# changelog

author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
          * run_init: clarification of the usage in the
          * semanage: fix usage header around booleans
          * semanage: remove useless empty lines
          * semanage: update man page with new examples
          * semanage: update usage text
          * semanage: introduce file context equivalencies
          * semanage: enable and disable modules
          * semanage: output all local modifications
          * semanage: introduce extraction of local configuration
          * semanage: cleanup error on invalid operation
          * semanage: handle being called with no arguments
          * semanage: return sooner to save CPU time
          * semanage: surround getopt with try/except
          * semanage: use define/raise instead of lots of
          * semanage: some options are only valid for
          * semanage: introduce better deleteall support
          * semanage: do not allow spaces in file
          * semanage: distinguish between builtin and local permissive
          * semanage: centralized ip node handling
          * setfiles: make the restore function exclude() non-static
          * setfiles: use glob to handle ~ and
          * fixfiles: do not hard code types
          * fixfiles: stop trying to be smart about
          * fixfiles: use new kernel seclabel option
          * fixfiles: pipe everything to cat before sending
          * fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
          * semodule: support for alternative root paths

  2.1.3 2011-08-03
          * semanage: fix indention
          * semodule_package: fix man page typo
          * semodule_expand: update man page with -a
          * semanage: handle os errors
          * semanage: fix traceback with bad options
          * semanage: show usage on -h or --help
          * semanage: introduce more deleteall options
          * semanage: verify ports < 65536
          * transaction into semanageRecords
          * make get_handle a method of semanageRecords
          * remove a needless blank line
          * make process_one error if not initialized correctly
          * fixfiles: correct usage for r_opts.rootpath
          * put -p in help for restorecon and
          * fixfiles: do not try to only label
          * fixfiles clean up /var/run and /var/lib/debug
          * fixfiles delete tmp sockets and pipes rather
          * fixfile use find -delete instead of pipe
          * chcat man page typo
          * add man page for genhomedircon
          * setfiles fix typo
          * setsebool should inform users they need to
          * setsebool typos
          * open_init_tty man page typos
          * Don't add user site directory to sys.path
          * newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
          * seunshare: define _GNU_SOURCE earlier
          * make ignore_enoent do something
          * restorecond: first user logged in is not noticed
          * Repo: update .gitignore

  2.1.1 2011-08-01
          * Man page updates
          * restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
          * Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
          * setfiles: Fix process_glob to handle error situations
          * sandbox: Allow seunshare to run as root
          * sandbox: trap sigterm to make sure sandbox
          * sandbox: pass DPI from the desktop
          * sandbox: seunshare: introduce helper spawn_command
          * sandbox: seunshare: introduce new filesystem helpers
          * sandbox: add -C option to not drop
          * sandbox: split seunshare caps dropping
          * sandbox: use dbus-launch
          * sandbox: numerous simple updates to sandbox
          * sandbox: do not require selinux context
          * sandbox: Makefile: new man pages
          * sandbox: rename dir to srcdir
          * sandbox: allow users specify sandbox window size
          * sandbox: check for paths up front
          * sandbox: use defined values for paths rather
          * sandbox: move seunshare globals to the top
          * sandbox: whitespace fix
          * semodule_package: Add semodule_unpackage executable
          * setfiles: get rid of some stupid globals
          * setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
          * refparser: include open among valid permissions
          * refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
          * sepolgen-ifgen: new attr-helper does something
          * audit2allow: use alternate policy file
          * audit2allow: sepolgen-ifgen use the attr helper
          * setfiles: switch from stat to stat64
          * setfiles: Fix potential crash using dereferenced ftsent
          * setfiles: do not wrap * output at 80 characters
          * sandbox: add -Wall and -Werror to makefile
          * sandbox: add sandbox cgroup support
          * sandbox: rewrite /tmp handling
          * sandbox: do not bind mount so much
          * sandbox: add level based kill option
          * sandbox: cntrl-c should kill entire process control group
          * Create a new preserve_tunables flag in sepol_handle_t.
          * semanage: show running and disk setting for booleans
          * semanage: Dont print heading if no items selected
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
          * More files to ignore
          * tree: default make target to all not install
          * sandbox: do not load unused generic init functions
      sepolgen-1.1.2
          * src: sepolgen: add attribute storing infrastructure
          * Change perm-map and add open to try to get better results on
          * look for booleans that might solve problems
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
          * sandbox: Maintain the LANG environment into the sandbox
          * audit2allow: use audit2why internally
          * fixfiles: label /root but not /var/lib/BackupPC
          * semanage: update local boolean settings is dealing with localstore
          * semanage: missing modify=True
          * semanage: set modified correctly
          * restorecond: make restorecond dbuss-able
          * restorecon: Always check return code on asprintf
          * restorecond: make restorecond -u exit when terminal closes
          * sandbox: introduce package name and language stuff
          * semodule_package: remove semodule_unpackage on clean
          * fix sandbox Makefile to support DESTDIR
          * semanage: Add -o description to the semanage man page
          * make use of the new realpath_not_final function
          * setfiles: close /proc/mounts file when finished
          * semodule: Document semodule -p in man page
          * setfiles: fix use before initialized
          * restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
          * Ignore permissive qualifier if found in an interface
          * Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
          * sandbox: move sandbox.conf.5 to just sandbox.5
          * po: Makefile use -p to preserve times to allow multilib simultatious installs
          * of po files
          * sandbox: Allow user to specify the DPI value for X in a sandbox
          * sandbox: make sure the domain launching sandbox has at least 100 categories
          * sandbox: do not try forever to find available category set
          * sandbox: only complain if sandbox unable to launch
          * sandbox: init script run twice is still successful
          * semanage: print local and dristo equiv rules
          * semanage: check file equivalence rules for conflict
          * semanage: Make sure semanage fcontext -l -C prints even if local keys
          * are not defined
          * semanage: change src,dst to target,substitute for equivalency
          * sestatus: Updated sestatus and man pages.
          * Added SELinux config file man page.
          * add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
          * better analysis of why things broke
  - policycoreutils
          * Remove excess whitespace
          * sandbox: Add back in . functions to sandbox.init script
          * Fix Makefile to match other policycoreutils Makefiles
          * semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * sandbox: do not propogate inside mounts outside
          * sandbox: Removing sandbox init script, should no longer be necessary
          * restorecond: Stop using deprecated interfaces for g_io
          * semanage: proper auditting of user changes for LSPP
          * semanage: audit message to show what record(s) and item(s) have chaged
          * scripts: Update Makefiles to handle /usrmove
          * mcstrans: Version should have been bumped on last check in
          * seunshare: Only drop caps not the Bounding Set from seunshare
          * Add bash-completion scripts for setsebool and semanage
          * newrole: Use correct capng calls in newrole
          * Fix infinite loop with inotify on 2.6.31 kernels
          * fix ftbfs with hardening flags
          * Only run setfiles if we found read-write filesystems to run it on
          * update .po files
          * remove empty po files
          * do not fail to install if unable to make load_policy lnk file

     - sepolgen
          * Fix dead links to www.nsa.gov/selinux
          * audit.py Dont crash if empty data is passed to sepolgen
          * do not use md5 when calculating hash signatures
          * fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * restorecond: wrong options should exit with non-zero error code
          * restorecond: Add -h option to get usage command
          * resorecond: user: fix fd leak
          * mcstrans: add -f to run in foreground
          * semanage: fix man page range and level defaults
          * semanage: bash completion for modules should include -a,-m, -d
          * semanage: manpage update for -e
          * semanage: dontaudit off should work
          * semanage: locallist option does not take an argument
          * sepolgen: Make use of setools optional within sepolgen
     - sepolgen
          * Make use of setools optional within sepolgen
          * We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
          * genhomedircon: manual page improvements
          * setfiles/restorecon minor improvements
          * run_init: If open_init_pty is not available then just use exec
          * newrole: do not drop capabilities when newrole is run as
          * restorecon: only update type by default
          * scripts: Don't syslog setfiles changes on a fixfiles restore
          * setfiles: do not syslog if no changes
          * Disable user restorecond by default
          * Make restorecon return 0 when a file has changed context
          * setfiles: Fix process_glob error handling
          * semanage: allow enable/disable under -m
          * add .tx to gitignore
          * translations: commit translations from Fedora community
          * po: silence build process
          * gui: Checking in policy to support polgengui and sepolgen.
          * gui: polgen: search for systemd subpackage when generating policy
          * gui: for exploring booleans
          * gui: system-config-selinux gui
          * Add Makefiles to support new gui code
          * gui: remove lockdown wizard
          * return equivalency records in fcontext customized
          * semanage: option to not load new policy into kernel after
          * sandbox: manpage update to describe standard types
          * setsebool: -N should not reload policy on changes
          * semodule: Add -N qualifier to no reload kernel policy
          * gui: polgen: sort selinux types of user controls
          * gui: polgen: follow symlinks and get the real path to
          * gui: Fix missing error function
          * setfiles: return errors when bad paths are given
          * fixfiles: tell restorecon to ignore missing paths
          * setsebool: error when setting multiple options
          * semanage: use boolean subs.
          * sandbox: Make sure Xephyr never listens on tcp ports
          * sepolgen: return and output constraint violation information
          * semanage: skip comments while reading external configuration files
          * restorecond: relabel all mount runtime files in the restorecond example
          * genhomedircon: dynamically create genhomedircon
          * Allow returning of bastard matches
          * sepolgen: return and output constraint violation information
          * audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
          * setfiles: estimate percent progress
          * load_policy: make link at the destination directory
          * Rebuild polgen.glade with glade-3
          * sepolicy: new command to unite small utilities
          * sepolicy: Update Makefiles and po files
          * sandbox: use sepolicy to look for sandbox_t
          * gui: switch to use sepolicy
          * gui: sepolgen: use sepolicy to generate
          * semanage: use sepolicy for boolean dictionary
          * add po file configuration information
          * po: stop running update-po on all
          * semanage: seobject verify policy types before allowing you to assign them.
          * gui: Start using Popen, instead of os.spawnl
          * sandbox: Copy /var/tmp to /tmp as they are the same inside
          * qualifier to shred content
          * semanage: Fix handling of boolean_sub names when using the -F flag
          * semanage: man: roles instead of role
          * gui: system-config-selinux: Catch no DISPLAY= error
          * setfiles: print error if no default label found
          * semanage: list logins file entries in semanage login -l
          * semanage: good error message is sepolgen python module missing
          * gui: system-config-selinux: do not use lokkit
          * secon: add support for setrans color information in prompt output
          * restorecond: remove /etc/mtab from default list
          * gui: If you are not able to read enforcemode set it to False
          * genhomedircon: regenerate genhomedircon more often
          * restorecond: Add /etc/udpatedb.conf to restorecond.conf
          * genhomedircon generation to allow spec file to pass in SEMODULE_PATH
          * fixfiles: relabel only after specific date
          * po: update translations
          * sandbox: seunshare: do not reassign realloc value
          * seunshare: do checking on setfsuid
          * sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
          * Properly build the swig exception file from Laurent Bigonville.
          * Fix man pages from Laurent Bigonville.
          * Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
          * Fix LDFLAGS usage from Laurent Bigonville.
          * Fix init_policy warning from Laurent Bigonville.
          * Fix semanage logging from Laurent Bigonville.
          * Open newrole stdin as read/write from Sven Vermeulen.
          * Fix sepolicy transition from Sven Vermeulen.
          * Support overriding CFLAGS from Simon Ruderich.
          * Create correct man directory for run_init from Russell Coker.
          * restorecon GLOB_BRACE change from Michal Trunecka.
          * Extend audit2why to report additional constraint information.
          * Catch IOError errors within audit2allow from Dan Walsh.
          * semanage export/import fixes from Dan Walsh.
          * Improve setfiles progress reporting from Dan Walsh.
          * Document setfiles -o option in usage from Dan Walsh.
          * Change setfiles to always return -1 on failure from Dan Walsh.
          * Improve setsebool error r eporting from Dan Walsh.
          * Major overhaul of gui from Dan Walsh.
          * Fix sepolicy handling of non-MLS policy from Dan Walsh.
          * Support returning type aliases from Dan Walsh.
          * Add sepolicy tests from Dan Walsh.
          * Add org.selinux.config.policy from Dan Walsh.
          * Improve range and user input checking by semanage from Dan Walsh.
          * Prevent source or target arguments that end with / for substitutions from Dan Walsh.
          * Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
          * Support deleteall for restoring disabled modules from Dan Walsh.
          * Improve semanage error reporting from Dan Walsh.
          * Only list disabled modules for module locallist from Dan Walsh.
          * Fix logging from Dan Walsh.
          * Define new constants for file type character codes from Dan Walsh.
          * Improve bash completions from Dan Walsh.
          * Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
          * Add semanage tests from Dan Walsh.
          * Split semanage man pages from Dan Walsh.
          * Move bash completion scripts from Dan Walsh.
          * Replace genhomedircon script with a link to semodule from Dan Walsh.
          * Fix fixfiles from Dan Walsh.
          * Add support for systemd service for restorecon from Dan Walsh.
          * Spelling corrections from Dan Walsh.
          * Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
          * Switch sandbox to openbox window manager from Dan Walsh.
          * Coalesce audit2why and audit2allow from Dan Walsh.
          * Change audit2allow to append to output file from Dan Walsh.
          * Update translations from Dan Walsh.
          * Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
          * Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
          * Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
          * Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
          * Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
          * Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
          * Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-8
changelog:
  - Update Translations
  - Make selinux-policy build working also on another architectures related to s
  - Miroslav grepl patch to fix the creation of man pages on different architectures.
  - Add ability to list the actual active modules
  - Fix spelling mistake on sesearch in generate man pages.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-9
changelog:
  - mgrepl [PATCH] Deleteall user customization fails if there is a user used
  - for the default login. We do not want to fail on it and continue to delete
  - customizations for users which are not used for default login.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-10
changelog:
  - Add support for Fedora21 html manpage structure
  - Fix broken dependencies to require only usermode-gtk


author: Miroslav Grepl <mgreplh@redhat.com> - 2.2.5-12
changelog:
  - Add policycoreutils-rhat-revert.patch to revert the last two commits to make build working
  - Add 0001-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages patch


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
          * Add -P semodule option to man page from Dan Walsh.
          * selinux_current_policy_path will return none on a disabled SELinux system from Dan Walsh.
          * Add new icons for sepolicy gui from Dan Walsh.
          * Only return writeable files that are enabled from Dan Walsh.
          * Add domain to short list of domains, when -t and -d from Dan Walsh.
          * Fix up desktop files to match current standards from Dan Walsh.
          * Add support to return sensitivities and categories for python from Dan Walsh.
          * Cleanup whitespace from Dan Walsh.
          * Add message to tell user to install sandbox policy from Dan Walsh.
          * Add systemd unit file for mcstrans from Laurent Bigonville.
          * Improve restorecond systemd unit file from Laurent Bigonville.
          * Minor man pages improvements from Laurent Bigonville.


author: Dan Walsh <dwalsh@redhat.com> - 2.3-3
changelog:
  - Update Miroslav Grepl Patches
    * If there is no executable we don't want to print a part of STANDARD FILE CON
    * Add-manpages-for-typealiased-types
    * Make fixfiles_exclude_dirs working if there is a substituion for the given d


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-7
changelog:
  - Examples are no longer in the main semanage man page (#1084390)
  - Add support for Fedora22 man pages. We need to fix it to not using hardcoding.
  - Print usage for all mutually exclusive options.
  - Fix selinux man page to refer seinfo and sesearch tools.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-11
changelog:
  - Improvements to audit2allow from rhallise@redhat.com
      * Check for mislabeled files.
      * Check for base file use and
      * Suggest writable files as alternatives


author: Dan Walsh <dwalsh@redhat.com> - 2.3-14
changelog:
  - Audit2allow will check for mislabeled files, and tells user to fix the label.
  - Also checks for basefiles and suggests creating a different label.
  - Patch from Ryan Hallisey


author: Petr Lautrbach <plautrba@redhat.com> 2.3-15
changelog:
  - We need to cover file_context.XXX.homedir to have fixfiles with exclude_dirs working correctly
  - Use dnf instead of yum (#1156547)


author: Petr Lautrbach <plautrba@redhat.com> 2.3-16
changelog:
  - Temporary removed Requires:audit-libs-python from policycoreutils-python3 subpackage (#1195139)
  - Simplication of sepolicy-manpage web functionality (#1193552)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-0.6
changelog:
  - policycoreutils: semanage: update to new source policy infrastructure
  - semanage: move permissive module creation to /tmp


author: Petr Lautrbach <plautrba@redhat.com> 2.4-5
changelog:
  - Move python utilities from -python to -python-utilities
  - All scripts originally from policycoreutils-python use python 3 now


author: Petr Lautrbach <plautrba@redhat.com> 2.4-12
changelog:
  - Fix several semanage issue (#1247714)
  - Decode output from subprocess, if error occurred (#1247039)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-18
changelog:
  - Improve sepolicy command line interface
  - Fix sandbox to propagate specified MCS/MLS Security Level. (#1279006)
  - Fix 'audit2allow -R' (#1280418)


author: Petr Lautrbach <plautrba@redhat.com> - 2.4-20
changelog:
  - Fix 'semanage permissive -l' subcommand (#1286325)
  - Several 'sepolicy gui' fixes (#1281309,#1281309,#1282382)


author: Petr Lautrbach <plautrba@redhat.com> 2.5-2
changelog:
  - policycoreutils/sepolicy: selinux_server.py to use GLib instead of gobject
  - policycoreutils-gui requires python-slip-dbus (#1314685)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - sepolgen: Remove additional files when cleaning


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-12
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Update sandbox types in sandbox manual
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 2.5-16
changelog:
  - Remove unused autoconf files from po/
  - Remove duplicate, empty translation files
  - Rebuilt with libsepol-2.5-9, libselinux-2.5-11, libsemanage-2.5-7


author: Petr Lautrbach <plautrba@redhat.com> 2.5-17
changelog:
  - sandbox: Use dbus-run-session instead of dbus-launch when available
  - hll/pp: Change warning for module name not matching filename to match new behavior
  - Remove LDFLAGS from CFLAGS
  - sandbox: create a new session for sandboxed processes
  - sandbox: do not try to setup directories without -X or -M
  - sandbox: do not run xmodmap in a new X session
  - sandbox: Use GObject introspection binding instead of pygtk2
  - sandbox: fix file labels on copied files
  - sandbox: tests - close stdout of p
  - sandbox: tests - use sandbox from cwd
  - audit2allow: tests should use local copy not system
  - audit2allow: fix audit2why import from seobject
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-19
changelog:
  - seobject: Handle python error returns correctly
  - policycoreutils/sepolicy/gui: fix current selinux state radiobutton
  - policycoreutils: semodule_package: do not fail with an empty fc file


