# changelog

author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for FreeIPA's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
    Fixes bug #1130131


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Bryn M. Reeves <bmr@redhat.com> = 3.1-1
changelog:
  - Update to new upstream release sos-3.1
  - Add collection of grub configuration for UEFI systems
  - Raise a TypeError if add_copy_specs() is called with a string
  - Add tests for Plugin.add_copy_spec()/add_copy_specs()
  - Update Plugin tests to treat copy_paths as a set
  - Use a set for Plugin.copy_paths
  - Remove references to 'sub' parameter from plugin tests
  - Remove 'sub' parameter from Plugin.add_copy_spec*()
  - Drop RedHatPlugin from procenv
  - Update plugin_tests.py to match new method names
  - Remove obsolete checksum reference from utilities_tests.py
  - Refactor Plugin.collect() pathway
  - Fix x86 arch detection in processor plugin
  - Pythonify Plugin._path_in_pathlist()
  - Clean up package checks in processor plugin
  - Replace self.policy().pkg_by_name() us in Logs plugin
  - Convert infiniband to package list
  - Dead code removal: PluginException
  - Dead code removal: sos.plugins.common_prefix()
  - Add vim tags to all python source files
  - Dead code removal: utilities.checksum()
  - Dead code removal: DirTree
  - Dead code removal: sos_relative_path()
  - Remove --profile support
  - Fix plugin_test exception on six.PY2
  - Call rhsm-debug with the --sos switch
  - Do not collect isos in cobbler plugin
  - Match plugins against policies
  - Update policy_tests.py for validate_plugin change
  - Rename validatePlugin to validate_plugin
  - Fix broken binary detection in satellite plugin
  - Clean up get_cmd_path/make_cmd_path/make_cmd_dirs mess
  - Add tuned plugin
  - Update systemd support
  - Fix remaining use of obsolete 'get_cmd_dir()' in plugins
  - Add PowerNV specific debug data
  - powerpc: Move VPD related tool under common code
  - Remove the rhevm plugin.
  - Replace package check with file check in anacron
  - Scrub ldap_default_authtok password in sssd plugin
  - Eliminate hard-coded /var/log/sa paths in sar plugin
  - Remove useless check_enabled() from sar plugin
  - Improve error message when cluster.crm_from is invalid
  - Fix command output substitution exception
  - Add distupgrade plugin
  - Fix gluster volume name extraction
  - Ensure unused fds are closed when calling subprocesses via Popen
  - Pass --no-archive to rhsm-debug script
  - postgresql: allow use TCP socket
  - postgresql: added license and copyright
  - postgresql: add logs about errors / warnings
  - postgresql: minor fixes
  - Include geo-replication status in gluster plugin
  - Make get_cmd_output_now() behaviour match 2.2
  - Add rhsm-debug collection to yum plugin
  - Always treat rhevm vdsmlogs option as string
  - Fix verbose file logging
  - Fix get_option() use in cluster plugin
  - Fix cluster postproc regression
  - Ensure superclass postproc method is called in ldap plugin
  - Remove obsolete diagnostics code from ldap plugin
  - Fix cluster module crm_report support


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-0.1.a
changelog:
  - Make source URL handling compliant with packaging guidelines
  - Update to new upstream pre-release sos-3.2-alpha1


