no containers are present on the system


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1465878)
  - ease future updates by better macro use
  - drop obsolete patch hunks
  - fix missing prototype for fchown warning


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-5
changelog:
  - ensure binaries are linked with Fedora LDFLAGS (#1548532)
  - use ldconfig_scriptlets macro
  - add proper man links for tcat and untoast


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - %build: --disable-fatal-warnings --disable-silent-rules
  - fix rpath harder
  - use %ldconfig_scriptlets, %make_build, %make_install
  - -devel: tighten deps with %{_isa}


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - Patch CVE-2023-40474: Integer overflow
  - Patch CVE-2023-40475: Integer overflow
  - Patch CVE-2023-40476: Integer overflow in H.265 video parser
  - Resolves: RHEL-19500, RHEL-19504, RHEL-19507


author: Tomas Popela <tpopela@redhat.com> - 1.14.0-2
changelog:
  - Enable Wayland support (previously disabled due to missing wayland-devel
    as a BR - before it was probably brought in by something else).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-2
changelog:
  - tigten subpkg deps
  - fix rpaths
  - update %files
  - use %ldconfig_scriptlets %make_build %make_install
  - %build: --disable-fatal-warnings --disable-silent-rules
  - Conflicts: gstreamer1-plugins-bad-free < 1.13


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
    Resolves: RHEL-70974, RHEL-71010, RHEL-70986


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-1
changelog:
  - Update to 0.11.93.
  - Add batch to fix build with recent kernels, the v4l2_buffer input field was removed.
  - Use %global instead of %define.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.7.1-3
changelog:
  - Append --disable-fatal-warnings to %configure to prevent
    building from aborting for negligible warnings (Fix F24FTBFS)
  - Append --disable-silent-rules to %configure to make
    building verbose.
  - Don't remove buildroot before installing.


author: Wim Taymans <wtaymans@redhat.com> - 1.13.1-2
changelog:
  - The gtk plugin was moved from -bad, make a new subpackage for it.
  - the mp3 plugins were moved from -ugly, add BuildRequires.
  - build requires GL now for gtkglsink


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
    CVE-2024-47613
    Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022
    Resolves: RHEL-70998


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9.0 release
  - Use gcrypt for DES impl instead of local DES impl (rhbz #1618426)
  - Fix crash if connection fails early (rhbz #1622189)


author: Daniel P. Berrangé <berrange@redhat.com> - 0.9.0-2
changelog:
  - Fix crash when TLS handshake fails (rhbz #1665837)
  - Ensure auth failure signal is emitted when SASL fails (rhbz #1688275)


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.8-1
changelog:
  - 0.12.8 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-av/0.12/gupnp-av-0.12.8.news
  - Use %license


author: Kalev Lember <klember@redhat.com> - 0.12.9-1
changelog:
  - Update to 0.12.9
  - Don't set group tags
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 5.2.14-3.inferit
changelog:
  - Added SELinux policy (based on Arkady L. Shane <tigro@msvsphere-os.ru> patch for MSVSphere 9)
  - Rebuilt for MSVSphere 8.9


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 1.36.2-14.inferit
changelog:
  - Added yandex disk webdav support (by Alexey Berezhok <aberezhok@msvsphere-os.ru>)
  - Rebuilt for MSVSphere 8.9


author: Tomas Bzatek <tbzatek@redhat.com> - 0.2.1-2
changelog:
  - Added libarchive dependency for archive backend
  - Require new libsmbclient in order to get smb backend working again


author: David Zeuthen <davidz@redhat.com> - 0.2.3-9
changelog:
  - Ensure archive mounts are read-only and turn on thumbnailing on them
  - Update fuse threading patch


author: Alexander Larsson <alexl@redhat.com> - 1.0.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: David Zeuthen <davidz@redhat.com> - 1.2.1-3
changelog:
  - Clean up gdu patches and bump BR for gdu to 0.3
  - Avoiding showing volume for ignored mounts (#495033)


author: David Zeuthen <davidz@redhat.com> - 1.2.2-4
changelog:
  - Don't show drives that are supposed to be hidden (#498649)
  - Only automount if media or drive was just inserted - this fixes
    a problem with spurious automounts when partitioning/formatting


author: Tomas Bzatek <tbzatek@redhat.com> - 1.2.2-5
changelog:
  - Require separate libtalloc to fix libsmbclient
  - Ref the infos in next_files_finish (gnome #582195)
  - FTP: parse file sizes > 4GB correctly (#499286)
  - CDDA: allow query well-formed filenames only (#499266)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-2
changelog:
  - Fix gedit crashed with SEGV in strlen()
  - Fix SMB protocol not handled when opening from a bookmark (#509832)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-3
changelog:
  - Fix bad mount prefix stripping (part of #509612)
  - Fix gvfsd-sftp segfault when asking a question
  - Enable tar+xz in the archive mounter