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-5
changelog:
  - semanage: Unify argument handling (#1398987)
  - setfiles: set up a logging callback for libselinux
  - setfiles: Fix setfiles progress indicator
  - setfiles: stdout messages don't need program prefix
  - setfiles: don't scramble stdout and stderr together (#1435894)
  - restorecond: Decrease loglevel of termination message (#1264505)
  - fixfiles should handle path arguments more robustly
  - fixfiles: handle unexpected spaces in command
  - fixfiles: remove useless use of cat (#1435894)
  - semanage: Add checks if a module name is passed in (#1420707)
  - semanage: fix export of fcontext socket entries (#1435127)
  - selinux-autorelabel: remove incorrect redirection to /dev/null (#1415674)


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-7
changelog:
  - Make 'sepolicy manpage' and 'sepolicy transition' faster
  - open_init_pty: restore stdin/stdout to blocking upon exit
  - fixfiles: do not dereference link files in tmp
  - fixfiles: use a consistent order for options to restorecon
  - fixfiles: don't ignore `-F` when run in `-C` mode
  - fixfiles: remove bad modes of "relabel" command
  - fixfiles: refactor into the `set -u` dialect
  - fixfiles: if restorecon aborts, we should too
  - fixfiles: usage errors are fatal
  - fixfiles: syntax error
  - fixfiles: remove two unused variables
  - fixfiles: tidy up usage(), manpage synopsis
  - fixfiles: deprecate -l option
  - fixfiles: move logit call outside of redirected function
  - fixfiles: fix logging about R/O filesystems
  - fixfiles: clarify exclude_dirs()
  - fixfiles: remove (broken) redundant code


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-policycoreutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-4
changelog:
  - restorecond: check write() and daemon() results
  - sepolicy: do not fail when file_contexts.local or .subs do not exist
  - sepolicy: remove stray space in section "SEE ALSO"
  - sepolicy: fix misspelling of _ra_content_t suffix
  - gui: port to Python 3 by migrating to PyGI
  - gui: remove the status bar
  - gui: fix parsing of "semodule -lfull" in tab Modules
  - gui: delete overridden definition of usersPage.delete()
  - Enable listing file_contexts.homedirs (#1409813)
  - remove semodule_deps


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - sepolicy: Fix sepolicy manpage
  - semanage: Update Infiniband code to work on python3
  - semanage: Fix export of ibendport entries
  - semanage: Enforce noreload only if it's requested by -N option


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - semanage: make seobject.py backward compatible
  - Own %{pythonX_sitelib}/site-packages/sepolicy directories (#1522942)


author: Miro Hrončok <mhroncok@redhat.com> - 2.7-12
changelog:
  - Rename the python3 subpackage to have prefix, not suffix
  - Use python3 prefixes in requires where possible


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-15
changelog:
  - sepolicy: Fix translated strings with parameters
  - sepolicy: Support non-MLS policy
  - sepolicy: Initialize policy.ports as a dict in generate.py
  - gui/polgengui.py: Use stop_emission_by_name instead of emit_stop_by_name
  - Minor update for bash completion
  - semodule_package: fix semodule_unpackage man page
  - gui/semanagePage: Close "edit" and "add" dialogues when successfull
  - gui/fcontextPage: Set default object class in addDialog\
  - sepolgen: fix typo in PolicyGenerator
  - build: follow standard semantics for DESTDIR and PREFIX


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-19
changelog:
  - selinux-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - selinux-autorelabel: synchronize cached writes before reboot (#1385272)


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-4
changelog:
  - selinux-autorelabel: Use plymouth --quit rather then --hide-splash (#1592221)
  - selinux-autorelabel: Increment boot_indeterminate grub environment variable (#1592221)
  - Do not require libcgroup - it's not used anymore


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-7
changelog:
  - setfiles: Improve description of -d switch
  - Fix typo in newrole.1 manpage
  - semanage: Stop rejecting aliases in semanage commands
  - sepolicy: Stop rejecting aliases in sepolicy commands
  - sepolicy: Fix "info" to search aliases as well
  - sepolgen: fix refpolicy parsing of "permissive"
  - sepolgen: return NotImplemented instead of raising it
  - semanage: fix Python syntax of catching several exceptions
  - semanage: Replace bare except with specific one
  - semanage: Fix logger class definition
  - semanage: Stop logging loginRecords changes
  - add xperms support to audit2allow
  - sepolgen: fix access vector initialization
  - sepolgen: print all AV rules correctly


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-15
changelog:
  - chcat: use check_call instead of getstatusoutput
  - semanage: Use standard argparse.error() method
  - semanage: Fix handling of -a/-e/-d/-r options


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-16.1
changelog:
  - semanage: move valid_types initialisations to class constructors
  - semanage: import sepolicy only when it's needed
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: Start exporting "ibendport" and "ibpkey" entries


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-4
changelog:
  - semanage: Do not use default s0 range in "semanage login -a" (#1554360)
  - gui: Fix remove module in system-config-selinux (#1748763)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-5
changelog:
  - fixfiles: Fix "verify" option (#1647532)
  - semanage: Improve handling of "permissive" statements (#1417455)
  - semanage: fix moduleRecords.customized()
  - semanage: Add support for DCCP and SCTP protocols (#1563742)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-10
changelog:
  - python/semanage: Sort imports in alphabetical order
  - python/semanage: empty stdout before exiting on BrokenPipeError (#1822100)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-26
changelog:
  - python/semanage: Allow modifying records on "add" (RHEL-28167)
  - python/semanage: Do not sort local fcontext definitions (RHEL-24461)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Fix crashes in FoFiType1C
  - Rebuild for inclusion of poppler-glib-doc in CRB
  - Resolves: RHEL-4255, RHEL-4273


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-8
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1649438


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Marek Kasik <mkasik@redhat.com> - 20.11.0-12
changelog:
  - Fix crash in broken documents when using -dests
  - Fix versions in changelog
  - Resolves: RHEL-44330


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.4.8-4
changelog:
  - specfile cleanup according to Fedora Packaging Guidelines
  - ghostscript parts removed from specfile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.8-5
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#1787010
  - Fix building in ZUUL CI
    Resolves: rhbz#2196577


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Dominik Rehák <drehak@redhat.com> - 10.23-2
changelog:
  - Backport fixes for CVE-2023-2454 and CVE-2023-2455
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207931


author: Filip Januš <fjanus@redhat.com> - 12.11-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 12.11
  - Release notes: https://www.postgresql.org/docs/release/12.11/


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.0-1
changelog:
  - update to 9.3 major version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.1-1
changelog:
  - update to 9.3.1 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-1.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.2-1
changelog:
  - update to 9.3.2 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.2-4
changelog:
  - postgresql-setup(upgrade): don't stop old server when it can not be started
  - postgresql-setup(initdb, upgrade): add $PGSETUP_INITDB_OPTIONS
  - postgresql-setup: do not pretend 'sh' compatibility
  - move script generation to proper place
  - postgresql-setup: document a little and genrate manual page


author: Jozef Mlich <jmlich@redhat.com> - 9.3.3-1
changelog:
  - update to 9.3.3 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.4-1
changelog:
  - update to 9.3.4 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.4-8
changelog:
  - provide postgresql-doc for postgresql-docs package (#1086420)
  - move html documentation to *-docs subpackage (#1086420)
  - provide postgresql-server(:MODULE_COMPAT_%{postgresql_major}) to guard
    against incompatible plugin installation (#1008939)


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-4
changelog:
  - make the %check phase more verbose for FAIL cases
  - don't FTBFS on f23+ where hardening is on by default


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.5-2
changelog:
  - devel package should not require the main package (rhbz#1272219)
  - multilib fix, more general solution (rhbz#1190346)


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.0-1
changelog:
  - update to 9.5.0 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5.html
  - update postgresql-setup to v4.0 to reflect new packaging style


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.1-1
changelog:
  - update to 9.6.1 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-1.html
  - add gen_sources.sh script
  - remove plpython build hack, fixed upstream
  - remove aarch64 and ppc64p7 hacks, fixed by the %configure call


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.2-1
changelog:
  - update to 9.6.2 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-2.html
  - remove mistakenly isntalled libpgfeutils.a


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-1
changelog:
  - update to 9.6.3 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-3.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Jozef Mlich <jmlich@redhat.com> - 10.0-2
changelog:
  - support for upgrade with extenstions
    i.e the postgresql-upgrade-devel subpackage was added (rhbz#1475177)


author: Pavel Raiskup <praiskup@redhat.com> - 10.0-3
changelog:
  - confess that we bundle setup scripts and previous version of ourseleves
  - provide %postgresql_upgrade_prefix macro


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-3
changelog:
  - unify %configure options for python2/python3 configure
  - drop --with-krb5 option, not supported since PostgreSQL 9.4
  - python packaging - requires/provides s/python/python2/


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-4
changelog:
  - configure with --with-systemd (rhbz#1414314)
  - disable startup timeout of PostgreSQL service (rhbz#1525477)


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-2
changelog:
  - define %precise_version helper macro
  - drop explicit libpq.so provide from *-libs
  - update postgresql-setup tarball
  - add postgresql-test-rpm-macros package


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-3
changelog:
  - upgrade: package plperl.so and pltcl.so
  - upgrade: package contrib modules
  - upgrade: drop dynamic libraries


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-5
changelog:
  - re-enable -O3 for 64bit PPC boxes
  - explicitly set PYTHON=python2, /bin/python doesn't exist fc29+


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-6
changelog:
  - drop ppc64 patch, gcc is already fixed (rhbz#1544349)
  - move pg_config*.mo files into devel subpackage


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-8
changelog:
  - new postgresql-setup, the %postgresql_tests* macros now start
    the build-time server on random port number


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-3
changelog:
  - devel subpackage provides postgresql-server-devel and libecpg-devel
    (first step for rhbz#1618698)


author: Pavel Raiskup <praiskup@redhat.com> - 11.0-1
changelog:
  - new upstream release, per release notes:
    https://www.postgresql.org/docs/11/static/release-11.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.11-2
changelog:
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207933


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417
  - Resolves: RHEL-16085 RHEL-16123


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418
  - Resolves: RHEL-16088 RHEL-16135 RHEL-16137


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0500-1
changelog:
  - update to new upstream release, per:
    https://www.postgresql.org/message-id/20170905143318.95448B4C411@winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.00.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171013143455.9D0E5B4C412%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.01.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171227144219.0ABC4B4C417%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.02.0000-1
changelog:
  - build against libpq-devel and postgresql-test-rpm-macros
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180330143925.88CEDB40E51%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update: new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-7
changelog:
  - Added support for Intel GLK platforms (by intel-glk-support patch)
  - Added support for Intel CNL-U/Y platforms (by intel-cnluy-support patch)
  - Fixed problem with some C-states overwriting others
    (by cstates-rewrite-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-8
changelog:
  - Use intel_cpu only if APERF MSR is supported, it fixes powertop on KVM
    (by intel-cpu-check-aperf patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11-1
changelog:
  - New version
    Resolves: rhbz#1716721
  - Changed source to github and bootstraps sources
  - Dropped cstates-rewrite-fix, intel-glk-support, intel-cnluy-support,
    intel-cpu-check-aperf patches (all upstreamed)
  - Added bash completion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Severin Gehwolf <sgehwolf@redhat.com> - 0.12.0-7
changelog:
  - Add JDK binding sub-packages so that the package
    can be used with either JDK 11 or JDK 17.
  - Add requirement on base package for the JDK binding packages.


author: Wim Taymans <wtaymans@redhat.com> - 11.1-23
changelog:
  - Add xauthority parameter to X11 modules
  - Fix compilation against newer alsa-lib
  - Resolves: rhbz#1723065


author: Wim Taymans <wtaymans@redhat.com> - 14.0-1
changelog:
  - Update to 14.0
  - Add pulseaudio-daemon' Provides + Conflicts to support
    swapping with PipeWire
  - Resolves: rhbz#1906322


author: Brian C. Lane <bcl@redhat.com> - 3.16.8-1
changelog:
  - Updated upstream urls in pykickstart.spec (bcl)
  - docs/versionremoved: fix sphinx import path (lars)
  - Add support for the ZIPL Secure Boot for RHEL8 (#1753312) (vponcova)
    Resolves: rhbz#1753312


author: Brian C. Lane <bcl@redhat.com> - 3.16.9-1
changelog:
  - Update versionremoved sphinx extension (bcl)
    Related: rhbz#1776378
  - Add the rhsm command (mkolman)
    Resolves: rhbz#1776378
    Related: rhbz#1748281


author: Brian C. Lane <bcl@redhat.com> - 3.16.10-1
changelog:
  - New translations
    Resolves: rhbz#1754980
  - Update zanata client package name (bcl)
  - Update pykickstart.pot (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.16.11-1
changelog:
  - tests: pin coverage at the 4.x.x series (bcl)
    Related: rhbz#1790574
  - Switch to using Weblate for translations (bcl)
    Resolves: rhbz#1790574
  - po: Remove pykickstart.pot (bcl)
    Related: rhbz#1790574


author: Brian C. Lane <bcl@redhat.com> - 3.16.12-1
changelog:
  - docs: Use python3 from environment so that tox installed modules are found (bcl)
    Related: rhbz#1916487
  - tests: Name zipl test RHEL8_TestCase (bcl)
    Related: rhbz#1916487
  - Makefile: Use unittest instead of nose (bcl)
    Related: rhbz#1916487
  - pylint: Fix warnings and errors from pylint 2.5.x (bcl)
    Related: rhbz#1916487
  - tests: Ignore W0707 raise-missing-from warnings (bcl)
    Related: rhbz#1916487
  - setup.py: Fix script installation without filename extension (bcl)
    Related: rhbz#1916487
  - move dependencies into setup.py and use setuptools (carlos)
    Related: rhbz#1916487
  - Switch to using GitHub Actions instead of Travis CI (bcl)
    Resolves: rhbz#1916487
  - Add support for running via tox (bcl)
    Related: rhbz#1916487


author: Brian C. Lane <bcl@redhat.com> - 3.16.16-1
changelog:
  - Makefile: Add use of git signingkey (bcl)
    Related: rhbz#2189480
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2189480


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.7-27
changelog:
  - Remove nosetest-3 executable/manpage. This will be provided by python3 module.
  - Resolves: rhbz#1615727


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-0.2.gitd0a45fe
changelog:
  - revert update to 1.6.0 due to new python3-pbr dependency which
    is not in RHEL
  - Related: RHELPLAN-25139


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Randy Barlow <rbarlow@redhat.com> - 3.2-1
changelog:
  - Update to 3.2.
  - Rename the python- subpackages with a python2- prefix.
  - Add a -doc subpackage with built html docs.
  - Skip a few new tests that use MongoDB.
  - Reorganize the spec file a bit.
  - Use the license macro.
  - Pull source from GitHub.


author: Randy Barlow <rbarlow@redhat.com> - 3.2.1-1
changelog:
  - Remove use of needless defattr macros (#1303426).
  - Update to 3.2.1 (#1304137).
  - Remove lots of if statements as this spec file will only be used on Rawhide.
  - Remove dependency on python-backports-ssl_match_hostname as it is not needed in Fedora.
  - Rework the patch for CVE-2013-7440 and CVE-2013-2099 so that it exclusively uses code from Python.


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.3.0-1
changelog:
  - Update to 3.3.0 (#1356334).
  - Remove the exclude arch on big endian systems, since 3.3.0 now supports them.
  - Use the newer Python build macros.
  - Add a skip test on another test that requires a running mongod.
  - Convert the -doc subpackage into a noarch, as it should be.
  - python2-pymongo-gridfs now requires python2-pymongo(isa) instead of python-pymongo(isa).
  - Build the docs in parallel.


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.4.0-1
changelog:
  - Update to 3.4.0 (#1400227).
  - Use new install macros.
  - Drop unneeded BuildRequires on python-nose.
  - pymongo now requires bson by arch as it should.


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Miro Hrončok <mhroncok@redhat.com> - 3-37
changelog:
  - Workaround leaking buildroot PATH in 
  python_binary="%1"
  buildroot_path="%2"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0
  - Resolves: rhbz#1644455


author: Charalampos Stratakis <cstratak@redhat.com> - 3-44
changelog:
  - Backport the %python_wheel_pkg_prefix and the %python_wheel_dir macros from Fedora
  Resolves: rhbz#2143991


author: Miro Hrončok <mhroncok@redhat.com> - 15.1.0-19
changelog:
  - Use wheels from RPM packages (rhbz#1659550) (rhbz#1659551)
  - Fail with a warning on Python versions < 2.7


author: Miro HronÄok <mhroncok@redhat.com> - 15.1.0-22
changelog:
  - Add a custom error message when users attempt to create Python 3.11+ virtual environments
  - Resolves: rhbz#2165702


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.6-1
changelog:
  - allow script creation without setuptools
  - fix problem with --relocate when bin/ has subdirs (fixes #12)
  - Allow more flexible .pth file fixup
  - make nt a required module, along with posix. it may not be a builtin module on jython
  - don't mess with PEP 302-supplied __file__, from CPython, and merge in a small startup optimization for Jython, from Jython


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.8-1
changelog:
  - update pip to 0.7
  - move regen-docs into bin/
  - Fix #31, make activate_this.py work on Windows (use Lib/site-packages)
  unset PYTHONHOME envioronment variable -- first step towards fixing the PYTHONHOME issue; see e.g. https://bugs.launchpad.net/virtualenv/+bug/290844
  - unset PYTHONHOME in the (Unix) activate script (and reset it in deactivate())
  - use the activate.sh in virtualenv.py via running bin/rebuild-script.py
  - add warning message if PYTHONHOME is set


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.5.1-1
changelog:
  - Added _weakrefset requirement for Python 2.7.1.
  - Add support for PyPy.
  - Uses a proper temporary dir when installing environment requirements.
  - Add --prompt option to be able to override the default prompt prefix.
  - Add fish and csh activate scripts.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves: rhbz#2144072


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Tomas Orsava <torsava@redhat.com> - 0.8.0-5
changelog:
  - Hardcode requires on python36-devel for the python36 module. This will have
    to be modified when python37 is added.


author: Tomas Orsava <torsava@redhat.com> - 1.0-16
changelog:
  - Update python macros to python2 versioned macros
  - Issue found when rebuilding the python27 module to include CVE fixes
  - Related: rhbz#1883890 rhbz#1883258


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.7.14-2
changelog:
  - Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-2
changelog:
  - Modify for building on RHEL8
  - Disable the tests, because the linkchecker package isn't available in RHEL8
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Modify for prebuilding and deploying on RHEL8
  - Rename the info page to python2
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 0.14-11
changelog:
  - Remove python2 executables - they are functionally identical to the python3
    executables, so we're only going to ship them in the python3 subpackage
  - Resolves: rhbz#1656477


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-9
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-15
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  Resolves: rhbz#1659551


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1870184


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Matěj Cepl <mcepl@redhat.com> - 2017.2-6
changelog:
  - remove test_tzinfo.PicklingTest.testRoundtrip which fails with our
    system-wide timezone database (#1497572)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 3-30
changelog:
  - Explicitly enable Python 2 when invoking Python 2 macros
    See: https://url.corp.redhat.com/rhel8-py2


author: Tomas Orsava <torsava@redhat.com> - 3-31
changelog:
  - Remove RHEL_ALLOW_PYTHON2_FOR_BUILD=1 from build and install macros,
    as that is where the user needs to set it themself


author: Tomas Orsava <torsava@redhat.com> - 3-32
changelog:
  - Merging: (Tue Jul 10 2018 Tomas Orsava <torsava@redhat.com> - 3-32)
    - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
      mistakenly ran py3_byte_compile
  - Merging: (Tue Jul 03 2018 Miro Hrončok <mhroncok@redhat.com> - 3-31)
    - Add %python3_platform useful for PYTHONPATH on arched builds
  - Merging: (Mon Jun 18 2018 Jason L Tibbitts III <tibbs@math.uh.edu> - 3-30)
    - Add %pypi_source macro, as well as %__pypi_url and
      %_pypi_default_extension.
  - Merging: (Wed Apr 18 2018 Miro Hrončok <mhroncok@redhat.com> - 3-29)
    - move macros.pybytecompile from python3-devel


author: Tomas Orsava <torsava@redhat.com> - 3-33
changelog:
  - macros.pybytecompile: Detect Python version through sys.version_info instead
    of guessing from the executable name


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1706765 rhbz#1706762


author: Tomas Orsava <torsava@redhat.com> - 1.9.3-5
changelog:
  - Dropped test dependency on python3-pexpect since the tests weren't being
    run, and python3-pexpect is being dropped from RHEL8 as part of component
    trimming. If tests are needed in the future, they can be run by QE.