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-2
changelog:
  - [sosreport] ensure private temporary directory is removed
  - [global] sync rawhide package with upstream
  - [ceph] collect /var/lib/ceph and /var/run/ceph
  - [sosreport] prepare report in a private subdirectory (CVE-2015-7529)
  - [docker] collect journald logs for docker unit
  - [sosreport] fix command-line report defaults
  - [openstack_neutron] obfuscate server_auth in restproxy.ini
  - [memory] collect swapon --show output in bytes
  - [sosreport] fix command-line report defaults (proper patch ordering)
  - [sapnw] call self methods properly
  - [openvswitch] capture the logs, db and OVS bridges details
  - [logs] fix reference to missing 'rsyslog_conf' variable
  - [sapnw] Add check if saphostctrl is not present, dont use Set
  - [Plugin] fix handling of symlinks in non-sysroot environments
  - [openstack] Ensure openstack passwords and secrets are obfuscated
  - [plugin] pass stderr through _collect_cmd_output
  - [kubernetes,plugin] Support running sos inside a container
  - [openstack] New Openstack Trove (DBaaS) plugin
  - [services] Add more diagnostics to applications
  - [openstack_neutron] Obscure passwords and secrets
  - [ceph] add calamari and ragos logs and configs
  - [iprconfig] enable plugin for ppc64* architectures
  - [general] verify --profile contains valid plugins only
  - [kernel,mpt,memory] additional kernel-related diagnostics
  - [cluster] enable crm_report password scrubbing
  - [sosreport] fix command-line report defaults
  - [virsh] add new plugin, add listing of qemu
  - [sap*,vhostmd] new plugins for SAP
  - [cluster] crm_report fails to run because dir already exists
  - [foreman] Skip collection of generic resources
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
  - [pcp] collect /etc/pcp.conf
  - [puppet] adding new plugin for puppet
  - [block] Don't use parted human readable output
  - [general] Better handling --name and --ticket-number in
  - [networking] additional ip, firewall and traffic shaping
  - [infiniband] add opensm and infiniband-diags support
  - [plugins/rabbitmq] Added cluster_status command output
  - [networking] re-add 'ip addr' with a root symlink
  - [kimchi] add new plugin
  - [iprconfig] add plugin for IBM Power RAID adapters
  - [ovirt] Collect engine tunables and domain information.
  - [activemq] Honour all_logs and get config on RHEL
  - [cluster] Add luci to packages for standalone luci servers
  - [hpasm] hpasmcli commands hang under timeout
  - [mysql] Collect log file
  - [chrony] add chrony plugin
  - [openstack_sahara] redact secrets from sahara configuration
  - [openstack_sahara] add new openstack_sahara plugin
  - [openstack_neutron] neutron configuration and logs files not captured
  - [ovirt] remove ovirt-engine setup answer file password leak
  - [networking] network plugin fails if NetworkManager is disabled
  - [cluster] crm_report fails to run because dir already exists
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD
  - [mysql] test for boolean values in dbuser and dbpass
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace
  - [mysql] fix handling of mysql.dbpass option
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives
  - [sosreport] fix archive permissions regression
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release
  - [foreman] add new plugin


author: Paul Howarth <paul@city-fan.org> - 0.4.0-1
changelog:
  - Update to 0.4.0
    - New options:
      -C option to change the default reject code
      -S option to specify a path to sendmail (for the -x option)
      -R option to specify the rejection message
      -a option to skip messages that were authenticated
    - IPv6 address support
    - Syntax clean-ups
  - Drop upstreamed syntax, rejection text and IPv6 patches
  - Update authuser patch: note that upstream has introduced a -a option that
    does pretty much the same as the -I option added by this patch, so this
    patch is deprecated and will not be included in builds for Fedora 22 onwards
  - Clean up other patches to apply cleanly


author: Kevin Fenzi <kevin@scrye.com> 3.4.0-13
changelog:
  - Remove last parts of portreserve. Fixes bug #1175798
  - Fix typo in Razor2 plugin. Fixes bug #1208776
  - Disabled the AHBL blacklist thats no longer in service in base rules. Fixes bug #1180338


author: Matthias Saou <http://freshrpms.net/> 1.6.3-1
changelog:
  - Update to 1.6.3.
  - Include init script and sysconfig file to make it easy to manage a single
    instance.


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Jan Stanek <jstanek@redhat.com> - 3.10.2-1
changelog:
  - Updated to version 3.10.2 (http://sqlite.org/releaselog/3_10_2.html)
  - Enabled JSON1 Extension (rhbz#1277387)
  - Made test failure nonfatal on MIPS (rhbz#1294888)


author: Nils Philippsen <nils@redhat.com> - 3.11.0-2
changelog:
  - add obsoletes/conflicts to make updates on multi-lib systems work (#1310441)
  - make -devel package depend on arch-specific -libs (not main) package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in 
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Radovan Sroka <rsroka@redhat.com> 1.8.12-2
changelog:
  - add patch3 sudo.1.8.14b4-passexpire.patch that makes change in documentation about timestamp_time
  - Resolves: rhbz#1162070


author: Radovan Sroka <rsroka@redhat.com> 1.8.14p1-1
changelog:
  - update to 1.8.14p1-1
  - rebase sudo-1.8.14b3-ldapconfpatch.patch -> sudo-1.8.14p1-ldapconfpatch.patch
  - rebase sudo-1.8.14b4-docpassexpire.patch -> sudo-1.8.14p1-docpassexpire.patch


author: Radovan Sroka <rsroka@redhat.com> 1.8.14p3-2
changelog:
  - add patch that resolves initialization problem before sudo_strsplit call
  - add patch that resolves deadcode in visudo.c 
  - add patch that removes extra while in visudo.c and sudoers.c