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-4
changelog:
  - Fix Nautilus not displaying friendly icons for SSH-connected system (#526892)
  - Actually apply the logical partitions patch


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-5
changelog:
  - Don't always overwrite on trash restore
  - Separate "Safely Remove Drive" from "Eject"
  - Don't advertise can_poll for drives not using removable media
  - Disallow mounting empty drives
  - Disallow ejecting empty drives
  - Silently drop eject error messages when detaching drive


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-7
changelog:
  - HTTP: Support g_file_input_stream_query_info()
  - HTTP: Use libsoup header parsing function
  - Set correct MIME type for MTP music players


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-2
changelog:
  - Metadata fixes
  - SMB: Fix free space calculation for older samba servers
  - fuse: Fix setting timestamps


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-4
changelog:
  - Don't leak mount job operation (#552842)
  - Recognize gphoto2 cameras which don't implement get storageinfo (#552856)
  - ObexFTP: Use a private D-Bus connection for obex-data-server (#539347)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.8.0-2
changelog:
  - Fix threadsafety of closing channels
  - Fix d-bus messages leaks
  - Fix /dev symlink checks in gdu volume monitor


author: Ondrej Holy <oholy@redhat.com> - 1.25.2-2
changelog:
  - Move client libs into the own subpackage
  - Move gvfs tools into the own subpackage
  - Move gvfsd-fuse-tmpfiles.conf into fuse subpackage
  - Remove obsoleted expat-devel dependency
  - Remove obsoleted Group tags
  - Fix bogus dates


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-1
changelog:
  - Update to 1.36.2
  - Remove mount-archive.desktop helper
  - Remove obsolete gvfs utils
  - Disable nfs support


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
changelog:
  - switch to 1.3.12.1 branch
  - add patch from upstream with O'Reilly licensing updates.
  - convert ISO-8859-1 doc files to UTF-8


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
changelog:
  - update to 1.3.14.2
  - update make flags that changed with this upstream release
  - added man page installation


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
changelog:
  - update to 1.3.14.6
  - remove gcc 4.3 patch, it has been applied upstream
  - remove MIT license as that code has been removed from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
changelog:
  - update to 1.3.15.6
  - use new build targets from upstream
  - add in recommended build options for x86 from upstream


author: Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
changelog:
  - Update to 1.4.22 (CVE-2012-2942, #824544)
  - Use linux2628 build target
  - No separate x86_64 build target for halog
  - halog build honors rpmbuild optflags
  - Specfile cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Florian Weimer <fweimer@redhat.com> - 1.8.3-5
changelog:
  - Build halog and iprange with linker flags from redhat-rpm-config
  - Tell build to include <crypt.h>


author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15 (#1631815)
  - Resolve CVE-2018-20102 (#1659017)
  - Resolve CVE-2018-20103 (#1659019)


author: Debarshi Ray <rishi@fedoraproject.org> 2.14.1-2
changelog:
  - Always use lua over luajit, just more common
  - Remove no longer needed snippets
  - Add enchant/enchant2 to requires


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Jakub Hrozek <jhrozek@redhat.com> - 2.8.0-2
changelog:
  - Resolves: #rhbz1654223: CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-4
changelog:
  - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
                            Service with large HTTP headers [rhel-8]


author: Sergio Corrreia <scorreia@redhat.com> - 2.8.0-7
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi 
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-4
changelog:
  - load mod_macro by default (#998452)
  - add README to conf.modules.d
  - mod_proxy_http: add possible fix for threading issues (r1534321)
  - core: add fix for truncated output with CGI scripts (r1530793)


author: Joe Orton <jorton@redhat.com> - 2.4.10-2
changelog:
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Joe Orton <jorton@redhat.com> - 2.4.10-6
changelog:
  - mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
  - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-7
changelog:
  - mod_systemd: updated to the latest version
  - use -lsystemd instead of -lsystemd-daemon (#1125084)
  - fix possible crash in SIGINT handling (#958934)