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1-26
changelog:
  - Python 2 binary package renamed to python2-cpio
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vendula Poncova <vponcova@redhat.com> - 0.2-1
changelog:
  - Unwrap DBus values (vponcova)
  - Unwrap a variant data type (vponcova)
  - Add a default DBus error (vponcova)
  - Use the minimal image in Travis CI (vponcova)
  - Remove GLibErrorHandler (vponcova)
  - Remove map_error and map_by_default (vponcova)
  - Extend arguments of dbus_error (vponcova)
  - Extend arguments of dbus_interface (vponcova)
  - The list of callbacks in signals can be changed during emitting (vponcova)
  - Don't import from mock (vponcova)
  - Enable checks in Travis CI (vponcova)
  - Fix too long lines (vponcova)
  - Don't use wildcard imports (vponcova)
  - Add the check target to the Makefile (vponcova)
  - Enable Travis CI (vponcova)
  - Catch logged warnings in the unit tests (vponcova)
  - Add the coverage target to the Makefile (vponcova)
  - Rename tests (vponcova)
  - Create Makefile (vponcova)
  - Create a .spec file (vponcova)
  - Add requirements to the README file (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 0.3-1
changelog:
  - Remove generate_dictionary_from_data (vponcova)
  - Improve some of the error messages (vponcova)
  - Check the list of DBus structures to convert (vponcova)
  - Add the Inspiration section to README (vponcova)
  - Enable syntax highlighting in README (vponcova)
  - Use the class EventLoop in README (vponcova)
  - Use the --no-merges option (vponcova)
  - Clean up the Makefile (vponcova)
  - Add examples (vponcova)
  - Add the representation of the event loop (vponcova)
  - Enable copr builds and add packit config (dhodovsk)
  - Extend README (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Nicola Sella <nsella@redhat.com> - 4.0.21-17
changelog:
  - offline-upgrade: add support for security filters (RhBug:1939975,2139324)
  - Move system-upgrade plugin to core (RhBug:2054235)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-20
changelog:
  - versionlock: Use only the most specific NEVRA (RhBug:1961217)
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-21
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444)


author: Brian C. Lane <bcl@redhat.com> - 0.12.2-4
changelog:
  - Add upstream changes from 0.12.4
    Resolves: rhbz#1585318
  - Add TestJSON to the gating test from upstream
    Related: rhbz#1585318


author: Dan Callaghan <dcallagh@redhat.com> - 1.0.2-1
changelog:
  - bug fix release 1.0.2:
    https://github.com/gevent/gevent/blob/v1.0.2/changelog.rst#release-102-may-23-2015


author: Brian C. Lane <bcl@redhat.com> - 1.2.2-5
changelog:
  - Avoid printing TypeError traceback
  - gevent.pywsgi: Much improved handling of chunk trailers
    Backport fix for CVE-2023-41419
    Resolves: RHEL-17078


author: Ray Strode <rstrode@redhat.com> - 3.28.3-2
changelog:
  - Add lock to avoid two type object wrappers getting generated at
    the same time in multi-threaded programs.
    Resolves: #1844578


author: Kevin Fenzi <kevin@scrye.com> - 1:0.999999999-1
changelog:
  - Update to 0.999999999. Fixes bug #1431378 and #1305828
  - Security fix for CVE-2016-9909, CVE-2016-9910. Fixes bug #1402706 and #1402707


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.1-9
changelog:
  - Python 2 binary package renamed to python2-humanize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Suchý <msuchy@redhat.com> 1.10.1-1
changelog:
  - create python3-hwdata subpackage
  - Bumping package versions for 1.9
  - %defattr is not needed since rpm 4.4


author: Miroslav Suchý <miroslav@suchy.cz> 2.3.4-1
changelog:
  - run pylint in %check
  - require hwdata in python 3 package too (jdobes@redhat.com)
  - implement PNP interface
  - errors in usb.ids should not be fatal
  - change upstream url in setup.py


author: Miroslav Suchý <msuchy@redhat.com> 2.3.5-1
changelog:
  - create python2-hwdata subpackage
  - use dnf instead of yum in README
  - remove rhel5 compatibilities from spec


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.5-1
changelog:
  - Update to upstream version 2.5.
  - Create python3 subpackage.
  - Minor specfile fixes.
  - Add examples directory.
  - Thanks to Gareth Armstrong for additional hints.


author: David Malcolm <dmalcolm@redhat.com> - 2.5-3
changelog:
  - support disabling documentation in the build to break a circular build-time
  dependency with python-sphinx; disable docs for now


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.5.5-3
changelog:
  - Re-enable html doc generation.
  - Remove conditional for F-12 and below.
  - Do not silently fail the testsuite for with py3k.


author: Orion Poplawski <orion@cora.nwra.com> - 2.5.1-3
changelog:
  - Enable python3 builds for EPEL (bug #1395653)
  - Ship python2-jsonschema
  - Modernize spec
  - Use %license


author: Petr Viktorin <pviktori@redhat.com> - 2.6.0-4
changelog:
  - Drop the Python2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1584189
  - Use sys.executable rather than unversioned "python" in tests


author: Patrick Uiterwijk <puiterwijk@redhat.com> - 0.2.0-3
changelog:
  - Fix F21 build error by adding buildrequire python-setuptools
  - Move files into python3-jwcrypto subpackage
  - Run test suite
  - Do not install test suite
  - Fix summary and description of python3-jwcrypto


author: Rafael Jeffman <rjeffman@redhat.com> - 0.5.0-2
changelog:
  - Address potential DoS with high compression ratio
    Resolves: RHEL-28697
  - Limit number of iterations for PBES
    Resolves: RHEL-23036 RHEL-23037


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.2-5
changelog:
  - Rebuild for Python 3.6
  - BR /usr/bin/tox instead of python-tox
  - Use %{python3_version_nodots} instead of hardcoded 35


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-10
changelog:
  - Resolves: RHEL-69822 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-8.10.z]
  - Resolves: RHEL-71215 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-11
changelog:
  - Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-12
changelog:
  - Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
  - Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
  - Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
  - Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
  - Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
  - Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
  - Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Karel Zak <kzak@redhat.com> 2.32.1-46
changelog:
  - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
  - fix RHEL-18451 - logger: initialize socket credentials control union
  - fix RHEL-16070 - util-linux: issues in libblkid
  - fix RHEL-6274 - lslogins incorrect account expiration field


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-9
changelog:
  - Make python-beaker an optional dependency
  - Add missing python_provide for python3-mako
  - Conditionalize the Python 2 subpackage
  - Modernize the specfile


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-11
changelog:
  - Add back the Python 2 subpackage (temporarily, for mesa build)
    https://bugzilla.redhat.com/show_bug.cgi?id=1569193


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-13
changelog:
  - Disable the Python 2 subpackage again
    https://bugzilla.redhat.com/show_bug.cgi?id=1590397
  - Fix the Python2 workaround


author: Martin Kolman <mkolman@redhat.com> - 0.42-1
changelog:
  - Add tests and ChangeLog to MANIFEST.in (vtrefny)
  - Fix clicking on buttons on error pop-up doesn't work (#1250942) (vtrefny)
  - Add Makefile to MANIFEST.in (vtrefny)
  - Add archive target to Makefile (vtrefny)
  - Add .gitignore (vtrefny)


author: Martin Kolman <mkolman@redhat.com> - 0.44-1
changelog:
  - Some rpmlint fixes (mkolman)
  - Remove the removal of the eintr checker, which has been removed (dshea)


author: Martin Kolman <mkolman@redhat.com> - 0.47-1
changelog:
  - Make sure gettext returns strings not bytes (mkolman)
  - Spec: Move TUI back to main package (awilliam)


author: Martin Kolman <mkolman@redhat.com> - 0.47.2-1
changelog:
  - Require the Python interpreter directly instead of using the package name (torsava)
    Related: rhbz#1619153


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.19-4
changelog:
  - Python 2 binary package renamed to python2-netaddr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-8
changelog:
  - Python 2 binary package renamed to python2-ordered-set
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.1-9
changelog:
  - Python 2 binary package renamed to python2-pluggy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lokesh Mandvekar <lsm5@redhat.com> - 4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2110


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-12
changelog:
  - Python 2 binary package renamed to python2-prettytable
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7-3
changelog:
  - Python 2 binary package renamed to python2-productmd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lubomír Sedlář <lsedlar@redhat.com> 1.8-1
changelog:
  - Report better error on parsing invalid JSON (#95) (lubomir.sedlar@gmail.com)
  - Python 2 binary package renamed to python2-productmd (zbyszek@in.waw.pl)
  - Sync spec file with Fedora (#94) (lubomir.sedlar@gmail.com)


author: Lubomír Sedlář <lsedlar@redhat.com> 1.9-1
changelog:
  - add updates-testing as a valid compose type (#96)
    (dgilmore@fedoraproject.org)
  - Update tito configuration (lsedlar@redhat.com)


author: Lubomír Sedlář <lsedlar@redhat.com> 1.10-1
changelog:
  - Drop Fedora 25 build (lsedlar@redhat.com)
  - Drop RHEL compatibility from spec (lsedlar@redhat.com)
  - Use more relaxed release type checks (lholecek@redhat.com)
  - Fix parse release id with dash in type (lsedlar@redhat.com)
  - Add tests for parse_release_id() (lholecek@redhat.com)
  - Update dependencies to include Python version (#97)


author: Charalampos Stratakis <cstratak@redhat.com> - 5.4.3-11
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Rob Crittenden <rcritten@redhat.com> - 0.3.4-1
changelog:
  - Update to upstream release 0.3.4 (#1485669)
  - Update modules to 0.1.2
  - Patch to fixed crash at SequenceOf native decoder


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.25.3-3
changelog:
  - Python 2 binary package renamed to python2-pyatspi
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Martin Kolman <mkolman@redhat.com> - 0.6.0-3
changelog:
  - add patch for DTD fix
  - add patch with support for asynchronous calls (vponcova)
  - add patch with support for transformation between D-Bus errors and exceptions (vponcova)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.1.1-5
changelog:
  - Python 2 binary package renamed to python2-pyserial
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-3
changelog:
  - Use python3-sphinx to build the documentation
  - Skip the `non_ascii_paste_text` test, which needs internet access


author: Tomas Orsava <torsava@redhat.com> - 0.1.14-5.git7dea353
changelog:
  - Conditionalize the Python 2 subpackage
  - Don't build the Python 2 subpackage on EL > 7 and Fedora > 28


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2017.2-3
changelog:
  - Python 2 binary package renamed to python2-pytz
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.0-6
changelog:
  - Python 2 binary package renamed to python2-pyusb
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.1-8
changelog:
  - Python 2 binary package renamed to python2-qrcode
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 5.1-12
changelog:
  - Require platform-python-setuptools instead of python3-setuptools
  - Resolves: rhbz#1654457, rhbz#1654458


author: Michel Salim <salimma@fedoraproject.org> - 2.4.1-2
changelog:
  - Clean up spec, removing unnecessary declarations
  - Rename tool in %{_bindir} to the less ambiguous qrcode


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-9
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7010


author: Tomas Orsava <torsava@redhat.com> - 5-5
changelog:
  - Create major-version provides only on major Python versions (2.7, 3.6)
  - Fix an extra parenthesis in python.attr
  - Resolves: rhbz#1776941


author: Charalampos Stratakis <cstratak@redhat.com> - 5-8
changelog:
  - Fix the pythondeps.sh and pythondistdeps.py scripts for multiple digits python versions
  - Resolves: rhbz#2143990


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.5-2
changelog:
  - Subpackage python2-rpmfluff has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jan Hutar <jhutar@redhat.com> - 0.5.6-1
changelog:
  - dshea: Add a add_manpage function
  - dshea: Sanitize the base directory name
  - dshea: Support subpackage scriptlets
  - dshea: Allow file directives to be added to symlinks
  - dshea: Use valid images for the test PNG and GIF data


author: Jan Hutar <jhutar@redhat.com> - 0.5.7-1
changelog:
  - Remove python 2 subpackage
  - ksrot: RPM now returns all string data as surrogate-escaped utf-8 strings
  - bcl: Tests fixes
  - bcl: pylint warnings
  - Better version of the check as advised by pmatilai


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Tomas Popela <tpopela@redhat.com> - 0.35.9
changelog:
  - Bump the release so we can resurrect the python3 subpackages that we need for
    newer Inkscape
  - Related: rhbz#1891732


author: Jiri Konecny <jkonecny@redhat.com> - 0.8-1
changelog:
  - Test clean-up (jkonecny)
  - Move and rename force_quit loop (jkonecny)
  - Add dump screen stack method (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.0-1
changelog:
  - Fix docs based on the new PROCESSED feature (jkonecny)
  - Use new PROCESS_AND* in examples (jkonecny)
  - Add tests for PROCESSED_AND_{CLOSE|REDRAW} (jkonecny)
  - Use new PROCESSED_AND_{CLOSE|REDRAW} in advanced widgets (jkonecny)
  - Support PROCESSED_AND_CLOSE UserInputState (jkonecny)
  - Rename UserInputResult to UserInputAction (jkonecny)
  - Support PROCESSED_AND_REDRAW (jkonecny)
  - Fix link to the documentation in README (jkonecny)
  - Add link to the documentation (jkonecny)
  - Write documentation for Simpleline (jkonecny)
  - Disable pylint error for doc copyright variable (jkonecny)
  - Add new example used in the documentation (jkonecny)
  - Mock modules for readthedocs (jkonecny)
  - Do a small fixes to improve documentation (jkonecny)
  - Get version from the spec file (jkonecny)
  - Add documentation skeleton (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1-1
changelog:
  - Add global configuration initialize test (jkonecny)
  - Use default password function from GlobalConfiguration (jkonecny)
  - Add tests for GlobalConfiguration class (jkonecny)
  - Move default width to GlobalConfiguration class (jkonecny)
  - Add GlobalConfiguration object (jkonecny)
  - Fix a missing article in docs. (jkonecny)
  - Add tests for UIScreen get_user_input method (jkonecny)
  - Only InputManager is used to get input in UIScreen (jkonecny)
  - Move emit of InputReadySignal to InputRequest (jkonecny)
  - Get only last input on concurrent input (jkonecny)
  - Add concurrency tests for InputHandler (jkonecny)
  - Add requester source to the InputHandler (#1557472) (jkonecny)
  - Use InputManager as screen helper not in ScreenScheduler (#1557472) (jkonecny)
  - Add test to check InputThreadManager after initialization (jkonecny)
  - Reinitialize InputThreadManager when app is initialized (jkonecny)
  - Input requests are now handled by InputThreadManager (jkonecny)
  - Remove io_manager property from ScreenScheduler (jkonecny)
  - Rename io_manager to input_manager (jkonecny)
  - Change IOManager to InputManager (jkonecny)
  - Move draw from IOManager to ScreenScheduler (jkonecny)
  - Separate password input to PasswordInputHandler (jkonecny)
  - Add DEFAULT_WIDTH constant (jkonecny)
  - Add tests for InputHandler (jkonecny)
  - Replace get_input_without_check by new property (jkonecny)
  - Separate input to a new module (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1.1-1
changelog:
  - Use relative imports in tests (jkonecny)
  - Solve pylint errors (jkonecny)
  - Remove pot file (jkonecny)
  - Switch translations to rhel-8 Weblate branch (jkonecny)
  - Add potfile to the .gitignore (jkonecny)
  - Pause releasing when calling bumpver (jkonecny)
  - Remove Zanata from the Simpleline (jkonecny)
  - Switch po-push from Zanata to Weblate (jkonecny)
  - Download translations from Weblate (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1.3-1
changelog:
  - Add tests for UIScreen wide disabling of concurrency check (jkonecny)
  - Abstract registering signal handler in the InputHandler constructor (jkonecny)
  - Allow to disable concurrency check for all UIScreen inputs (jkonecny)
  - Enable execution of the tests on GitHub actions (jkonecny)
  - Add Makefile target for container tests execution (jkonecny)
  - Remove pocketlint from the build requires (jkonecny)


author: Scott Talbert <swt@techie.net> - 0.7-0.1.94664ddd46a6
changelog:
  - Switched to Jurko fork of suds
  - Modernize python packaging, build python3 package
  - Fixed bogus changelog dates


author: Scott Talbert <swt@techie.net> - 0.7-0.2.94664ddd46a6
changelog:
  - Applied patch from Haikel Guemar to support building on CentOS w/o Python 3
  - Move BRs to subpackages, support python- vs python2- BRs on non-Fedora


author: Petr Viktorin <pviktori@redhat.com> - 0.7-0.8.94664ddd46a6
changelog:
  - Don't build the python2 subpackage in rhel>7
    https://bugzilla.redhat.com/show_bug.cgi?id=1567165


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Owen Taylor <otaylor@redhat.com> - 2018.2-9
changelog:
  - Fix build directory referenced in python2 build
  - Move some python3 code that escaped back into a conditional
    (BZ #1907561)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.3-4
changelog:
  - Initial package for RHEL 8
  - Resolves: rhbz#2175215
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.6-1
changelog:
  - Update tito releasers (frostyx@email.cz)
  - CentOS-8 uses DNF (mmarusak@redhat.com)
  - Add missing runtime dependency on python2-six (frostyx@email.cz)
  - Add support for SUSE distributions using DNF (ngompa13@gmail.com)
  - Print a user-friendly error when a xml file cannot be parsed
    (frostyx@email.cz)
  - Update tito releasers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.7-1
changelog:
  - Add installation instructions of EPEL 8 (frostyx@email.cz)
  - Make the source of README.md more readable (frostyx@email.cz)
  - Remove duplicates in suggested helpers (frostyx@email.cz)
  - Make sure Collection.sorted doesn't traceback for None values
    (frostyx@email.cz)
  - Ignore sudo and su in the output (frostyx@email.cz)
  - Don't traceback for nonexisting PID (frostyx@email.cz)
  - Access process PID only once (frostyx@email.cz)
  - Rename tito master branch to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.8-1
changelog:
  - Release also for F35 (frostyx@email.cz)
  - Use distro.id() instead of platform.linux_distribution() (frostyx@email.cz)
  - Implement compare_packages for the alpm backend (jvanderwaa@redhat.com)
  - Add find_package support for alpm (jvanderwaa@redhat.com)
  - Use importlib instead of deprecated imp (frostyx@email.cz)
  - Drop beautifulsoup4/lxml dependencies (jvanderwaa@redhat.com)
  - Drop F32 from releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-5.1
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25428
  - Resolves: RHEL-25423


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-5.1
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25660
  - Resolves: RHEL-25634


author: Tomas Orsava <torsava@redhat.com> - 0.5.1-6
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633609


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11.10-7
changelog:
  - Python 2 binary package renamed to python2-werkzeug
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 3.11.4-4
changelog:
  - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage
  Resolves: rhbz#2207631


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3047, RHEL-3267


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33672, RHEL-33684


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5569


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 65.5.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64880, RHEL-70315


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-15
changelog:
  - Don't list /usr/bin/python as a ghost file so `yum install /usr/bin/python`
    doesn't install this package
  - Resolves: rhbz#1633534


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-18
changelog:
  - Remove the Python source tarball as it's not being used in this symlink
    component
  - Create a new explanatory README
  - Resolves: rhbz#1654867


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-1
changelog:
  - Updated to 2.2.1
  - Introduced Python 3 subpackage (upstream has merged the codebase)
  - Removed BuildRoot and python_sitelib definition
  - Use python2 macros instead of just python


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.4-3
changelog:
  - Python 2 binary package renamed to python2-chardet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-2
changelog:
  - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-3
changelog:
  - Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349


author: Jarod Wilson <jwilson@redhat.com> 1.0.2-2
changelog:
  - Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).


author: Jon Ciesla <limb@jcomserv.net> 1.2.0-1
changelog:
  - New upstream release, added python-nose BR. BZ 465999.
  - Using atlas blas, not blas-devel. BZ 461472.