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - Release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 6.03-2
changelog:
  - Add -static Provides to -devel package to meet Fedora's
    Packaging Static Libraries guidelines (rhbz #609617)


author: Dennis Gilmore <dennis@ausil.us> - 229-2
changelog:
  - revert: fixed kernel-install for copying files for grubby
  Resolves: rhbz#1299019
  - this causes the dtb files to not get installed at all and the fdtdir
  - line in extlinux.conf to not get updated correctly


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 229-5
changelog:
  - Split out systemd-container subpackage (#1163412)
  - Split out system-udev subpackage
  - Add various bugfix patches, incl. a tentative fix for #1308771


author: Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 229-8
changelog:
  - Patches for #1316964, #1317928, #1338823
  - Make localed convert X11 'ru' layout to 'ru' console keymap (#1333998)
  - Don't advertise hibernation if resume= is not specified (#1206936)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-14
changelog:
  - Fixed building with -Werror=format-security
    Resolves: rhbz#1037346
  - Fixed bogus dates in changelog (best effort)
  - Removed rpaths


author: Pavel Raiskup <praiskup@redhat.com> - 1.27.1-3
changelog:
  - document --exclude mistakes (#903666)
  - fix default ACLs propagation (#1082603)
  - infinite loop(s) in sparse-file handling (#1082608)
  - fix listing (and --verify) for big sparse files (#916995)
  - fix eternal loop in -T option (#1083066)
  - don't read/write archive from/to terminal (#1083075)


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-1
changelog:
  - rebase to new upstream tarball, per release notes:
    https://savannah.gnu.org/forum/forum.php?forum_id=8037


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-6
changelog:
  - fix --files-from and -T cooperation (rhbz#1230762)
  - avoid two testsuite false alarms related to --files-from option


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.0-1
changelog:
  - rebase to recent upstream relase (#1094731), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.0/
  - spec cleanup per fedora-review


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.1-1
changelog:
  - rebase to recent upstream release (#1144394), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.1/


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.25b-35
changelog:
  - Add patch to fix RHBZ #887451 / CVE-2012-5640
  - Fix fedora logo issue (RHBZ #1114423).
  - Enable PIE flags (RHBZ #955129)
  - Use systemd for post-rotate script (RHBZ #1218259)


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Coty Sutherland <csutherl@redhat.com> 1:8.0.26-4
changelog:
  - Resolves: rhbz#1286800 Failed to start component due to wrong allowLinking="true" in context.xml
  - Program /bin/nologin does not exist (#1302718)


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-1
changelog:
  - Updated to 8.0.32
  - Remove log4j support. It has never been working actually. See rhbz#1236297
  - Move shipped config to /etc/sysconfig/tomcat. /etc/tomcat/tomcat.conf can now be used to override it with shell expansion, resolves rhbz#1293636
  - Recommend tomcat-native, resolves: rhbz#1243132


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-3
changelog:
  - Load sysconfig from tomcat.conf, resolves: rhbz#1311771, rhbz#1311905
  - Set default javax.sql.DataSource factory to apache commons one, resolves rhbz#1214381


author: Ivan Afonichev <ivan.afonichev@gmail.com> - 1:8.0.32-4
changelog:
  - Revert sysconfig migration changes, resolves: rhbz#1311771, rhbz#1311905
  - Add /etc/tomcat/conf.d/ with shell expansion support, resolves rhbz#1293636


author: Christina Fu <cfu@redhat.com> 7.1.1-1
changelog:
  - Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
    for attribute "clientauth" (cfu)
  - Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 (cfu)
  - Bumped revision to 7.1.1


author: David Brown <david.brown@pnnl.gov> - 4.2.10-3
changelog:
  - Bugfix - #1215207 create/install service files for these
  - Bugfix - #1117263 qmgr aborts in some instances
  - Bugfix - #1144396 Hey! Version Bump!
  - Bugfix - #1215992 more service scripts
  - Bugfix - #1216037 fixed permissions on directories
  - Bugfix - #1149045 hopefully these are all fixed now
  - Bugfix - #965513 calling this one fixed...


author: David Brown <david.brown@pnnl.gov> - 4.2.10-4
changelog:
  - Bugfix - #1227003 test system in cluster environment
  - Bugfix - #1216049 add --enable-cpuset and hwloc
  - Bugfix - #1176080 this maybe a duplicate of #1216037


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Tom Callaway <spot@fedoraproject.org> - 0.8.0-9
changelog:
  - add missing changes from R to be able to use tre in R as system lib (and resolve arm fails)
    Credit to Orion Poplawski.


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-10
changelog:
  - fix build on aarch64 (bug #926655)
  - drop obsolete specfile parts
  - fix deprecated python macro usage


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-13.20140228gitc2f5d13
changelog:
  - update to latest snapshot from github
  - drop patches merged upstream
  - fix broken LDFLAGS in tre.pc (#1224203)


author: Steve Grubb <sgrubb@redhat.com> 0.3.11.2-3
changelog:
  - Fix crash when linking libgnutls and libmysqlclient (#1069079)
  - Don't order tcsd after syslog.target (#1055198)


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Parag Nemade <pnemade AT redhat DOT com> - 3.0.9-41
changelog:
  - Resolves:rh#1080516 - ttmkfdir ftbfs in rawhide due to freetype header move
  - Thanks baude for your patch


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d
    - Egypt will not observe DST in 2015 and will consider canceling it
      permanently.  For now, assume no DST indefinitely.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style.  This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
    not 06-13 and 07-18 as we had guessed.
  - Assume Cayman Islands will observe DST starting next year, using US rules.
    Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15.
      The abbreviation remains "KST".
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last Saturday at 01:00, not March's
      last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile changes from permanent DST to seasonal DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switchefrom +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Peter Robinson <pbrobinson@fedoraproject.org> 2016.05-0.1rc1
changelog:
  - 2016.05 RC1
  - Build aarch64 u-boot for HiKey, DragonBoard, PINE64
  - Build new ARMv7 devices
  - Temp disable some i.MX6 devices as build broken


author: Peter Robinson <pbrobinson@fedoraproject.org> 2016.05-0.2rc3
changelog:
  - 2016.05 RC3
  - Add some useful device READMEs that contain locations of needed firmware blobs etc
  - Enable Jetson TX1
  - i.MX6 still disabled


author: Tomas Hozza <thozza@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5 (#1269137)
  - Removed the anchor update from %post section of -libs subpackage (#1269137#c2)


author: Paul Wouters <pwouters@redhat.com> - 1.5.7-1
changelog:
  - Update to 1.5.7
  - Enable query minimalization for enhanced DNS query privacy
  - Enable nxdomain hardening to assist with query minimalization and SBLs
  - Updated default unbound.conf for new features from upstream.


author: Paul Wouters <pwouters@redhat.com> - 1.5.8-1
changelog:
  - Update to 1.5.8 (rhbz#1313831) which incorporates rhbz#1294339 patch
  - Updated unbound.conf with new upstream options
  - Enabled ip-transparent: yes (see rhbz#1291449)


author: Jan Stanek <jstanek@redhat.com> - 2.3.3-1
changelog:
  - Update to version 2.3.3
  - Removed patches and sources included upstream
  - Recreated so-version-bump.patch


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-19
changelog:
  - Fix CVE-2014-8139 - CRC32 verification heap-based buffer overread 
    (#1174844)
  - Fix CVE-2014-8140 - out-of-bounds write issue in test_compr_eb()
    (#1174851)
  - Fix CVE-2014-8141 - getZip64Data() out-of-bounds read issues
    (#1174856)
  - Fix buffer overflow on long file sizes
    (#1191136)


author: John W. Linville <linville@redhat.com> - 4.4-16
changelog:
  - Replace strcpy/strcat with strncpy/strncat to avoid some buffer overflows
  - Check for backward-pointing directory entries to avoid endless looping
  - Fix _most_ of the compiler warnings


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.1.20130726svn14389
changelog:
  - Update to upstream Subversion snapshot to get bug fixes
  - Apply autoconf patch to handle aarch64
  - Update spec to latest startup script handling, also conditionalize
    RHEL SysV init handle for EPEL to make it easier to handle both


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-24
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Remi Collet <rcollet@redhat.com> - 1.6.2-26
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to PHP extension configuration file


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-1
changelog:
  - Rebased to version 1.2.1
  - Bugfix release
  - Fix connecting to older libvirt versions (Michał Kępień)
  - Fix connecting to VM console with non-IP hostname (Giuseppe Scrivano)
  - Fix addhardware/create wizard errors when a nodedev disappears
  - Fix adding a second cdrom via customize dialog