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.6.0-0.1.b1
changelog:
  - Update to 1.6.0b1
  - Build python3  module with python3
  - Add patch from upstream to fix build time import error


author: David Malcolm <dmalcolm@redhat.com> - 1:1.6.2-5
changelog:
  - rework patches for 3.3 to more directly reflect upstream's commits
  - re-enable test suite on python 3
  - forcibly regenerate Cython .c source to avoid import issues on Python 3.3


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.7.0-0.1.b1
changelog:
  - Update to 1.7.0b1
  - Rebase python 3.3 patchs to current git master
  - Drop patches applied upstream


author: Orion Poplawski <orion@nwra.com> - 1:1.7.0-0.3.b1
changelog:
  - Add patch from github pull 371 to fix python 3.3 pickle issue
  - Remove cython .c source regeneration - fails now


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Fix rpmlint warnings
  - Update License
  - Apply patch: change shebang of f2py to use binary directly


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1:1.15.1-2
changelog:
  - Switch to pytest for running tests during check
  - Stop ignoring failures when running tests
  - Set PATH in check so that f2py tests work
  - Update docs to match release
  - Remove outdated workaround from rhbz#849713


author: Tim Flink <tflink@fedoraproject.org> - 1.2.1-1
changelog:
  - Update to upstream 1.2.1
  - Change binary from pip-python to python-pip (RHBZ#855495)
  - Add alias from python-pip to pip-python, to be removed at a later date


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Update to 8.1.2
  - Moved to a new PyPI URL format
  - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-4
changelog:
  - Provide symlinks to executables to comply with Fedora guidelines for Python
  Resolves: rhbz#1406922


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-12
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
  - Allow to import pip10's main from pip9's /usr/bin/pip
  - Do not show the "new version of pip" warning outside of venv
  Resolves: rhbz#1569488
  Resolves: rhbz#1571650
  Resolves: rhbz#1573755


author: Victor Stinner <vstinner@redhat.com> - 18.0-4
changelog:
  - Prevent removing of the system packages installed under /usr/lib
    when pip install -U is executed. Original patch by Michal Cyprian.
    Resolves: rhbz#1550368.


author: Miro Hrončok <mhroncok@redhat.com> - 19.1.1-2
changelog:
  - Fix root warning when pip is invoked via python -m pip
  - Remove a redundant second WARNING prefix form the abovementioned warning


author: Miro Hrončok <mhroncok@redhat.com> - 19.2.3-1
changelog:
  - Update to 19.2.3 (#1742230)
  - Drop patch that should strip path prefixes from RECORD files, the paths are relative


author: Tomas Orsava <torsava@redhat.com> - 19.3.1-1
changelog:
  - Update to 19.3.1 (#1761508)
  - Drop upstreamed patch that fixed expected output in test to not break with alpha/beta/rc Python versions


author: Thomas Spura <tomspur@fedoraproject.org> - 3.3-4
changelog:
  - update to most recent python packaging guidelines
  - rebuild with python3.2
    http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-3
changelog:
  - Run _build_tables.py to build the lextab.py and yacctab.py; otherwise
    they have to be regenerated at runtime for no benefit.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-4
changelog:
  - Upstream repository is now on github.
  - Fix rpmlint strange-permission complaint.
  - Rename patches, Source1 to all start with pycparser-{version}, to
    simplify updating patches for future upstream releases.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-5
changelog:
  - Renumbered Fedora-specific Patch1 to Patch100
  - Added new Patch1 to fix table generation when the build system
    already has a python-pycparser package installed.
  - Submitted Patch0 and Patch1 as upstream issues.
  - Added comments about patches.


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Ralph Bean <rbean@redhat.com> - 1.5.6-4
changelog:
  - Change our conflicts on python-SocksiPy to an obsoletes/provides.
    https://bugzilla.redhat.com/show_bug.cgi?id=1334407


author: Raphael Groner <projects.rg@smart.ms> - 1.6.8-5
changelog:
  - add python3_other subpackage for epel7
  - prepare removal of python2 subpackage in Fedora
  - use pypi macros
  - try to enable tests provided actually from tarball


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a1-3
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a4-2
changelog:
  - Remove a faulty patch that resulted in invalid value of
    distutils.sysconfig.get_config_var('LIBPL') (#1710767)


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~b4-1
changelog:
  - Rebased to Python 3.8.0b4
  - Enable Profile-guided optimization for all arches, not just x86 (#1741015)


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~a1-3
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup


author: Marcel Plch <mplch@redhat.com> - 3.9.0~b4-2
changelog:
  - Remove large, autogenerated Python sources and redundant pycache levels to reduce filesystem footprint


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33676, RHEL-33688


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.4-1
changelog:
  - First build from the distribute codebase -- distribute-0.6.4.
  - Remove svn patch as upstream has chosen to go with an easier change for now.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.7-1
changelog:
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.
  - Update to 0.6.7 bugfix.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.9-4
changelog:
  - Fix install to make /usr/bin/easy_install the py2 version
  - Don't need python3-tools since the library is now in the python3 package
  - Few other changes to cleanup style


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.10-1
changelog:
  - Update the python3 portions but disable for now.
  - Update to 0.6.10
  - Remove %pre scriptlet as the file has a different name than the old
    package's directory


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.13-5
changelog:
  - Upstream patch for compatibility problem with setuptools
  - Minor spec cleanups
  - Provide python-distribute for those who see an import distribute and need
    to get the proper package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.8-1
changelog:
  - Update to upstream 0.8  release.  Codebase now runs on anything from
    python-2.4 to python-3.3 without having to be translated by 2to3.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.9.5-1
changelog:
  - Update to 0.9.5
    - package_index can handle hashes other than md5
    - Fix security vulnerability in SSL certificate validation
    - https://bugzilla.redhat.com/show_bug.cgi?id=963260


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.6-1
changelog:
  - Update to newer upstream release.  Some minor incompatibilities listed but
    they should affect few, if any consumers.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.7-1
changelog:
  - Update to newer upstream release that has our patch to the unittests
  - Fix for http://bugs.python.org/issue17997#msg194950 which affects us since
    setuptools copies that code. Changed to use
    python-backports-ssl_match_hostname so that future issues can be fixed in
    that package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-1
changelog:
  - Update to new upstream release with a few things removed from the API:
    Changelog: https://pypi.python.org/pypi/setuptools#id139


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Ralph Bean <rbean@redhat.com> - 6.0.2-2
changelog:
  - Modernized python2 macros.
  - Inlined locale environment variables in the %check section.
  - Remove bundled egg-info and .exes.


author: Kevin Fenzi <kevin@scrye.com> 17.1.1-3
changelog:
  - Drop no longer needed Requires/BuildRequires on python-backports-ssl_match_hostname
  - Fixes bug #1231325


author: Kevin Fenzi <kevin@scrye.com> - 34.1.1-1
changelog:
  - Update to 34.1.1. Fixes bug #1412268
  - Fix License tag. Fixes bug #1412268
  - Add Requires for fomerly bundled projects: six, packaging appdirs


author: Michal Cyprian <mcyprian@redhat.com> - 36.2.0-3
changelog:
  - Revert "Add --executable option to easy_install command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-4
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules.


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-5
changelog:
  - Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  - Move docs to their proper place


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-6
changelog:
  - Add the platform-python subpackage
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-7
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Miro Hrončok <mhroncok@redhat.com> - 37.0.0-1
changelog:
  - Update to 37.0.0 (fixes #1474126)
  - Removed not needed pip3 patch (upstream included different version of fix)


author: Miro Hrončok <mhroncok@redhat.com> - 40.4.3-1
changelog:
  - Update to 40.4.3 to fix dire DeprecationWarnings (#1627071)
  - List vendored libraries
  - https://github.com/pypa/setuptools/blob/v40.4.3/CHANGES.rst


author: Tomas Orsava <torsava@redhat.com> - 41.6.0-1
changelog:
  - Upgrade to 41.6.0 (#1758945).
  - https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0
  - Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896


author: Miro Hrončok <mhroncok@redhat.com> - 45.2.0-1
changelog:
  - Upgrade to 45.2.0 (#1775943)
  - https://setuptools.readthedocs.io/en/latest/history.html#v45-2-0
  - No longer supports Python 2


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Julien Enselme <jujens@jujens.eu> - 0.9.1-2
changelog:
  - Enable tests suite
  - Build python3 and python2 in the same directory
  - Use %py2_build, %py3_build, %py2_install and %py2_install
  - Move python2 package in its own subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.0-3
changelog:
  - Subpackage python2-toml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Ralph Bean <rbean@redhat.com> - 1.7-1
changelog:
  - Update to latest upstream.
  - Removed the accept-header proxy patch which is included in upstream now.
  - Removed py2.6 compat patch which is included in upstream now.


author: Ralph Bean <rbean@redhat.com> - 1.10-1
changelog:
  - Latest upstream 1.10, for python-requests-2.5.0.
  - Re-do unbundling without patch, with symlinks.
  - Modernize python2 macros.
  - Remove the with_dummyserver tests which fail only sometimes.


author: Ralph Bean <rbean@redhat.com> - 1.10.4-3.20150503gita91975b
changelog:
  - Apply pyopenssl injection for an outdated cpython as per upstream advice
    https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning
    https://urllib3.readthedocs.org/en/latest/security.html#pyopenssl


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.22-9
changelog:
  - Do not lowercase hostnames with custom-protocol (rhbz 1567862)
  - upstream: https://github.com/urllib3/urllib3/issues/1267


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.7-2
changelog:
  - Subpackage python2-urllib3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 1:0.35.1-3
changelog:
  - Add back Epoch 1 to the package version because the original version with the
    epoch was available in CentOS Stream for a few days
  - Resolves: rhbz#1877430


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.2-2
changelog:
  - omit -qtdoc-doc bits, conflicts with real qt5-qtdoc (#1520355)
  - use %_qt5_docdir macro (instead of hard-coded %_docdir/qt5)
  - optimize build a bit


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-2
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209491


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-3
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212753


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212753


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-0.1.beta2
changelog:
  - %build: -accessibility
  - macros.qt5: +%_qt5_archdatadir +%_qt5_settingsdir
  - pull in a couple more configure-related upstream patches


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-4
changelog:
  - create/own %{_qt5_plugindir}/iconengines
  - -devel: create/own %{_qt5_archdatadir}/mkspecs/modules
  - cleanup .prl


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-5
changelog:
  - -static subpkg, Requires: fontconfig-devel,glib2-devel,zlib-devel
  - -devel: Requires: pkgconfig(gl)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.1.alpha
changelog:
  - 5.2.0-alpha
  - -system-harfbuzz
  - rename subpkg -x11 => -gui
  - move some gui-related plugins base => -gui
  - don't use symlinks in %_qt5_bindir (more qtchooser-friendly)


author: Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
changelog:
  - 5.2.0-rc1
  - revert/omit recent egl packaging changes
  - -doc install changes-5.* files here (#989149)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.11.rc1
changelog:
  - needs a minimum version on sqlite build dependency (#1038617)
  - fix build when doc macro not defined


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.2.0-4
changelog:
  - fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
  - fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
  - reenable docs on Fedora (accidentally disabled)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.3.1-4
changelog:
  - support the old versions of libxcb and libxkbcommon in F19 and F20
  - don't use the bundled libxkbcommon


author: Rex Dieter <rdieter@fedoraproject.org> - 5.3.1-5
changelog:
  - drop dep on xorg-x11-xinit (own shared dirs instead)
  - fix/improve qtchooser support using alternatives (#1122316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.1.beta
changelog:
  - 5.4.0-beta
  - avoid extra -devel deps by moving *Plugin.cmake files to base pkgs
  - support bootstrap macro, to disable -doc,-examples


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-3
changelog:
  - pull in handful of upstream fixes, particularly...
  - Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-12
changelog:
  - backport a couple more upstream fixes
  - introduce -common noarch subpkg, should help multilib issues


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-11
changelog:
  - Add mesa-dri-drivers as recommends on gui package as reported by Kevin Kofler
  - Reference https://bugzilla.redhat.com/1249280


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.0-14
changelog:
  - remove GDB hackery again, -12 built fine on i686, hack breaks ARM build
  - fix 10-qt5-check-opengl2.sh for multiple screens (#1245755)


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-16
changelog:
  - backport 0055-Respect-manual-set-icon-themes.patch (kde#344469)
  - conditionally use valgrind only if needed


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-18
changelog:
  - When a screen comes back online, the windows need to be told about it (QTBUG-47041)
  - xcb: Ignore disabling of outputs in the middle of the mode switch


author: Helio Chissini de Castro <helio@kde.org> - 5.5.1-8
changelog:
  - qt5-qdoc need requires >= current version, otherwise will prevent the usage further when moved to qttools


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-0.2
changelog:
  - Valgrind still needed as buildreq due recent split qdoc package, but we can get rid of
    specific arch set.
  - Added missing libproxy buildreq
  - Epel and RHEL doesn't have libinput, so a plugin need to be excluded for this distros


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - re-introduce bootstrap/examples macros
  - put examples-manifest.xml in -examples
  - restore -doc multilib hack (to be on the safe side, can't hurt)
  - %build: s/-optimized-qmake/-optimized-tools/


author: Rex Dieter <rdieter@fedoraproject.org> 5.6.0-0.40.rc
changelog:
  - respin QTBUG-51649 patch
  - %build: use -dbus-runtime unconditionally
  - drop (unused) build deps: atspi, dbus, networkmanager


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-17
changelog:
  - support out-of-tree build
  - better %check
  - pull in final/upstream fixes for QTBUG-51648,QTBUG-51649
  - disable examples/tests in bootstrap mode


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.0-10
changelog:
  - fix Source0: https://download.qt.io/official_releases/qt/5.9/5.9.0/submodules/qtbase-opensource-src-5.9.0.tar.xz


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-6
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update moc patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-6
changelog:
  - bootstrap (rawhide)
  - revert some minor changes introduced since 5.7
  - move *Plugin.cmake items to runtime (not -devel)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-6
changelog:
  - enable openssl11 support only for f27+ (for now)
  - Use mariadb-connector-c-devel, f28+ (#1493909)
  - Backport upstream mariadb patch (#1491316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.0-2
changelog:
  - re-enable gold linker (#1458003)
  - drop qt5_null_flag/qt5_deprecated_flag hacks (should be fixed upstream for awhile)
  - make qt_settings/journald support unconditional


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-5
changelog:
  - QOpenGLShaderProgram: glProgramBinary() resulting in LINK_STATUS=FALSE not handled properly (QTBUG-66420)


author: Jan Grulich <jgrulich@redhat.com> - 5.11.1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-3
changelog:
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore
    Resolves: rhbz1747468


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-4
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-5
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86 and aarch64, needed for EFI System Partition


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-6
changelog:
  - Restore usr/share/rear/output/PXE/default/820_copy_to_net.sh
    removed in 2.4-19 with rsync refactor.
    It is still needed to use a rsync OUTPUT_URL when OUTPUT=PXE and BACKUP=RSYNC


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-8
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-12
changelog:
  - Skip invalid disk drives when saving layout PR 3047
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136
  - make initrd accessible only by root (CVE-2024-23301), PR 3123
  - Backport PR 3061 to save LVM pool metadata volume size in disk layout
    and restore it
  - Backport PR 3058 to skip useless xfs mount options when mounting
    during recovery, prevents mount errors like "logbuf size must be greater
    than or equal to log stripe size"


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.13
changelog:
  - Resolves: RHEL-16975 : rhc - rhc: new rhc_insights.ansible_host parameter
    Rename test playbook from .yaml to .yml


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.14
changelog:
  - Resolves: RHEL-3241 : bootloader - Create bootloader role (MVP)
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.16
changelog:
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    this is the MVP candidate for the snapshot role


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.17
changelog:
  - Resolves: RHEL-25509 : nbde_server - fix: Allow tangd socket override directory to be managed outside of the role
  - Resolves: RHEL-21491 : network - Add blackhole type route to rhel-system-roles.network
  - Fixed issues with ANSIBLE_GATHERING=explicit in several roles
  - Fixed test cleanup issues in several roles


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.18
changelog:
  - Resolves: RHEL-22229 : podman - user linger needed before secrets
    fixed issue with ANSIBLE_GATHERING=explicit
  - Resolves: RHEL-5985 ansible-sshd - Manage SSH certificates
    fixed issue with RHEL7 tests


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.19
changelog:
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes idempotency, check mode, cleanup, basic-smoke-test


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.20
changelog:
  - Resolves: RHEL-16965 : rhc - new rhc_insights.display_name parameter
  - Resolves: RHEL-16553 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes error handling


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.21
changelog:
  - Resolves: RHEL-3241 : bootloader - Create bootloader role (MVP)
    fix issue with path on arches other than x86_64, and EFI systems
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    cockpit - fixed issue with test cleanup
    postgresql - fixed issue with test cleanup


author: Pavel Cahyna <pcahyna@redhat.com> - 0-0.1.20170504
changelog:
  - Initial release.
  - kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
  - postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
  - selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
  - timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
  - tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
  - network r. 03ff040df78a14409a0d89eba1235b8f3e50a750


author: Pavel Cahyna <pcahyna@redhat.com> - 0.1-1
changelog:
  - Update to 0.1 (first upstream release).
  - Remove the tuned role, it is not ready yet.
  - Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
    directly to get rid of an extra directory.
  - Depend on ansible.