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-3
changelog:
  - Fix errors with missing nodedevs (bz #1225771)
  - Fix CDROM media change if device is bootable (bz #1229819)
  - Fix adding iscsi pools (bz #1231558)
  - spec: Add LXC to default connection list (bz #1235972)
  - Fix backtrace when reporting OS error (bz #1241902)
  - Raise upper limits for lxc ID namespaces (bz #1244490)
  - Fix 'copy host CPU definition'
  - Fix displaying VM machine type when connecting to old libvirt
  - Fix qemu:///session handling in 'Add Connection' dialog
  - Fix default storage path for qemu:///session, it should be .local/share/...


author: Cole Robinson <crobinso@redhat.com> - 1.3.0-1
changelog:
  - Rebased to version 1.3.0
  - Error when trying to modify existing 9p share (bz #1257565)
  - virt-manager tries to create vmport device on non-x86 backends (bz #1259998)
  - Details/Virtual networks: Allow manually specifying a bridge for
    qemu:///session (bz #1212443)
  - [RFE] Improve Solaris 10 x86-64 support in virt-manager (bz #1262093)
  - No system tray icon in Cinnamon session (bz #1257949)
  - virt-install does not remove orphaned images on failure (bz #1212617)
  - virt-manager does not warn if it cannot find the network (bz #1212616)
  - Storage volume manager looses focus when a volume is deleted (bz #1279861)
  - Storage volume manager does not update free space (bz #1279940)
  - Reboot/Shutdown buttons does not work on aarch64 (bz #1212826)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-3
changelog:
  - Fix screenshot on F24 rawhide (bz #1297988)
  - Fix URL installs when content-length header missing (bz #1297900)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-4.20160520git2204de62d9
changelog:
  - Rebase to latest git
  - Update translations (bz #1323015)
  - Fix rawhide URL installs (bz #1322011)
  - Update viewer to work with spice GL


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Jiri Skala <jskala@redhat.com> - 3.0.2-6
changelog:
  - fixes usage pasv_address option in combination with external IP
  - updated man pages - multile instances using vsftpd.target


author: Jiri Skala <jskala@redhat.com> - 3.0.2-8
changelog:
  - adds reverse lookup option to vsftpd.conf
  - changes types of uid and gid to uint
  - removes spare patch pasv-addr
  - implements DH cipher
  - gets rid init scirpt subpackage


author: Jiri Skala <jskala@redhat.com> - 3.0.2-10
changelog:
  - improves DH cipher
  - implements ECDH cipher
  - adds isolate* options to man vsftpd.conf
  - corrects max_clients, max_per_ip default values in man vsftd.conf
  - adds return code 450 when a file is temporarily unavailable


author: Tomas Hozza <thozza@redhat.com> - 1.17-1
changelog:
  - Updated to 1.17 + added some additional upstream fixes
  - Fixed hardening of wget executable (#1281829)


author: Till Maas <opensource@till.name> - 2.20-10
changelog:
  - Use alias instead of exported function for which to avoid bashism,
  http://unix.stackexchange.com/questions/59360/#59431


author: Remi Collet <remi@fedoraproject.org> - 4.5.2-2
changelog:
  - never bundle ca-bundle.crt (EL-5)
  - provide nginx configuration (fedora)
  - drop mandatory dependency on httpd (suggested) #1336091
  - protect php files in uploads directory


author: Dan Horák <dan[at]danny.cz> - 2.8.12-23
changelog:
  - fix FTBFS (#1308243)
  - skip tests as they depend on cppunit-config which was removed from cppunit-devel


author: Jeremy Newton <alexjnewt AT hotmail DOT com> - 3.0.2-12
changelog:
  - Remove python artifacts in bakefile dir, causes multilib devel conflict RH#1294712
  - Fix package devel not owning created wx3 backfile preset dir
  - Add support for MIPS to wx-config RH#1294895
  - Wayland Patch


author: Scott Talbert <swt@techie.net> - 3.0.2-15
changelog:
  - Add GCC6 patches for STC and strings tests
  - Adapt cppunit to use pkg-config (cppunit-config has been removed in F24)
  - Fixes FTBFS in F24 Rawhide, RH#1308244


author: Scott Talbert <swt@techie.net> - 3.0.2-17
changelog:
  - Add patch to resolve issue with wxStaticText growing, fixes RH#1282142
  - Add patches to resolve issues under Wayland with window sizing, RH#1294229


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-4
changelog:
  - save mimetype defaults to ~/.config/mimeapps.list
    (instead of ~/.local/share/applications/mimeapps.list)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-1
changelog:
  - update to xen-4.6.1
    adjust xen.use.fedora.ipxe.patch
    remove upstream patches
  - don't build with pandoc (documentation) due to dependency issues


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-2
changelog:
  - x86: inconsistent cachability flags on guest mappings [XSA-154,
  	CVE-2016-2270] (#1309324)
  - VMX: guest user mode may crash guest with non-canonical RIP [XSA-170,
  	CVE-2016-2271] (#1309323)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-3
changelog:
  - pandoc should work again
  - Qemu: nvram: OOB r/w access in processing firmware configurations
  	CVE-2016-1714 (#1296080)
  - Qemu: i386: null pointer dereference in vapic_write() CVE-2016-1922
  	(#1292767)
  - qemu: Stack-based buffer overflow in megasas_ctrl_get_info CVE-2015-8613
  	(#1293305)
  - qemu-kvm: Infinite loop and out-of-bounds transfer start in start_xmit()
  	and e1000_receive_iov() CVE-2016-1981 (#1299996)
  - Qemu: usb ehci out-of-bounds read in ehci_process_itd (#1300235)
  - Qemu: usb: ehci null pointer dereference in ehci_caps_write CVE-2016-2198
  	(#1303135)
  - Qemu: net: ne2000: infinite loop in ne2000_receive CVE-2016-2841 (#1304048)
  - Qemu: usb: integer overflow in remote NDIS control message handling
  	CVE-2016-2538 (#1305816)
  - Qemu: usb: null pointer dereference in remote NDIS control message handling
  	CVE-2016-2392 (#1307116)
  - Qemu: usb: multiple eof_timers in ohci module leads to null pointer
  	dereference CVE-2016-2391 (#1308882)
  - Qemu: net: out of bounds read in net_checksum_calculate() CVE-2016-2857
  	(#1309565)
  - Qemu: OOB access in address_space_rw leads to segmentation fault
  	CVE-2015-8817 CVE-2015-8818 (#1313273)
  - Qemu: rng-random: arbitrary stack based allocation leading to corruption
  	CVE-2016-2858 (#1314678)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-4
changelog:
  - fix for build problems on F25
  - broken AMD FPU FIP/FDP/FOP leak workaround [XSA-172, CVE-2016-3158,
  	CVE-2016-3159] (#1321944)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-6
changelog:
  - x86 shadow pagetables: address width overflow [XSA-173, CVE-2016-3960]
  	(#1328118)
  - Qemu: net: buffer overflow in stellaris_enet emulator [CVE-2016-4001]
  	(#1325886)
  - Qemu: net: buffer overflow in MIPSnet emulator [CVE-2016-4002] (#1326084)
  - qemu: Infinite loop vulnerability in usb_ehci using siTD process
  	[CVE-2016-4037] (#1328081) (supercedes CVE-2015-8558 patch)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-7
changelog:
  - qemu-kvm: Integer overflow in SDL when creating too wide screen (#1330513)
  - QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks
  	[XSA-179, CVE-2016-3710, CVE-2016-3712] (#1334346) (#1334343)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-8
changelog:
  - create link to /usr/bin/qemu-system-i386 from /usr/lib/xen/bin
  	for back compatibility and for virt-manager (#1334554) (#1299745)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-9
changelog:
  - xen no longer crashes when built without -fno-tree-coalesce-vars
  - in systemd only try to load kernel modules that are in Fedora (#1291089)
  - x86 software guest page walk PS bit handling flaw
  	[XSA-176, CVE-2016-4480] (#1332657)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.1-10
changelog:
  - cleaner way to set kernel module load list
  - Unrestricted qemu logging [XSA-180, CVE-2014-3672] (#1339125)
  - Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write
  	[CVE-2016-4439] (#1337502)
  - Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd
  	[CVE-2016-4441] (#1337505)
  - Qemu: scsi: megasas: out-of-bounds write while setting controller properties
  	[CVE-2016-5106] (#1339578)
  - Qemu: scsi: megasas: stack information leakage while reading configuration
  	[CVE-2016-5105] (#1339583)