author: Pavel Cahyna <pcahyna@redhat.com> - 0.2-1
changelog:
  - Update the networking role to version 0.2 (#1459203)
  - Version every role and the package separately. They live in separate repos
    and upstream release tags are not coordinated.


author: Pavel Cahyna <pcahyna@redhat.com> - 0.2-2
changelog:
  - Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
  - Move the network example inventory to the documentation directory together.
    with the example playbooks and delete the now empty "examples" directory.
  - Use proper reserved (by RFC 7042) MAC addresses in the network examples.


author: Pavel Cahyna <pcahyna@redhat.com> - 0.3-1
changelog:
  - Change the prefix to linux-system-roles., keeping compatibility
    symlinks.
  - Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
    adds InfiniBand support and other fixes.
  - Drop a patch included upstream.


author: Pavel Cahyna <pcahyna@redhat.com> - 0.3-2
changelog:
  - We can't change directories to symlinks (rpm bug #447156) so keep the old
    names and create the new names as symlinks.


author: Pavel Cahyna <pcahyna@redhat.com> - 0.4-1
changelog:
  - network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
    ensure that state:absent followed by state:up works (bz#1478910), and change
    the example IP adresses to the IANA-assigned ones.
  - SELinux: fix the case when SELinux is disabled (bz#1479546).


author: Pavel Cahyna <pcahyna@redhat.com> - 0.5-1
changelog:
  - SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
    (bz#1493574)
  - network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
    makes the network role idempotent (bz#1476053) and fixes manual
    network provider selection (bz#1485074).


author: Pavel Cahyna <pcahyna@redhat.com> - 0.6-1
changelog:
  - Drop hard dependency on ansible (#1525655), patch from Yaakov Selkowitz
  - Update the network role to version 0.4, solves bz#1487747, bz#1478576


author: Pavel Cahyna <pcahyna@redhat.com> - 0.6-2
changelog:
  - Document network role options: static routes, ethernet, dns
    Upstream PR#36, bz1550128, documents bz1487747 and bz1478576


author: Pavel Cahyna <pcahyna@redhat.com> - 0.6-4
changelog:
  - Fix complaints about /usr/bin/python during RPM build by making the affected scripts non-exec
  - Fix merge botch


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-3
changelog:
  - Rebase the network role to the last revision (d866422).
    Many improvements to tests, introduces autodetection of the current provider
    and defaults to using profile name as interface name.
  - Rebase the selinux, timesync and kdump roles to their 1.0rc1 versions.
    Many changes to the role interfaces to make them more consistent
    and conforming to Ansible best practices.
  - Update the description.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-4
changelog:
  - Format the READMEs as html, by vdolezal, with changes to use highlight
    (source-highlight does not understand YAML)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-5
changelog:
  - spec file improvement: Unify the source macros with deftag() and defcommit()
  - Update to upstream released versions and drop unnecessary patches.
  - Unify the spec file with Fedora (no functional changes intended).
  - Misc spec file comments fixes (by Mike DePaulo)
  - Fix rpmlint error by escaping a previous changelog entry with a macro (by Mike DePaulo)
  - Comply with Fedora guidelines by always using "cp -p" in %install (by Mike DePaulo)
  - Rebase network role - doc improvements, Fedora 29 and Ansible 2.7 support
  - Regenerate network role patch to apply without offset
  - Rebase kdump role to fix a forgotten edit, rhbz#1645633
  - Update timesync examples: add var prefix (rhbz#1642152), correct role prefix
  - Add Obsoletes for the -techpreview subpackage
  - Add warnings to role READMEs and other doc updates, rhbz#1616018
  - network: split the state setting into state and persistent_state, rhbz#1616014
  - depend on python-jmespath as Ansible will not ship it, rhbz#1660559


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-6
changelog:
  - Rebase the selinux role, fixes typo in tests, uncovered by Ansible 2.7,
    (rhbz#1677743) and lists all input variables in defaults
    to make Satellite aware of them (rhbz#1674004, PR#43)
  - Rebase the kdump role to fix check mode problems: rhbz#1685904
  - Rebase the timesync role: fixes check mode problems (rhbz#1685904)
    and lists all input variables in defaults (rhbz#1674004)
  - Rebase the network role: keeps the interface up for state: up
    if persistent_state is absent and solves problems with defining
    VLAN and MACVLAN interface types (issue #19) (rhbz#1685902)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-7
changelog:
  - Update tests for the network role
  - Fix typo in a test for the timesync role
  - Tag tests suitable for Tier1 testing
  - Rebase the network role to add support for device features (PR#115,
    rhbz#1696703) and atomic changes (PR#119, rhbz#1695161)
  - network: apply upstream PR#121: allow modifying interface attributes
    without disrupting services (rhbz#1695157)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-10
changelog:
  - Add the storage_safe_mode option, true by default, to prevent accidental
    data removal: rhbz#1763242, issue #42, PR #43 and #51.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-11
changelog:
  - Rebase network role to latest upstream
  - Remove all the soon-unnecessary tier1 tags in test
  - Add a workaround for rhbz#1800627 in test
  - Modify patches to remove tier1 tags
  - Add metrics, tlog, logging, kernel_settings roles
  - Add nbde_client, nbde_server, certificate roles
  - Rebase storage role to latest upstream: adds support for mdraid, LUKS,
    swap manangement


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-12
changelog:
  - Rebase network role to latest upstream, resolves rhbz#1822777, rhbz#1848472
  - Rebase logging role to latest upstream, resolves rhbz#1850790,
    rhbz#1851804, rhbz#1848762
  - Rebase certificate role to latest upstream, resolves rhbz#1848742,
    rhbz#1850790
  - Rebase nbde_client role to latest upstream, resolves rhbz#1848766,
    rhbz#1850790


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-15
changelog:
  - Rebase storage role to latest upstream, resolves rhbz#1854191, rhbz#1848250,
    rhbz#1850790 (including test)
  - Rebase nbde_client role to latest upstream, adds test for rhbz#1850790
  - Rebase certificate role to latest upstream, adds test for rhbz#1850790
  - Rebase nbde_server role to latest upstream, resolves rhbz#1850790
    (including test)
  - Rebase tlog role to latest upstream, resolves rhbz#1855424
  - Rebase kernel_settings role to rev b8bc86b, resolves rhbz#1850790
  - Add EL 8 to supported versions in postfix and kdump role metadata,
    resolves rhbz#1861661


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-16
changelog:
  - Rebase logging role to latest upstream, resolves rhbz#1854546, rhbz#1861318,
    rhbz#1860896, adds test for rhbz#1850790
  - Rebase metrics role to latest upstream, resolves rhbz#1855544, rhbz#1855539,
    rhbz#1848763
  - Fix whitespace in postfix role patch


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-18
changelog:
  - Rebase storage role to latest upstream, resolves rhbz#1848254, rhbz#1851654,
    rhbz#1862867
  - Rebase nbde_client role to latest upstream, resolves rhbz#1851654
  - Rebase logging role to latest upstream, resolves rhbz#1851654, rhbz#1861318
  - Rebase metrics role to latest upstream, resolves rhbz#1869390, rhbz#1869389,
    rhbz#1868378


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-19
changelog:
  - Rebase network role to latest upstream, resolves rhbz#1800627
    Drop a downstream patch with a test workaround that is not needed anymore.
  - Fix script for role prefix transformation
  - Rebase metrics role to pick up test changes, PR #19
  - Rebase kernel_settings role to latest upstream, resolves rhbz#1851557


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-22
changelog:
  - Rebase kdump, certificate, storage, selinux, nbde_client/server,
    kernel_settings in preparation for collections
    Includes upstream PR #168 for storage to prevent toggling encryption
    in safe mode, as it is a destructive operation. Resolves rhbz#1881524
  - Introduce & use simpler macros for Sources management,
    similar to %forgemeta
    https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/
  - Use a script to perform prefix transformation for all roles to reduce
    the number of patches
  - Rebase tlog to add exclude_{users,groups} support, Resolves rhbz#1895472
  - Add crypto_policies role, Resolves rhbz#1893699
  - Add sshd role, Resolves rhbz#1893696


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-23
changelog:
  - Add {crypto_policies,sshd}/README.md to docfiles, thanks jjelen
  - Fix role name in selinux patch
  - Add sshd role example and README fix
  - Fix role name in sshd role tests and docs
  - Backport network role PR #298 to fix problems often triggered by the CI
    "error: down connection failed while waiting", Resolves rhbz#1817242
  - Disable bond test in downstream CI, it started to break DNS in RHEL 8.4.
    Related rhbz#1915017


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-25
changelog:
  - Apply storage PR #153 to fix a problem with partition name on NVMe devices
    Resolves: rhbz1865990
  - Remove symlinks to roles under tests
  - Cleanup of role directories - remove files starting with . in roles' root
    directories and Git files under tests. Resolves rhbz#1650550
  - Add collection support, make Version semver compatible: 1.0 -> 1.0.0
    Resolves rhbz#1893906
  - Autogenerate Automation-Hub README.md if building for RHEL
  - Renumber sources, Source is now auto-maintenance since it is the root
    of the source tree, kdump becomes Source4 (4 was originally firewall)
  - Introduce bcond_with/without ansible, work on Fedora, RHEL and EPEL
  - Rebase certificate role to include collection-related workarounds,
    no change in behavior intended
  - Rebase network role, includes collection-related workarounds
  - Revert an invasive network change to enable EPEL (PR #335) and implement
    a minimal version


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-27
changelog:
  - Rebase the logging role, Resolves rhbz#1889484
  - Fixes to collection docs and galaxy metadata from nhosoi
  - Apply network PR #350 Resolves rhbz#1927392


author: Rich Megginson <rmeggins@redhat.com> - 1.0.0-28
changelog:
  - Add patch for sshd https://github.com/willshersystems/ansible-sshd/pull/155
    for ansible 2.8/jinja 2.7 support for sshd role
  - Rebase certificate, kernel_settings, nbde_client for jinja27
  - Rebase the logging role, Resolves rhbz#1927943
  - Rebase storage role, Resolves rhbz#1894651 - interpreatation of
    omitted parameters
  - Apply storage PR #201 to dispense with the need of listing all disks
    in existing pools, Resolves rhbz1894676
  - Apply storage PR #199 to allow reducing the requested volume sizes
    if needed to fit, Resolves rhbz1894647
  - Rebase the network role, Resolves rhbz1893959, rhbz1893957
  - Add the ssh client role, Resolves rhbz1893712
  - Minor issue in selinux - no variable named present
    Resolves rhbz1926947
  - Prefix internal roles with private_, resolves rhbz#1927417
  - Add the ha_cluster role, Resolves rhbz#1893743


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-29
changelog:
  - Change internal role prefix to more descriptive private_${role}_subrole_
  - Sync spec improvements from Fedora and introduce helper macros
    No functional change except for license files location
  - Disable mssql metrics test on non-x86_64 where the packages
    are not available. Upstream PR #73


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-30
changelog:
  - Correct merge botch in previous (ssh/README.md is a doc file)
  - Update galaxy.yml even on Fedora, auto-maintenance may not have
    a consistent version number
  - Update collection doc transformation to match a modified text
    and include the Tech Preview note again


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0.0-31
changelog:
  - Rebase certificate role to pick up a test fix, Resolves rhbz#1931568
  - Rebase logging role to fix default private key path,
    upstream PR #218


author: Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-1
changelog:
  - Fix description field in galaxy.yml
  - Remove "Technology Preview" from Collection README
  - Merging individual ignore file and add it to the package
  - Add a note to each module Doc to indicate it is private
  - Add patches for network and storage role ansible-test fixes
    Resolves rhbz#1935451
  - Simplify doc tags in %files, corrects a forgotten doc tag for ha_cluster
  - Suppress one ansible-lint warning in ha_cluster


author: Noriko Hosoi <nhosoi@redhat.com> - 1.0.1-2
changelog:
  - Adding the -collection-artifact subpackage, enabled using
    "--with collection_artifact". It is used for importing to
    ansible galaxy/automation hub.
  - README.html files (main README for the collection and README
    for each role) are not located in /usr/share/ansible/collections,
    but just put in /usr/share/doc/linux-system-roles/collection in rpm.
  - The README.html files are not included in the collection artifact.
  - Fixing "sshd role README.md examples use incorrect role name".


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1
changelog:
  - rebase timesync role to latest upstream
    Resolves rhbz#1937938
  - timesync - add timesync_chrony_custom_settings variable for free-form
    local configs
    Resolves rhbz#1938023
  - do not use ignore_errors in timesync role
    Resolves rhbz#1938014
  - support for timesync_max_distance to configure maxdistance/maxdist parameter
    Resolves rhbz#1938016
  - support for ntp xleave, filter, and hw timestamping
    Resolves rhbz#1938020
  - rebase selinux role to latest upstream
    Resolves rhbz#1937938
  - should not reload the SELinux policy if its not changed
    Resolves rhbz#1757869
  - Ability to install custom SELinux module via Ansible
    Resolves rhbz#1848683
  - rebase storage role to latest upstream
    Resolves rhbz#1937938
  - rebase network role to latest upstream
    Resolves rhbz#1937938
  - support for ipv6_disabled to disable ipv6 for address
    Resolves rhbz#1939711
  - rebase postfix role to latest upstream
    Resolves rhbz#1937938
  - rebase metrics role to latest upstream
    Resolves rhbz#1937938
  - rebase sshd role to latest upstream
    Resolves rhbz#1937938
  - rebase remaining roles to latest upstream
    Resolves rhbz#1937938
  - Generate %files dynamically
  - add vpn role
    Resolves rhbz#1943679


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - rebase roles to latest upstream
    Resolves rhbz#1957876
  - use FQRN in postfix README
    Resolves rhbz#1958963
  - use relayhost in postfix README
    Resolves rhbz#1866544
  - network - Add support for ETHTOOL Ring option
    Resolves rhbz#1959649
  - storage: calltrace observed when set type: partition for storage_pools
    Resolves rhbz#1854187


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.1-1
changelog:
  - fix logging README.html examples' rendering problems
    Resolves rhbz#1962374
  - fix broken internal links in README.md files
    Resolves rhbz#1962976


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - fix kdump tests_ssh for basic smoke test
    Resolves rhbz#1957876
  - ha_cluster - cannot read preshared key in binary format
    Resolves rhbz#1952620
  - Add hybrid_e2e option to PTP domain
    Resolves rhbz#1957849


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.2-2
changelog:
  - Make spec file available for older versions of OSes.
  - Drop python3-six dependency which was used by lsr_role2collection.py.
  - Drop html files from rpm if the version has no markdown parser.
  - Drop unnecessary python scripts which include python3 only code, e.g.,
    f-strings.
  - auto_maintenance - ability to convert "- ROLENAME" to "- FQCN" in the doc files such as README
  - auto_maintenance - lsr_role2collection.py - Adding encoding="utf-8" to open.
    Resolves rhbz#1957876


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-3
changelog:
  - Fix HTML rendering of internal links when using pandoc/asciidoc
  - Uses pandoc gfm instead of markdown_github
    Resolves rhbz#1962976


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-3
changelog:
  - Make the ansible_collection_files macro defined in Fedora automatically and
    in RHEL manually consistent - having slash at the end to clean double-slashes


author: Rich Megginson <rmeggins@redhat.com> - 1.3.0-1
changelog:
  - ha_cluster - add pacemaker resources configuration
    Resolves rhbz#1963283
  - ha_cluster - code cleanup
    Resolves rhbz#1970666
  - Postfix RHEL system role README.md missing variables under the "Role Variables" section
    Resolves rhbz#1961858
  - logging README.html examples are rendered incorrectly
    Resolves rhbz#1962374
  - make postfix role idempotent - round 2
    Resolves rhbz#1960375
  - selinux task for semanage says Fedora in name but also runs on RHEL/CentOS 8
    Resolves rhbz#1966681
  - metrics role task to enable logging for targeted hosts not working
    Resolves rhbz#1967335
  - network - Add 'auto_gateway' option
    Resolves rhbz#1897565
  - network - Only show stderr_lines by default
    Resolves rhbz#1970666
  - storage - LVMVDO support
    Resolves rhbz#1882475
  - storage - fix several linter issues
    Resolves rhbz#1970666
  - ssh - Fix variable precedence when invoked through roles
    Resolves rhbz#1966711
  - ssh - Update configuration options list for OpenSSH 8.6
    Resolves rhbz#1970666
  - sshd - Fix variable precedence when invoked through roles
    Resolves rhbz#1966711
  - sshd - Update configuration options list for OpenSSH 8.6
    Resolves rhbz#1970666
  - sshd - support for appending a snippet to configuration file
    Resolves rhbz#1970642
  - timesync - add NTS support
    Resolves rhbz#1970664
  - timesync - rebase to latest
    Resolves rhbz#1970666
  - nbde_client - rebase to latest
    Resolves rhbz#1970666


author: Rich Megginson <rmeggins@redhat.com> - 1.4.1-1
changelog:
  - network - Re-running the network system role results in "changed: true" when nothing has actually changed
    Resolves rhbz#1943384
  - network - Test tests_bond_initscripts.yml failed to create interface
    Resolves rhbz#1918210


author: Rich Megginson <rmeggins@redhat.com> - 1.4.2-1
changelog:
  - storage - relabel doesn't support - Fixed volume relabeling
    Resolves rhbz#1876315 (EL8)
    Resolves rhbz#1982841 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.4.3-1
changelog:
  - crypto_policies - rename 'policy modules' to 'subpolicies'
    Resolves rhbz#1982896 (EL9)
    Resolves rhbz#1982897 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.5.0-1
changelog:
  - ha_cluster - add pacemaker cluster properties configuration
    Resolves rhbz#1982913 (EL8)
    Resolves rhbz#1982906 (EL9)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-1
changelog:
  - Error: device becoming unmanaged and pytest not reproducible in tests_integration_pytest.yl
    Resolves rhbz#1985382 (EL9)
    Resolves rhbz#1932699 (EL8)
  - EPEL yum repository configuration for tests
    Rebasing to latest picks up this fix - see rhel7 bz1980439
  - connections: workaround DeprecationWarning for NM.SettingEthtool.set_feature()
    Rebasing to latest picks up this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.6.0-1
changelog:
  - network - Skip tests on RHEL9 that use hostapd
    Resolves rhbz#1945348
  - network - Fix the bond test on DHCP
    Resolves rhbz#1918252
  - storage - Add support for percentage-based volume sizes
    Resolves rhbz#1984583 (EL9)
    Resolves rhbz#1894642 (EL8)
  - storage -storage_test_actual_size != storage_test_requested_size observed with tests_lvm_auto_size_cap.yml
    Resolves rhbz#1986284 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.1-1
changelog:
  - network - tests_provider_nm.yml fails with an error: Failure in test 'I can manage a veth interface with NM after I managed it with initscripts.
    Resolves rhbz#1935919
  - network - _initscripts tests fail because "No package network-scripts available."
    Resolves rhbz#1935916
  - network - Test tests_bond_initscripts.yml failed to create interface
    Resolves rhbz#1980870
  - storage - covscan error - DEADCODE - vdopool if create_vdo else parent
    Resolves rhbz#1985571 (EL9)
    Resolves rhbz#1985572 (EL8)
  - network - network: tests_bond_initscripts.yml leaves behind unusable resolv.conf in CI
    Resolves rhbz#1915017


author: Rich Megginson <rmeggins@redhat.com> - 1.6.2-1
changelog:
  - metrics - Grafana dashboard not working after metrics role run unless services manually restarted
    Resolves rhbz#1984150 (EL9)
    Resolves rhbz#1978357 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.3-1
changelog:
  - storage - tag tests that use NVME and SCSI
    Resolves rhbz#1989211 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.4-1
changelog:
  - sshd - support for rhel9 managed hosts
    Resolves rhbz#1989221 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.6-1
changelog:
  - logging, certificate - Instead of the archive module, use "tar" command for backup.
    Resolves rhbz#1984182 (EL9)
    Resolves rhbz#1987096 (EL8)
  - logging - Add a support for list value to server_host in the elasticsearch output
    Resolves rhbz#1986460 (EL9)
    Resolves rhbz#1986463 (EL8)
  - logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
    Resolves rhbz#1989962 (EL9)
    Resolves rhbz#1990142 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.7-1
changelog:
  - storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
    Resolves rhbz#1991141 (EL8)
    Resolves rhbz#1991062 (EL9)
  - storage - Get syntax errors in tests_lvm_errors.yml
    Resolves rhbz#1990793 (EL8)
    Resolves rhbz#1991142 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
changelog:
  - drop support for Ansible 2.8 - min_ansible_version is now 2.9
    Resolves rhbz#1989197 (EL9)
    Resolves rhbz#1989199 (EL8)
  - sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
    Resolves rhbz#1991598 (EL9)
    Resolves rhbz#1990947 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
changelog:
  - metrics - the bpftrace role does not properly configure bpftrace agent
    Resolves rhbz#1994180 (EL9)
    Resolves rhbz#1993240 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
changelog:
  - logging - Update the certificates copy tasks
    Resolves rhbz#1996777 (EL9)
    Resolves rhbz#1994580 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
changelog:
  - storage - revert the dm-vdo workaround fix for vdo testing
    Resolves rhbz#1978488 (EL9)
    Resolves rhbz#1991141 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-2
changelog:
  - selinux - tag tests_selinux_disabled.yml with tests::avc
    Resolves rhbz#1996315 (EL9)
    Resolves rhbz#1996317 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.10.0-1
changelog:
  - add cockpit role
    Resolves rhbz#2021661 (EL8)
    Resolves rhbz#2021028 (EL9)
  - add firewall role
    Resolves rhbz#1854988 (EL8)
    Resolves rhbz#2021665 (EL9)
  - firewall - add ability to add-source
    Resolves rhbz#1932678 (EL8)
    Resolves rhbz#2021667 (EL9)
  - firewall - allow user defined zones
    Resolves rhbz#1850768 (EL8)
    Resolves rhbz#2021669 (EL9)
  - firewall - allow specifying the zone
    Resolves rhbz#1850753 (EL8)
    Resolves rhbz#2021670 (EL9)
  - updates for ansible 2.12 support
    Resolves rhbz#2012316 (EL8)
    Resolves rhbz#2012298 (EL9)
  - update community.general to 4.0.1
    Resolves rhbz#2006081 (EL8)
    Resolves rhbz#2006076 (EL9)
  - network - Allow to specify PCI address to configure profiles
    Resolves rhbz#1695634 (EL8)
    Resolves rhbz#1999162 (EL9)
  - network - support wifi Enhanced Open (OWE)
    Resolves rhbz#1993379 (EL8)
    Resolves rhbz#1993377 (EL9)
  - network - support WPA3 Simultaneous Authentication of Equals(SAE)
    Resolves rhbz#1993311 (EL8)
    Resolves rhbz#1993304 (EL9)
  - network - RFE: Support ignoring default gateway retrieved by DHCP/IPv6-RA
    Resolves rhbz#1897565 (EL8)
    Resolves rhbz#1978773 (EL9)
  - network - Update network system role to reflect that network teaming is deprecated in RHEL 9
    Resolves rhbz#1897565 (EL8)
    Resolves rhbz#1999770 (EL9)
  - selinux - fails linit rules role-name and unnamed-task
    Resolves rhbz#1974000 (EL8)
    Resolves rhbz#2021675 (EL9)
  - kernel_settings - ansible_managed | comment BZs:
    Resolves rhbz#2006230 (EL9)
    Resolves rhbz#2006231 (EL8)
    Resolves rhbz#2006233 (EL7)
  - logging - logging role missing quotes for immark module interval value
    Resolves rhbz#2021678 (EL8)
    Resolves rhbz#2021676 (EL9)
  - logging - Add user and password
    Resolves rhbz#2010327 (EL8)
    Resolves rhbz#1990490 (EL9)
  - logging - Performance improvement
    Resolves rhbz#2005727 (EL8)
    Resolves rhbz#2004303 (EL9)
  - nbde_client - add regenerate-all to the dracut command
    Resolves rhbz#2021682 (EL8)
    Resolves rhbz#2021681 (EL9)
  - certificate - Fix certificate permissions with "group" option
    Resolves rhbz#2021683 (EL8)
    Resolves rhbz#2021025 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.11.0-1
changelog:
  - timesync - fix ansible 2.12 issues, service_facts issues
    Resolves rhbz#2012316 (EL8)
    Resolves rhbz#2012298 (EL9)
  - timesync - Failure related to missing ntp/ntpd package/service on RHEL-9 host
    Resolves rhbz#2029463 (EL9)
  - logging - add test case for immark quoting issue
    Resolves rhbz#2021678 (EL8)
    Resolves rhbz#2021676 (EL9)
  - cockpit - use existing cert - cockpit_cert, cockpit_private_key
    Resolves rhbz#2021661 (EL8)
    Resolves rhbz#2021028 (EL9)
  - storage - fix ansible 2.12 issues, service_facts issues; workaround lvm, udev issues in tests
    Resolves rhbz#2012316 (EL8)
    Resolves rhbz#2012298 (EL9)
  - ssh - tests_all_options.yml: "assertion": "'StdinNull yes' in config.content | b64decode ", failure
    Resolves rhbz#2029614 (EL8)
    Resolves rhbz#2029427 (EL9)
  - kdump - support reboot required and reboot ok
    Resolves rhbz#2029605 (EL8)
    Resolves rhbz#2029602 (EL9)
  - metrics - sync with latest ansible-pcp
    Resolves rhbz#2012316 (EL8)
    Resolves rhbz#2012298 (EL9)
  - sshd - should detect FIPS mode and handle tasks correctly in FIPS mode
    Resolves rhbz#1979714 (EL8)
    Resolves rhbz#2029634 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.12.0-1
changelog:
  - vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
    this is covered by "make roles work with ansible-core on all platforms" BZ
  - logging - Logging role "logging_purge_confs" option not properly working
    Resolves rhbz#2040812 (EL8)
    Resolves rhbz#2039106 (EL9)
  - kernel_settings role should use ansible_managed in its configuration file
    Resolves rhbz#2047504 (EL8)
    Resolves rhbz#2047506 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.13.0-1
changelog:
  - storage - RFE: Add support for RAID volumes (lvm-only)
    Resolves rhbz#2016514 (EL8)
    Resolves rhbz#2016518 (EL9)
  - storage - RFE: Add support for cached volumes (lvm-only)
    Resolves rhbz#2016511 (EL8)
    Resolves rhbz#2016517 (EL9)
  - metrics - metrics role can't be re-run if the Grafana admin password has been changed
    Resolves rhbz#1967321 (EL8)
    Resolves rhbz#2041632 (EL9)
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)
  - ha_cluster - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
    Resolves rhbz#2041635 (EL8)
    Resolves rhbz#2041634 (EL9)
  - firewall - ensure zone exists and can be used in subsequent operations
    Resolves rhbz#2042541 (EL8)
    Resolves rhbz#2024775 (EL9)
  - network - RFE: Support Routing Tables in static routes in Network Role
    Resolves rhbz#2031521 (EL8)
    Resolves rhbz#2049798 (EL9)
  - network - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
    Resolves rhbz#2034908 (EL8)
    Resolves rhbz#2038957 (EL9)
  - network - Set DNS search setting only for enabled IP protocols
    Resolves rhbz#2041627 (EL8)
    Resolves rhbz#2004899 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.13.1-1
changelog:
  - vpn - template error while templating string: no filter named 'vpn_ipaddr'
    Resolves rhbz#2052103 (EL8)
    Resolves rhbz#2050341 (EL9)
  - kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
    Resolves rhbz#2052105 (EL8)
    Resolves rhbz#2050419 (EL9)
  - remove collection dependencies on rhel because we vendor them in


author: Rich Megginson <rmeggins@redhat.com> - 1.14.0-1
changelog:
  - ha_cluster - set permissions for haclient group
    Resolves rhbz#2049747 (EL8)
    Resolves rhbz#2049754 (EL9)
  - network - Add more bonding options to rhel-system-roles.network
    Resolves rhbz#2008931 (EL8)
    Resolves rhbz#2054435 (EL9)
  - certificate - should consistently use ansible_managed in hook scripts
    Resolves rhbz#2054364 (EL8)
    Resolves rhbz#2054368 (EL9)
  - tlog - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2054363 (EL8)
    Resolves rhbz#2054367 (EL9)
  - vpn - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2054365 (EL8)
    Resolves rhbz#2054369 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.15.0-1
changelog:
  - firewall - ensure target changes take effect immediately
    Resolves rhbz#2057172 (EL8)
    Resolves rhbz#2057164 (EL9)
  - firewall - Firewall RHEL System Role should be able to set default zone
    Resolves rhbz#2022458 (EL8)
    Resolves rhbz#2022461 (EL9)
  - network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
    Resolves rhbz#2053862 (EL8)
    Resolves rhbz#2053861 (EL9)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.15.0-2
changelog:
  - metrics - follow symlinks for the mssql and elasticsearch configuration paths
    Resolves rhbz#2058655 (EL8)
    Resolves rhbz#2058777 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.15.1-1
changelog:
  - kernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves rhbz#2058772 (EL8)
    Resolves rhbz#2058756 (EL9)
  - timesync: basic-smoke test failure in timesync/tests_ntp.yml
    Resolves rhbz#2059293 (EL8)
    Resolves rhbz#2058645 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.16.0-1
changelog:
  - network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
    Resolves rhbz#2064396 (EL8)
    Resolves rhbz#2064401 (EL9)
  - network - bond: fix typo in supporting the infiniband ports in active-backup modekernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves rhbz#2064388 (EL8)
    Resolves rhbz#2064391 (EL9)
  - network - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2057656 (EL8)
    Resolves rhbz#2057657 (EL9)
  - metrics - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2057645 (EL8)
    Resolves rhbz#2057647 (EL9)
  - postfix - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2057661 (EL8)
    Resolves rhbz#2057662 (EL9)
  - postfix - provide the ability to replace config and reset configuration back to default
    Resolves rhbz#2044657 (EL8)
    Resolves rhbz#2058780 (EL9)
  - new tags required in galaxy.yml for Automation Hub


author: Rich Megginson <rmeggins@redhat.com> - 1.16.1-1
changelog:
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    previous fix did not handle some cases
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.16.2-1
changelog:
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    previous fix did not handle some other cases
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.16.3-1
changelog:
  - tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves rhbz#2072749 (EL8)
    Resolves rhbz#2071804 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.17.0-1
changelog:
  - All roles should support running with gather_facts: false
    Resolves: rhbz#2079008 (8.7.0)

  - firewall - Firewall system role Ansible deprecation warning related to "include"
    Resolves: rhbz#2078650 (8.7.0)

  - ha_cluster - ha_cluster - support advanced corosync configuration
    Resolves: rhbz#2065339 (8.7.0)

  - ha_cluster - ha_cluster - support SBD fencing
    Resolves: rhbz#2066868 (8.7.0)

  - ha_cluster - ha_cluster - add support for configuring bundle resources
    Resolves: rhbz#2073518 (8.7.0)

  - kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves: rhbz#2060378 (8.7.0)

  - logging - logging tests fail during cleanup if no cloud-init on system
    Resolves: rhbz#2058807 (8.7.0)

  - logging - Logging - RFE - support template, severity and facility options
    Resolves: rhbz#2075116 (8.7.0)

  - metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
    Resolves: rhbz#2060377 (8.7.0)

  - metrics - metrics - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065215 (8.7.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2079114 (8.7.0)

  - nbde_client - NBDE client system role does not support servers with static IP addresses
    Resolves: rhbz#2071011 (8.7.0)

  - network - [RFE] Extend rhel-system-roles.network feature set to support routing rules
    Resolves: rhbz#1996731 (8.7.0)

  - network - bond: fix typo in supporting the infiniband ports in active-backup mode
    Resolves: rhbz#2064067 (8.7.0)

  - network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
    Resolves: rhbz#2065217 (8.7.0)

  - network - network - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065670 (8.7.0)

  - postfix - postfix - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065216 (8.7.0)

  - postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
    Resolves: rhbz#2065218 (8.7.0)

  - sshd - FIPS mode detection in SSHD role is wrong
    Resolves: rhbz#2075338 (8.7.0)

  - storage - RFE storage Less verbosity by default
    Resolves: rhbz#2056480 (8.7.0)

  - timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml
    Resolves: rhbz#2060379 (8.7.0)

  - tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves: rhbz#2072749 (8.7.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.18.0-1
changelog:
  - firewall - [Improvement] Allow System Role to reset to default Firewalld Settings
    Resolves: rhbz#2043009 (8.7.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2079114 (8.7.0)

  - network - Rework the infiniband support
    Resolves: rhbz#2086869 (8.7.0)

  - sshd - recurse into tests and examples sub-directories when replacing string in files
    the sshd role latest version added sub-directories under tests that need
    role name replacement - so just use find

  - sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
    Resolves: rhbz#2086934 (8.7.0)

  - sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
    Resolves: rhbz#2086935 (8.7.0)

  - storage - storage role cannot set mount_options for volumes
    Resolves: rhbz#2083378 (8.7.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.0-1
changelog:
  - storage - support for creating and managing LVM thin pools/LVs
    Resolves: rhbz#2066876 (8.7.0)

  - firewall - Update Ansible syntax in Firewall system role README.md file examples
    Resolves: rhbz#2081839 (8.7.0)

  - storage role raid_level "striped" is not supported
    Resolves: rhbz#2083426 (8.7.0)

  - network: the controller device is not completely cleaned up in the bond tests.
    Resolves: rhbz#2089868 (8.7.0)

  - firewall - state no longer required for masquerade and ICMP block inversion
    Resolves: rhbz#2093437 (8.7.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093500 (8.7.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.1-1
changelog:
  - storage - fix coverity scan issue in blivet.py
    Resolves: rhbz#2066876 (8.7.0)

  - logging - fix gather_facts/set_vars issue
    Resolves: rhbz#2079008 (8.7.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093500 (8.7.0)

  - sshd - fix tests issue with rhel9 hosts


author: Rich Megginson <rmeggins@redhat.com> - 1.19.3-1
changelog:
  - min_ansible_version is string instead of float

  - fix storage test failures

  - support for ansible-core 2.13

  - firewall - forward_port should accept list of string or list of dict
    Resolves: rhbz#2101607

  - firewall - support add/modify/delete services
    Resolves: rhbz#2100297

  - metrics - document minimum supported redis version required by rhel-system-roles
    Resolves: rhbz#2100285

  - metrics - restart pmie, pmlogger if changed, do not wait for handler
    Resolves: rhbz#2100298

  - network - Support managing the network through nmstate schema
    Resolves: rhbz#2100979

  - storage - support for adding/removing disks to/from storage pools
    Resolves: rhbz#2066880

  - storage - support for attaching cache volumes to existing volumes
    Resolves: rhbz#2066881


author: Rich Megginson <rmeggins@redhat.com> - 1.20.0-1
changelog:
  - Resolves:rhbz#2115159 : cockpit - Add customization of port
  - Resolves:rhbz#2100939 : firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
  - Resolves:rhbz#2115160 : firewall - support for firewall_config - gather firewall facts
  - Resolves:rhbz#2112143 : logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
  - Resolves:rhbz#2115162 : selinux - Added setting of seuser and selevel for completeness
  - Resolves:rhbz#2115161 : nbde_client - Sets proper spacing for parameter rd.neednet=1
  - Resolves:rhbz#2115884 : network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
  - Resolves:rhbz#2109997 : ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
  - Resolves:rhbz#2082391 : storage - [RHEL8] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.2.network
changelog:
  - Resolves:rhbz#2134201 : network - [RFE] Support setting the metric of the default route for initscripts provider
  - Resolves:rhbz#2133856 : network - [RFE] Support the DNS priority
  - Resolves:rhbz#2129620 : network - Support looking up named route table in routing rule
  - includes ha_cluster, vpn - README.md had headings that were too long causing problems
    for md to adoc to html conversion on el8
  - includes changing network role to support ansible-core 2.14
  - includes community.general 6.0.1
  - adds back network bondtests patch - bond tests still failing in beaker


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.3.ssh_sshd_selinux_timesync
changelog:
  - Resolves:rhbz#2143385 : selinux - add support for the 'local' parameter
  - Resolves:rhbz#2143401 : sshd,ssh,timesync - Unexpected templating type error - expected str instance, int found
  - Resolves:rhbz#2130921 : ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles [rhel-8.7] [rhel-8.8.0]


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.5
changelog:
  - Resolves:rhbz#2137667 : cockpit - [RFE] convert cockpit role to use firewall, selinux role, and certificate role
  - Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
  - Resolves:rhbz#2133532 : metrics - [RFE] convert metrics role to use firewall and selinux role
  - Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
  - Resolves:rhbz#2130332 : postfix - [RFE] convert postfix role to use firewall and selinux role
  - Resolves:rhbz#2119600 : vpn - Add parameters shared_key_content, ike, esp, type, leftid, rightid
  - Resolves:rhbz#2130345 : vpn - [RFE] convert vpn role to use firewall and selinux role


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.6
changelog:
  - Resolves:rhbz#2133931 : nbde_server - [RFE] convert nbde_server role to use firewall and selinux role
    previous fix was not complete - needed additional fixes - ansible-lint 6.x fixes


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.7
changelog:
  - Resolves:rhbz#2126960 : nbde_client - must handle clevis-luks-askpass and clevis-luks-askpass@ systemd unit names


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.8
changelog:
  - Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
    fix tests - tests_relp now uses logging_purge_confs


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.9
changelog:
  - Resolves:rhbz#2144876 : ad_integration - [RFE] new role to support AD integration, join to AD domain


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.10
changelog:
  - Resolves:rhbz#2130019 : ha_cluster - [RFE] convert ha_cluster role to use firewall, selinux and certificate role
  - Resolves:rhbz#2143458 : network - Support cloned MAC address
  - Resolves:rhbz#2066864 : podman - [RFE] role for managing podman containers and systemd