author: Kalev Lember <kalevlember@gmail.com> - 3.1.2-1
changelog:
  - Update to 3.1.2, fixing CVE-2015-0252
  - Tighten -devel deps with the _isa macro
  - Use the license macro for the LICENSE file


author: Paul Wouters <pwouters@redhat.com> - 1.3.6-1
changelog:
  - Updated to 1.3.6 - using github-only monstrosity packaging
  - Resolves: rhbz#1051785 (new upstream version available)
  - Resolves: rhbz#868391 xl2tpd sends response packets from wrong IP address
  - Revert: rhbz#929447 Incorrect "ipparam" manipulation
  - Resolves: rhbz#1055196 Don't order service after syslog.target
  - Resolves: rhbz#984332 xl2tpd tmpfiles configuration file in wrong directory
  - Removed patches merged in upstream.
  - FIPS patch updated with advertising clause for openssl in xl2tpd -V
    (although the GPL code was already basically taken from openssl)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.2-15
changelog:
  - Use %jpackage_script to generate scripts.
  - Add OSGi metadata to manifest instead of discarding everything else in it.
  - Drop dependency on xml-commons-api, add one on java(-headless).
  - Crosslink javadocs with Java's.
  - Include NOTICE* in docs.
  - Update URLs.
  - Specfile cleanups.


author: Simone Caronni <negativo17@gmail.com> - 7.7-12
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Simplify build requirements.
  - Xprint has been removed everywhere.
  - xclipboard 1.1.3
  - xclock 1.0.7
  - xconsole 1.0.6
  - xfd 1.1.2
  - xfontsel 1.0.5
  - xload 1.1.2
  - xwd 1.0.6
  - xwud 1.0.4


author: Simone Caronni <negativo17@gmail.com> - 1:7.5-25
changelog:
  - Restore font-utils provider, required by some packages for building.
   examine all platform=3 encodings (fixes #578460)


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Adam Jackson <ajax@redhat.com> 1.18.2-2
changelog:
  - Fix red tint artifacts in glamor
  - Fix a performance cliff in present triggered by plasma
  - Silence some xf86vidmode log spam


author: Simone Caronni <negativo17@gmail.com> - 1.3.4-3
changelog:
  - Xorg without root rights breaks by streams redirection (#1177513).
  - Format SPEC file; trim changelog.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-6
changelog:
  - Set XORG_RUN_AS_USER_OK when starting X on the current tty, to run X
    to run without root rights when possible


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.0-1
changelog:
  - rebase per upstream release notes (#1023718)
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00216.html
  - fedora-review fixes, documentation/license fixes in spec


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.1-1
changelog:
  - bugfix rebase to 5.2.1, per release notes
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00226.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.2-1
changelog:
  - rebase to stable 5.2.2 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00244.html


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: James Antill <james at fedoraproject.org> - 3.4.3-155
changelog:
  - update to latest HEAD
  - Workaround history searching for [abc] character lists failures. BZ 1096147.
  - yumRepos.py - preserve queryparams in urls
  - Don't traceback in exRepoError() when repo info is not available. BZ 1114183.
  - Make check-update respect --quiet option. BZ 1133979.


author: James Antill <james at fedoraproject.org> - 3.4.3-156
changelog:
  - update to latest HEAD
  - Have "yum check" ignore self conflicts.
  - Add simple testcase for installing older intermediate kernel. BZ 1063181.
  - Don't look for upgrades for install only packages. BZ 1063181.
  - check if repos list is empty after excluding disabled repos. BZ 1109473.
  - Allow caching local repos. BZ 1125387.
  - Expect KB as well as MB in disk requirements message from rpm. BZ 1051931.
  - Multiple lvm fixes. BZ 1047793, BZ 1145485.
  - Change the sqlite synchronous mode for the history file, to NORMAL.
  - Add CAShe config. and objects, use it for MD and packages.
  - Add query_install_excludes conf./docs and use it for list/info/search/prov


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-505
changelog:
  - update to latest HEAD
  - Make sure epoch is a string while checking for running kernel. BZ#1200159
  - Fix rounding issue in required disk space message.
  - Rename yum executable to yum-deprecated.


author: Nick Bebout <nb@fedoraproject.org> - 1.6.0-4
changelog:
  - Add ZNC path to znc.service - bz#1179832
  - Fix command to enable cyrus sasl - bz#1112022
  - Add libicu dep to enable charset module - bz#1202033