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.11
changelog:
  - Resolves:rhbz#2130362 : logging - [RFE] convert logging role to use firewall, selinux role, and certificate role
    fix basic-smoke-test failures


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.13
changelog:
  - Resolves:rhbz#2151355 : storage - [RHEL8] disks_needed need to be set for the raid test cases
  - Resolves:rhbz#2154143 : storage - [RHEL8] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"
  - Resolves:rhbz#2151342 : storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
  - Resolves:rhbz#2151351 : storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.14
changelog:
  - Resolves:rhbz#2143814 : ha_cluster - Allow quorum device configuration
  - Resolves:rhbz#2153081 : ha_cluster - Allow enabled SBD on disabled cluster
  - Resolves:rhbz#2127497 : ha_cluster - use no_log in tasks looping over pot. secret parameters
  - community.general 6.2.0
  - replace community.general with namespace.name for rhc role


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.15
changelog:
  - Resolves:rhbz#2162788 : network - role should support running tests with ANSIBLE_GATHERING=explicit
  - Resolves:rhbz#2149683 : Synchronize automation-related changes from Fedora spec file
  - Fix ansible-test issues in several roles
  - Fix nbde_server tang test failure


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.16
changelog:
  - Resolves:rhbz#2165176 : journald - New role - journald - manage systemd-journald
  - Resolves:rhbz#2159972 : nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data
  - Resolves:rhbz#2164879 : selinux - managing modules is not idempotent
  - fix storage tests_swap and tests_misc - swap size < 128GB on EL7
  - fix podman general-meta issue
  - ha_cluster non-x86_64 tests issue
  - certificate non-x86_64 tests issue


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.18
changelog:
  - Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
  - ad_integration - fix issue with using the network role to configure DNS


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.19
changelog:
  - Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
  - vendor in modules required by rhc role
  - Resolves:rhbz#2167941 : ha_cluster - Fix stonith watchdog timeout


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-1
changelog:
  - Resolves:rhbz#2168733 : network - RedHat Role rhel-system-roles.network should route traffic via correct bond


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-2
changelog:
  - Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
  - remove role until https://bugzilla.redhat.com/show_bug.cgi?id=2171829 is fixed


author: Rich Megginson <rmeggins@redhat.com> - 1.21.1-1
changelog:
  - Resolves:rhbz#2144877 : rhc - new role for subscription management/registration/insights
  - includes the fix for tests_proxy.yml selinux and some test refactoring


author: Sergei Petrosian <spetrosi@redhat.com> - 1.21.1-2
changelog:
  - Resolves: rhbz#2185002 : Remove doc fragments from vendored modules
  - Build collection artifact in the same directory on Fedora and RHEL


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.3
changelog:
  - fix issues in some tests with ANSIBLE_GATHERING=explicit
  - add testing for fingerprints in config files
  - fix podman jinja 2.7 issue
  - sshd - skip firewall testing if not supported


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.6
changelog:
  - Resolves:rhbz#2186910 : fingerprint in config files managed by roles
  - Resolves:rhbz#2190478 : ha_cluster - Add possibility to load SBD watchdog kernel modules
  - Resolves:rhbz#2190483 : ha_cluster - support for resource and operation defaults
  - Resolves:rhbz#2151371 : postgresql - [RFE] system role for PostgreSQL management
  - Resolves:rhbz#2179016 : rhc - [RFE] New role for Red Hat subscription management, insights management [rhel-8.9.0]
  - Resolves:rhbz#2190480 : ha_cluster - use pcs to setup qdevice certificates if available
  - Resolves:rhbz#2186198 : spec: Remove doc fragments from vendored modules
  - Resolves:rhbz#2190500 : roles should support running with gather_facts: false
  - Resolves:rhbz#2175326 : use ansible-galaxy collection build/install instead of tar
  - Resolves:rhbz#2186908 : rhc - RHC system role: activation key registration fails if system is already registered
  - Resolves:rhbz#2190499 : selinux - failing test - sshd/tests_firewall_selinux.yml - No package matching 'firewalld' found available, installed or updated


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.7
changelog:
  - remove upstream only docs from README.md files
  - python3-setuptools is now required for release_collection.py
  - fix ruamel issue described at https://github.com/linux-system-roles/auto-maintenance/pull/272
  - Resolves:rhbz#2209441 : rhc - system role does not apply Insights tags
  - Resolves:rhbz#2191702 : tlog - use the proxy provider - the files provider is deprecated in sssd
  - Resolves:rhbz#2190500 : roles should support running with gather_facts: false
  - READMEs for all roles contain only downstream applicable docs
  - All roles/tests now work with ansible-core 2.15
  - Fix some roles to work with remove-cloud-init


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.8
changelog:
  - Resolves:rhbz#2181661 : storage - [RFE] user-specified mount point owner and permissions
  - Resolves:rhbz#2193057 : storage - Cannot set chunk size for RAID: Unsupported parameters for (blivet) module: pools.raid_chunk_size
  - Resolves:rhbz#2211247 : storage - Failed to commit changes to disk: Failed to format device: Input/output error


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.9
changelog:
  - Resolves:rhbz#2211273 : network - Support configuring auto-dns setting
  - Resolves:rhbz#2211778 : rhc - implement rhc_proxy.scheme
  - Resolves:rhbz#2141961 : storage - RFE for the storage system role to support configuring the stripe size for RAID LVM volumes
  - Resolves:rhbz#2211271 : selinux - use restorecon -T 0 on supported platforms
  - Resolves:rhbz#2211247 : storage - Failed to commit changes to disk: Failed to format device: Input/output error


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.11
changelog:
  - Resolves:rhbz#2211272 : kdump - support auto_reset_crashkernel, dracut_args, deprecate /etc/sysconfig/kdump


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.13
changelog:
  - Resolves:rhbz#2216759 : ssh - add ssh_backup option with default true
  - Resolves:rhbz#2216521 : firewall - Don't install python(3)-firewall it's a dependency of firewalld


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.14
changelog:
  - Resolves:rhbz#2218899 : storage - [RHEL8] Unexpected behavior when creating ext4 filesystem with invalid parameter


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.15
changelog:
  - Resolves:rhbz#2218204 : certificate - add mode parameter to change permissions for cert files
  - Resolves:rhbz#2218595 : network - Support no-aaaa DNS option


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.16
changelog:
  - Resolves:rhbz#2220963 : podman - allow container networking configuration
  - Resolves:rhbz#2220961 : podman - support for healthchecks and healthcheck actions
  - Resolves:rhbz#2220962 : podman - support quadlet units
  - Resolves:rhbz#2224388 : systemd - system role for managing systemd units
  - Resolves:rhbz#2223036 : ALL - facts being gathered unnecessarily
  - Resolves:rhbz#2186057 : certificate - rhel-system-roles.certificate does not re-issue after updating key_size
  - Resolves:rhbz#2222433 : firewall - Check mode fails when creating new firewall service
  - Resolves:rhbz#2222809 : firewall - should have option to disable conflicting services
  - Resolves:rhbz#2222808 : firewall - when firewalld.service is masked, firewall role fails
  - Resolves:rhbz#2224094 : storage - RAID volume pre cleanup - remove existing data from member disks as needed before creation


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.19
changelog:
  - Resolves RHEL-866 : podman - use getsubids to look for subuid, subgid for IdM support
  - Resolves RHEL-858 : podman - allow to not pull images, continue if image pull fails
  - Resolves:rhbz#2224648 : firewall - fix: reload on resetting to defaults
  - Resolves:rhbz#2226077 : podman - Podman system role:  Unable to use podman_registries_conf to set unqualified-search-registries
  - Resolves RHEL-918 : firewall - Ansible RHEL firewall system role not idempotent when configuring the interface using the role in rhel9
  - Resolves RHEL-907 : kdump - use failure_action instead of default on EL9 and later
  - Resolves RHEL-899 : firewall - Check mode fails with replacing previous rules
  - Resolves:rhbz#2227823 : rhc - baseurl in rhsm.conf is empty when rhc_baseurl is not specified


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.20
changelog:
  - Resolves:rhbz#2140880 : firewall - missing module in linux-system-roles.firewall to create an ipset


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-1
changelog:
  - Resolves:rhbz#2233183 : ad_integration - red hat "rhel system role" ad_integration leaks credentials when in check_mode
  - Resolves:rhbz#2232391 : kdump - role: "Write new authorized_keys if needed" task idempotency issues
  - Resolves:rhbz#2232392 : kdump - system role fails if kdump_ssh_user doesn't have a .ssh/authorized_keys file in home directory
  - Resolves RHEL-1398 : kdump - fix: ensure .ssh directory exists for kdump_ssh_user on kdump_ssh_server
  - Resolves RHEL-1500 : kdump - fix: Ensure authorized_keys management works with multiple hosts
  - Resolves:rhbz#2224648 : firewall - fix: reload on resetting to defaults
  - Resolves RHEL-1496 : firewall - fix: files: overwrite firewalld.conf on previous replaced
  - Resolves RHEL-1498 : storage - fix: use stat.pw_name, stat.gr_name instead of owner, group
    sshd README remove upstream only docs
    first RC for 1.22.0 rhel 8.9 and 9.3
    fix firewall reload test gather facts


author: Sergei Petrosian <spetrosi@redhat.com> - 1.23.0-1
changelog:
  - Resolves: RHEL-5345 spec - Remove with_html, instead use built-in .README.html
  - Resolves: RHEL-5985 ansible-sshd - Manage SSH certificates
  - rhbz#2224648: Remove ad_integration patch and use the latest ad_integration
    version instead. Vendor community-general.ini_files for
  - RHEL-1119: ad_integration: Support for dynamic DNS Updates
  - Change link to open new issue in galaxy.yml from deprecated BZ to Jira


author: Sergei Petrosian <spetrosi@redhat.com> - 1.23.0-2
changelog:
  - RHEL-1119: ad_integration: Support for dynamic DNS Updates
    Update to a new version with fixed tests


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.1
changelog:
  - Resolves: RHEL-15872 :  - RHEL for Edge support in system roles
    except for nbde_client, rhc, metrics
  - Resolves: RHEL-17667 : ad_integration - feat: Add sssd custom settings
  - Resolves: RHEL-16542 : fapolicyd - feat: Import code for fapolicyd system role
  - Resolves: RHEL-14090 : ha_cluster - [RFE] HA Cluster system role should be able to enable Resilient Storage repository
  - Resolves: RHEL-4624 : ha_cluster - [FutureFeature] Allow ha_cluster role to configure fencing topology
  - Resolves: RHEL-3264 : ha_cluster - [FutureFeature] Allow ha_cluster role to configure all qdevice options
  - Resolves: RHEL-3354 : kdump - fix: retry read of kexec_crash_size
  - Resolves: RHEL-15933 : logging - feat: Add support for the global config option preserveFQDN with a new logg…
  - Resolves: RHEL-15440 : logging - feat: Add support for general queue and general action parameters
  - Resolves: RHEL-15038 : logging - fix: check that logging_max_message_size is set, not rsyslog_max_message_size
  - Resolves: RHEL-16501 : network - Ansible RHEL network system role issue with ipv6.routing-rules the prefix length for 'from' cannot be zero"
  - Resolves: RHEL-15871 : selinux - fix: Use `ignore_selinux_state` module option
  - Resolves: RHEL-16213 : storage - feat: Support for creating volumes without a FS


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.2
changelog:
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    vpn - fixed issue with test cleanup


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.3
changelog:
  - Resolves: RHEL-17874 : ha_cluster - high-availability firewall service is not added on qdevice node


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.4
changelog:
  - Resolves: RHEL-15872 : RHEL for Edge support in system roles
    updated several roles with ostree improvements
    metrics role support for ostree
  - Resolves: RHEL-16542 : fapolicyd - feat: Import code for fapolicyd system role
    several role improvements
  - Resolves: RHEL-4684 : ha_cluster - fix: set sbd.service timeout based on SBD_START_DELAY
  - Resolves: RHEL-19047 : logging - fix: avoid conf of RatelimitBurst when RatelimitInterval is zero
  - Resolves: RHEL-18170 : metrics - [RFE] Metrics system role support for configuring PMIE webhooks
  - Resolves: RHEL-19242 : podman - fix: add no_log: true for tasks that can log secret data
  - Resolves: RHEL-18963 : postgresql - feat: enable using postgresql 16
  - Resolves: RHEL-16977 : rhc - rhc: support RHEL 7 managed nodes
  - Resolves: RHEL-19042 : selinux - fix: no longer use "item" as a loop variable
  - Resolves: RHEL-19044 : selinux - fix: Print an error message when module to be created doesn't exist
  - Resolves: RHEL-14022 : storage - Basic support for creating shared logical volumes


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.7
changelog:
  - Add ExcludeArch i686 to fix build issues with ansible-core
  - Resolves: RHEL-21946 : keylime_server - won't detect registrar start failure


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.9
changelog:
  - Resolves: RHEL-21383 : ad_integration - feat: add ad_integration_preserve_authselect_profile
  - Resolves: RHEL-21134 : ad_integration - feat: Add SSSD parameters support
  - Resolves: RHEL-21123 : journald - feat: Add support for ForwardToSyslog
  - Resolves: RHEL-22310 : podman - fix: cast secret data to string in order to allow JSON valued strings
  - Resolves: RHEL-21402 : podman - fix: name of volume quadlet service should be basename-volume.service
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9
  - Resolves: RHEL-16975 : rhc - rhc: new rhc_insights.ansible_host parameter


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.10
changelog:
  - Resolves: RHEL-14022 : storage - Basic support for creating shared logical volumes
    GFS2 support in blivet is enabled


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.11
changelog:
  - Resolves: RHEL-21400 : postgresql - PostgreSQL system role: unable to install PostgreSQL version 15 on RHEL 9
  - Resolves: RHEL-23309 : storage - tests_lvm_auto_size_cap_nvme_generated failed at "Assert expected size is actual size"


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-3
changelog:
  - Resolves: RHEL-58465 :  - package rhel-system-roles.noarch does not provide docs for ansible-doc [rhel-8.10.z]
  - Resolves: RHEL-58494 : ad_integration - fix: Sets domain name lower case in realmd.conf section header [rhel-8.10.z]
  - Resolves: RHEL-58917 : bootloader - bootloader role tests do not work on ostree [rhel-8.10.z]
  - Resolves: RHEL-45711 : bootloader - fix: Set user.cfg path to /boot/grub2/ on EL 9 UEFI [rhel-8]
  - Resolves: RHEL-58515 : cockpit - cockpit install all wildcard match does not work in newer el9 [rhel-8.10.z]
  - Resolves: RHEL-58485 : logging - RFE - system-roles - logging: Add truncate options for local file inputs [rhel-8.10.z]
  - Resolves: RHEL-58481 : logging - redhat.rhel_system_roles.logging role fails to process logging_outputs: of type: "custom" [rhel-8.10.z]
  - Resolves: RHEL-58477 : logging - [RFE] Add the umask settings or enable a variable in linux-system-roles.logging [rhel-8.10.z]
  - Resolves: RHEL-37550 : logging - Setup imuxsock using rhel-system-roles.logging causing an error EL8
  - Resolves: RHEL-58519 : nbde_client - feat: Allow initrd configuration to be skipped [rhel-8.10.z]
  - Resolves: RHEL-58525 : podman - fix: proper cleanup for networks; ensure cleanup of resources [rhel-8.10.z]
  - Resolves: RHEL-58511 : podman - fix: grab name of network to remove from quadlet file [rhel-8.10.z]
  - Resolves: RHEL-58507 : podman - Create podman secret when skip_existing=True and it does not exist [rhel-8.10.z]
  - Resolves: RHEL-58503 : podman - fix: do not use become for changing hostdir ownership, and expose subuid/subgid info [rhel-8.10.z]
  - Resolves: RHEL-58498 : podman - fix: use correct user for cancel linger file name [rhel-8.10.z]
  - Resolves: RHEL-58460 : podman - redhat.rhel_system_roles.podman fails to configure and run containers with podman rootless using different username and groupname. [rhel-8.10.z]
  - Resolves: RHEL-58473 : sshd - second SSHD service broken [rhel-8.10.z]
  - Resolves: RHEL-58469 : storage - rhel-system-role.storage is not idempotent [rhel-8.10.z]
  - Resolves: RHEL-58489 : timesync - System Roles: No module documentation [rhel-8.10.z]


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-4
changelog:
  - Resolves: RHEL-58460 : podman - redhat.rhel_system_roles.podman fails to configure and run containers with podman rootless using different username and groupname. [rhel-9.4.z]
  - fix issue with podman error removing kube specs on 8.8 and 9.2 managed nodes - covered by tests_basic.yml
  - https://github.com/linux-system-roles/podman/pull/186
  - fix issue with missing grubby testing on el8 ostree
  - https://github.com/linux-system-roles/podman/pull/187
  - fix issue with podman not working on 8.8/9.2
  - https://github.com/linux-system-roles/podman/pull/188


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-32
changelog:
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069)
  - Fix IMA signature lengths assumed constant (RHEL-39896)
  - Fix root relocation regression (RHEL-49494)
  - Report unsafe symlinks during installation as a specific case (RHEL-39897)
  - Don't segfault on missing priority tag (RHEL-39894)


author: Jarod Wilson <jarod@redhat.com> - 5-4
changelog:
  - Make hooks more resilient to missing info
  - Error out with a useful message when necessary info isn't there
  - Resolves: rhbz#1627122


author: Colin Walters <walters@verbum.org> - 2022.10.90.g4abaf4b4-4
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/4abaf4b4
    Resolves: rhbz#2118774


author: Colin Walters <walters@verbum.org> - 2022.10.94.g89f58028-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/89f58028f0bea5b6fa59bdb3506078e09957ec00
  - Resolves: rhbz#2122289
  - Resolves: rhbz#2122299


author: Colin Walters <walters@verbum.org> - 2022.10.97.gade6df33-2
changelog:
  - Update to latest https://github.com/coreos/rpm-ostree/tree/rhel8 at commit
    https://github.com/coreos/rpm-ostree/commit/ac182cb920f84946bb155e9cf061db7f5f26e917
  - Resolves: rhbz#2122289


author: Colin Walters <walters@verbum.org> - 2022.10.112.g3d0ac35b-3
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4311/commits/a0f1275dfbd835b704355d095e610ac1f1254f25
    Resolves: rhbz#2170579


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.10.117.g52714b51-2
changelog:
  - Backport fb97c48f3 & eae7e1d8
    https://github.com/coreos/rpm-ostree/commit/fb97c48f3cd070c1ad559f3f43f86ad6548f6b02
    https://github.com/coreos/rpm-ostree/commit/eae7e1d8d692b5ce6d3d6eef29abbd7512ae4682
    Resolves: rhbz#2229804


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Radovan Sroka <rsroka@redhat.com> - 8.32.0-1
changelog:
  - initial clean build with plugins from rhel7
  - removed plugins:
    - libdbi
    - omruleset
    - pmrfc3164sd
  - imported from fedora26


author: Marek Tamaskovic <mtamasko@redhat.com> - 8.35.0-1
changelog:
  - rebase to 8.35
  - rebased patches from 8.32 to 8.35
    - fixed imjournal-duplicates
    - fixed imjournal-default-tag
    - fixed service patch
    - fixed in upstream deserialize-property-name


author: Jiri Vymazal <jvymazal@redhat.com> - 8.35.0-1
changelog:
  - spec file cleanup
  - enabled kafka and hiredis modules
    resolves: rhbz#1542497
    resolves: rhbz#1542504
  - renamed patch fixing imjournal duplicating messages
    resolves: rhbz#1544394


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - rebase to 8.36
  - removed hiredis module
  - removed omudpspoof module
    resolves: rhbz#1593762
  - finished converting config to new-style syntax


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - changed PID file name to follow upstream
  - removed config option to disable stdlog as it is now
    disabled by default


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-3
changelog:
  - dropped json_nonoverwrite patch as there is no reason for
    keeping it
  - renumbered rest of patches
  - added release number to AC_INIT to have it in package error logs


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-1
changelog:
  - rebase to 8.37.0
    resolves: rhbz#1613880
    resolves: rhbz#1564054
    resolves: rhbz#1598218
    - dropped invalid statefile patch - upstreamed
    - dropped imjournal duplicates patch - upstreamed
    resolves: rhbz#1544394
  - renumbered default tag patch and fitted onto rebased version


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-5
changelog:
  - rebuild for rebased dependencies
  - dependency cleanup and sorted sub-packages in spec
    resolves: rhbz#1613880


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: John Kacur <jkacur@redhat.com> - 5.14.0-6
changelog:
  - Forward port the tests directory for ci testing
  Resolves: rhbz#2196611
  jiraProject == RHELPLAN-156801


author: John Kacur <jkacur@redhat.com> - 6.6.0-1
changelog:
  Update to rtla in linux-6.6.0
  - Add patch to use SYS_gettid and add -lpthread to the Makefile
  Resolves: RHEL-10081


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-111
changelog:
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-112
changelog:
  - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
    (CVE-2023-36617)
    Resolves: RHEL-5614
  - Fix Buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34125
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34117
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33867
  - Fix REXML DoS parsing an XML with many `<`s in an attribute value.
    (CVE-2024-35176)
    Resolves: RHEL-37877


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2096345
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2096345
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2096345
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 2.7.8-139
changelog:
  - Upgrade to Ruby 2.7.8.
    Resolves: rhbz#2189465
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2109431
    Resolves: rhbz#2110981
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096346
    Resolves: rhbz#2000056
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-142
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-36189
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-36193
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-36196
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-36205
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-36198
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-36200
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-36203


author: Jarek Prokop <jprokop@redhat.com> - 3.1.4-142
changelog:
  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-28565
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-28564
  - Fix ReDos vulnerability in URI.
    Resolves: RHEL-28567
    Resolves: RHEL-28576
  - Fix ReDos vulnerability in Time.
    Resolves: RHEL-28566
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-28569


author: Jarek Prokop <jprokop@redhat.com> - 3.1.4-142
changelog:
  - Upgrade to Ruby 3.1.4.
    Resolves: RHEL-5584
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix ReDos vulnerability in URI.
    Resolves: CVE-2023-28755
    Resolves: CVE-2023-36617
  - Fix ReDos vulnerability in Time.
    Resolves: CVE-2023-28756
  - Make RDoc soft dependency in IRB.
    Resolves: RHEL-5615


author: Jun Aruga <jaruga@redhat.com> - 3.1.5-143
changelog:
  - Upgrade to Ruby 3.1.5.
    Resolves: RHEL-35748
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35749
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35750
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35751


author: Jarek Prokop <jprokop@redhat.com> - 3.1.7-145
changelog:
  - Upgrade to Ruby 3.1.7.
    Resolves: RHEL-55408
  - Fix DoS vulnerability in REXML. (CVE-2024-39908)
    Resolves: RHEL-57051
  - Fix DoS vulnerability in REXML. (CVE-2024-43398)
    Resolves: RHEL-56002


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55409
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57049
    Resolves: RHEL-57054
    Resolves: RHEL-57069
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52783


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-20
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-7
changelog:
  - Port from deprecated add_maven_depmap to mvn_install
  - Remove unused BR felix-framework
  - Fix unowned directory


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-11
changelog:
  - Correct license tag to include CC0 and Public Domain
  - Repack tarball to remove possibly proprietary binaries
  - Use %license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-13
changelog:
  - Stop scaladoc from trying to bundle non-existent resources
  - Temporarly disable docs generation during build


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2221695)
  - Fixed CCE link URL (RHBZ#2178516)
  - align remediations with rule description for rule configuring OpenSSL cryptopolicy (RHBZ#2192893)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2167999)
  - Fixed rules related to AIDE configuration (RHBZ#2175684)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2184487)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2209073)
  - improved and unified OVAL checks checking for interactive users (RHBZ#2157877)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155789)
  - unify OVAL checks to correctly identify interactive users (RHBZ#2178740)
  - make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2170530)
  - Fixed excess quotes in journald configuration files (RHBZ#2169857)
  - rules related to polyinstantiated directories are not applied when building images for Image Builder (RHBZ#2130182)
  - evaluation and remediation of rules related to mount points have been enhanced for Image Builder (RHBZ#2130185)
  - do not enable FIPS mode when creating hardened images for Image Builder (RHBZ#2130181)
  - Correct URL used to download CVE checks (RHBZ#2222583)
  - mention exact required configuration value in description of some PAM related rules (RHBZ#2175882)
  - make mount point related rules not applicable when no such mount points exist (RHBZ#2176008)
  - improve checks determining if FIPS mode is enabled (RHBZ#2129100)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25250)
  - Increase CIS standards coverage regarding SSH and cron (RHEL-1314)
  - Increase compatibility of accounts_tmout rule for ksh (RHEL-16896 and RHEL-1811)
  - Align Ansible and Bash remediation in sssd_certificate_verification rule (RHEL-1313)
  - Add a warning to rule service_rngd_enabled about rule applicability (RHEL-1819)
  - Add rule to terminate idle user sessions after defined time (RHEL-1801)
  - Allow spaces around equal sign in /etc/sudoers (RHEL-1904)
  - Add remediation for rule fapolicy_default_deny (RHEL-1817)
  - Fix invalid syntax in file /usr/share/scap-security-guide/ansible/rhel8-playbook-ospp.yml (RHEL-19127)
  - Refactor ensure_pam_wheel_group_empty (RHEL-1905)
  - Prevent remediation of display_login_attempts rule from creating redundant configuration entries (RHEL-1809)
  - Update PCI-DSS to v4 (RHEL-1808)
  - Fix regex in Ansible remediation of configure_ssh_crypto_policy (RHEL-1820)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Jan Černý <jcerny@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
  - Fix spec file to build using Python 3
  - Fix License because upstream changed to BSD-3


author: Watson Sato <wsato@redhat.com> - 0.1.40-3
changelog:
  - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
  - Only build content for rhel8 products


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Add RHEL8 Product with OSPP4.2 and PCI-DSS Profiles


author: Matěj Týč <matyc@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - System-wide crypto policies are introduced for RHEL8
  - Patches introduced the RHEL8 product were dropped, as it has been upstreamed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-3
changelog:
  - Added FIPS mode rule for the OSPP profile.
  - Split the installed_OS_is certified rule.
  - Explicitly disabled OSP13, RHV4 and Example products.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-5
changelog:
  - Fixed profiles descriptions, so they don't contain literal '\n'.
  - Made the configure_kerberos_crypto_policy OVAL more robust.
  - Made OVAL for libreswan and bind work as expected when those packages are not installed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-6
changelog:
  - Further fix of profiles descriptions, so they don't contain literal '\'.
  - Removed obsolete sshd rule from the OSPP profile.


author: Jan Černý <jcerny@redhat.com> - 0.1.42-7
changelog:
  - Introduce Podman backend for SSG Test suite
  - Update bind and libreswan crypto policy test scenarios


author: Matěj Týč <matyc@redhat.com> - 0.1.42-9
changelog:
  - Fixed Crypto Policy OVAL for NSS
  - Got rid of rules requiring packages dropped in RHEL8.
  - Profile descriptions fixes.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.42-11
changelog:
  - Assign CCE to rules from OSPP profile which were missing the identifier.
  - Fix regular expression for Audit rules ordering
  - Account for Audit rules flags parameter position within syscall
  - Add remediations for Audit rules file path
  - Add Audit rules for modification of /etc/shadow and /etc/gshadow
  - Add Ansible and Bash remediations for directory_access_var_log_audit rule
  - Add a Bash remediation for Audit rules that require ordering


author: Matěj Týč <matyc@redhat.com> - 0.1.44-2
changelog:
  - Ported changelog from late 8.0 builds.
  - Disabled build of the OL8 product, updated other components of the cmake invocation.


author: Milan Lysonek <mlysonek@redhat.com> - 0.1.45-2
changelog:
  - Use crypto-policy rules in OSPP profile.
  - Re-enable FIREFOX and JRE product in build.
  - Change test suite logging message about missing profile from ERROR to WARNING.
  - Build only one version of SCAP content at a time.


author: Watson Sato <wsato@redhat.com> - 0.1.46-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.46 release
  - Align OSPP Profile with Common Criteria Requirements (RHBZ#1714798)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.48-4
changelog:
  - Drop rsyslog rules from OSPP profile
  - Update COBIT URI
  - Add rules for strong source of RNG entropy
  - Enable build of RHEL8 STIG Profile (RHBZ#1755447)
  - STIG profile: added rsyslog rules and updated SRG mappings
  - Split audit rules according to audit component (RHBZ#1791312)


author: Watson Sato <wsato@redhat.com> - 0.1.50-2
changelog:
  - Fix Ansible for no_direct_root_logins
  - Fix Ansible template for SELinux booleans
  - Add CCEs to rules in RHEL8 CIS Profile (RHBZ#1760734)


author: Watson Sato <wsato@redhat.com> - 0.1.50-3
changelog:
  - HIPAA Profile (RHBZ#1832760)
    - Enable build of RHEL8 HIPAA Profile
    - Add kickstarts for HIPAA
  - CIS Profile (RHBZ#1760734)
    - Add Ansible fix for sshd_set_max_sessions
    - Add CIS Profile content attribution to Center for Internet Security


author: Matěj Týč <matyc@redhat.com> - 0.1.50-10
changelog:
  - Update the scapval invocation (RHBZ#1815007)
  - Re-added the SSH Crypto Policy rule to OSPP, and added an SRG to the rule (RHBZ#1815007)
  - Change the spec file macro invocation from patch to Patch
  - Fix the rekey limit in ssh/sshd rules (RHBZ#1813066)


author: Matěj Týč <matyc@redhat.com> - 0.1.50-11
changelog:
  - fixed link in a grub2 rule description (rhbz#1854854)
  - fixed selinux_all_devicefiles_labeled rule (rhbz#1852367)
  - fixed no_shelllogin_for_systemaccounts on ubi8 (rhbz#1836873)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-3
changelog:
  - Enforce pam_wheel for "su" in the OSPP profile (RHBZ#1884062)
  - Fix case insensitive checking in rsyslog_remote_tls (RHBZ#1899032)
  - Exclude kernel_trust_cpu_rng related rules on s390x (RHBZ#1899041)
  - Create a SSH_USE_STRONG_RNG rule for SSH client and select it in OSPP profile (RHBZ#1884067)
  - Disable usbguard rules on s390x architecture (RHBZ#1899059)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-4
changelog:
  - Fix description of rule installed_OS_is_vendor_supported (RHBZ#1914193)
  - Fix RHEL6 CPE dictionary (RHBZ#1899059)
  - Fix SRG mapping references for ssh_client_rekey_limit and use_pam_wheel_for_su (RHBZ#1914853)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Update to the latest upstream release (RHBZ#1889344)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1778188)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.57-2
changelog:
  - Update Ansible login banner fixes to avoid unnecessary updates (RHBZ#1857179)
  - Include tests for Ansible Playbooks that remove and reintroduce files.
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1993056) 
  - Improve Audit Rules remediation to group similar syscalls (RHBZ#1876483)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#1993197)
  - Add Kickstart files for ISM profile (RHBZ#1955373)
  - Fix broken RHEL7 documentation links (RHBZ#1966577)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Fix remaining audit rules file permissions (RHBZ#1993056)
  - Mark a STIG service rule as machine only (RHBZ#1993056)
  - Fix a remaining broken RHEL7 documentation link. (RHBZ#1966577)


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release. (RHBZ#2014485)
  - Add a VM wait handling to fix issues with tests.


author: Watson Sato <wsato@redhat.com> - 0.1.60-2
changelog:
  - Update RHEL8 STIG profile to V1R5 (RHBZ#2049555)
  - Align audit rules for OSPP profile (RHBZ#2000264)
  - Fix rule selection in ANSSI Enhanced profile (RHBZ#2053587)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2049555)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2049555)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2026301)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2030966)
  - Update GRUB2 rule descriptions (RHBZ#2014485)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014485)
  - Set rule package_krb5-workstation_removed as not applicable on RHV (RHBZ#2055149)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-8
changelog:
  - Update to ensure a sysctl option is not defined in multiple files (RHBZ#2079241)
  - Update RHEL8 STIG profile to V1R6 (RHBZ#2079241)


author: Watson Sato <wsato@redhat.com> - 0.1.60-9
changelog:
  - Fix validation of OVAL 5.10 content (RHBZ#2079241)
  - Fix Ansible sysctl remediation (RHBZ#2079241)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Rebase scap-security-guide package to version 0.1.73 (RHEL-36733)
  - Change crypto policy used in the CUI profile to FIPS (RHEL-30346)
  - Fix file path identification in Rsyslog configuration (RHEL-17202)
  - Use a correct chrony server address in STIG profile (RHEL-1814)
  - Don't BuildRequire /usr/bin/python3 (RHEL-2244)


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Rebase to a new upstream release 0.1.74 (RHEL-53913)
  - Improve Rsyslog rules to support RainerScript syntax (RHEL-1816)
  - Update password hashing settings for ANSSI-BP-028 (RHEL-54390)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.74-3
changelog:
  - fix build
  - keep firefox and rhel8 ds-1.2 files in the package in form of symbolic links to regular ds files


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Rebase scap-security-guide to the latest upstream version (RHEL-66153)
  - detection of Grub2 kernel command line arguments has been enhanced to cover more use cases (RHEL-53365)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-9
changelog:
  - use %{?dist} instead of %{dist} (#1725774)
  - scl-utils-build own the pkgconfig directory by %scl_files (#1431962)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-10
changelog:
  - use %__python3 instead of macro %__python (#1733526)
  - corrected unescaped per-cent character in the changelog (#1734103)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Justin M. Forbes <jforbes@redhat.com> 0.5.1-2
changelog:
  - Ugly hacks to make package noarch and available for arch that cannot build it.
  - Disable useless debuginfo


author: Cole Robinson <crobinso@redhat.com> - 1.7.0-1
changelog:
  - Rebased to version 1.7.0
  - Support for virtio-scsi
  - Improved USB drive support
  - Several USB controller bug fixes and improvements


author: Cole Robinson <crobinso@redhat.com> - 1.7.1-1
changelog:
  - Rebased to version 1.7.1
  - Initial support for booting from USB attached scsi (USB UAS) drives
  - USB EHCI 64bit controller support
  - USB MSC multi-LUN device support
  - Support for booting from LSI SCSI controllers on emulators
  - Support for booting from AMD PCscsi controllers on emulators


author: Cole Robinson <crobinso@redhat.com> - 1.7.2-1
changelog:
  - Rebased to version 1.7.2
  - Support for ICH9 host chipset ("q35") on emulators
  - Support for booting from LSI MegaRAID SAS controllers
  - Support for using the ACPI PM timer on emulators
  - Improved Geode VGA BIOS support.
  - Several bug fixes


author: Cole Robinson <crobinso@redhat.com> - 1.7.3-1
changelog:
  - Rebased to version 1.7.3
  - Initial support for using SeaBIOS as a UEFI CSM
  - Support for detecting and using ACPI reboot ports.
  - Non-standard floppy sizes now work again with recent QEMU versions.
  - Several bug fixes and code cleanups
  - Again fix vgabios obsoletes (bz #981147)


author: Cole Robinson <crobinso@redhat.com> - 1.7.3.1-1
changelog:
  - Rebased to version 1.7.3.1
  - Fix USB EHCI detection that was broken in hlist conversion of
    PCIDevices.
  - Fix bug in CBFS file walking with compressed files.
  - acpi: sync FADT flags from PIIX4 to Q35


author: Cole Robinson <crobinso@redhat.com> - 1.7.4-1
changelog:
  - Rebased to version 1.7.4
  - Support for obtaining ACPI tables directly from QEMU.
  - Initial support for XHCI USB controllers (initially for QEMU only).
  - Support for booting from "pvscsi" devices on QEMU.
  - Enhanced floppy driver - improved support for real hardware.
  - coreboot cbmem console support.


author: Cole Robinson <crobinso@redhat.com> - 1.7.5-1
changelog:
  - Rebased to version 1.7.5
  - Support for obtaining SMBIOS tables directly from QEMU.
  - XHCI USB controller fixes for real hardware
  - seavgabios: New driver for "coreboot native vga" support
  - seavgabios: Improved detection of x86emu versions with incorrect
    emulation.
  - Several bug fixes and code cleanups


author: Cole Robinson <crobinso@redhat.com> - 1.8.0-1
changelog:
  - Rebased to version 1.8.0
  - Initial support for USB3 hubs
  - Initial support for SD cards (on QEMU only)
  - Initial support for transitioning to 32bit mode using SMIs (on QEMU TCG
    only)
  - SeaVGABIOS improvements


author: Paolo Bonzini <pbonzini@redhat.com> - 1.9.1-3
changelog:
  - Include MPT Fusion driver, in preparation for QEMU 2.6
  - Include XHCI and SD in 128k ROM, sacrifice bootsplash instead


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.11.0-1.el8
changelog:
  - Creating RHEL-8.0 initial branch based on 1.11.0
  - Resolves: bz#1515300
  - (Prepare seabios for RHEL-8.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-1.el8
changelog:
  - Rebase to 1.12.0 [bz#1666134]
  - Resolves: bz#1666134
    (Rebase seabios for RHEL-AV release in virt:8.0.0 stream)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-3.el8
changelog:
  - seabios-rh-add-configs-for-ramfb-and-bochs-display.patch [bz#1724098]
  - Resolves: bz#1724098
    (enable device: bochs-display (seabios))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-4.el8
changelog:
  - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
  - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
  - Resolves: bz#1705212
    (Backport 1.12.1 patches to RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-5.el8
changelog:
  - seabios-add-get_keystroke_full-helper.patch [bz#1693031]
  - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
  - Resolves: bz#1693031
    (On systems with more than 10 available boot devices, keys are uninintuitive)


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-4
changelog:
  - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2227373]
  - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2227373]
  - Resolves: bz#2227373
    ("No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks.)


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-4
changelog:
  - Disable/remove neverallow options in frontends (#2184141)
  - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


