# changelog

author: Jason Montleon <jmontleo@redhat.com> 0.8.0-1
changelog:
  - Fix tag condition (fabian@fabianism.us)
  - Add watch to dynamic client (#221) (fabian@fabianism.us)
  - Pin flake8 (fabian@fabianism.us)
  - Do not decode response data in Python2 (#225)
    (16732494+wallecan@users.noreply.github.com)
  - ResourceContainer does not contain delete method (#227)
    (mosonkonrad@gmail.com)
  - Add basic documentation for dynamic client verbs to README (#222)
    (fabian@fabianism.us)
  - Add support for *List kinds (#213) (fabian@fabianism.us)
  - fix deployment conditional (fabian@fabianism.us)
  - Bump version + requirements (fabian@fabianism.us)
  - Add validate helper function (#199) (will@thames.id.au)
  - DynamicApiError: add a summary method (#211) (pierre-louis@libregerbil.fr)
  - Allow less strict kubernetes version requirements (#207) (will@thames.id.au)
  - Add behavior-based tests for dynamic client (#208) (fabian@fabianism.us)
  - Provide 'append_hash' for ConfigMaps and Secrets (#196) (will@thames.id.au)
  - Allow creates on subresources properly (#201) (fabian@fabianism.us)
  - Rename async to async_req for compatibility with python3 and kubernetes 7
    (#197) (fabian@fabianism.us)
  - Update kube_config to support concurrent clusters (#193)
    (tdecacqu@redhat.com)


author: Jason Montleon <jmontleo@redhat.com> 0.8.1-1
changelog:
  - Bump version (fabian@fabianism.us)
  - [release-0.8] When searching for resources, prefer non-List matches (#232)
    (openshift-cherrypick-robot@redhat.com)
  - Version + dependency bump (fabian@fabianism.us)
  - Disable python2 builds for Fedora and python3 for EPEL by default


author: Jason Montleon <jmontleo@redhat.com> 0.8.4-2
changelog:
  - Fix orphaned library directories
  - Add unit tets to %check
  - Remove some unnecessary sed statements for EL7


author: Jason Montleon <jmontleo@redhat.com> 0.8.4-3
changelog:
  - Disable checks for EPEL builds
  - Remove kubernetes BuildRequire for EPEL builds, requires websocket-client
  - websocket-client is in extras, required by EPEL, but not available in buildroot?


author: Rich Mattes <richmattes@gmail.com> - 0.1.2-3
changelog:
  - Fix FTBFS by adding upstream patch to use flake8 command line (rhbz#1377139)
  - Use 'python3-flake8' for python 3 tests


author: Rich Mates <richmattes@gmail.com> - 0.1.4-1
changelog:
  - Update to release 0.1.4 (rhbz#1459873)
  - Remove upstream flake8 compatibility patch (rhbz#1377139)


author: Paul Howarth <paul@city-fan.org> - 2.4.1-1
changelog:
  - Update to 2.4.1
    - Fix a security flaw (GH#1175, CVE-2018-7750) in Paramiko's server mode
      (this does not impact client use) where authentication status was not
      checked before processing channel-open and other requests typically only
      sent after authenticating
    - Ed25519 auth key decryption raised an unexpected exception when given a
      unicode password string (typical in python 3) (GH#1039)


author: Paul Howarth <paul@city-fan.org> - 2.4.2-1
changelog:
  - Update to 2.4.2
    - Fix exploit (GH#1283, CVE-2018-1000805) in Paramiko’s server mode (not
      client mode) where hostile clients could trick the server into thinking
      they were authenticated without actually submitting valid authentication
    - Modify protocol message handling such that Transport does not respond to
      MSG_UNIMPLEMENTED with its own MSG_UNIMPLEMENTED; this behavior probably
      didn’t cause any outright errors, but it doesn’t seem to conform to the
      RFCs and could cause (non-infinite) feedback loops in some scenarios
      (usually those involving Paramiko on both ends)
    - Add *.pub files to the MANIFEST so distributed source packages contain
      some necessary test assets (GH#1262)
  - Test suite now requires mock ≥ 2.0.0


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
  - Allow to import pip10's main from pip9's /usr/bin/pip
  - Do not show the "new version of pip" warning outside of venv
  Resolves: rhbz#1569488
  Resolves: rhbz#1571650
  Resolves: rhbz#1573755


author: Victor Stinner <vstinner@redhat.com> - 18.0-4
changelog:
  - Prevent removing of the system packages installed under /usr/lib
    when pip install -U is executed. Original patch by Michal Cyprian.
    Resolves: rhbz#1550368.


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.6.3-2
changelog:
  - Enable tests now that duecredit is available in rawhide
  - Disable py2 build since python-nibabel is only py3 even in F29


author: Jerry James <loganjerry@gmail.com> - 1.5-1
changelog:
  - Update to latest version
  - Drop nose requirement; only needed to run tests, not to use the package
  - Add swig patch to fix type-related compiler warnings
  - Regenerate the swig files
  - Do not ship the test code or the swig-generated C file
  - Build sphinx docs with python3 instead of python2
  - Ship LICENSE file with all packages
  - Fix shebang in example code


author: Rex Dieter <rdieter@fedoraproject.org> - 5.11.2-1
changelog:
  - 5.11.2
  - %build: --no-dist-info (not supported when using DESTDIR= yet)
  - configure.py: make check for PyQt5.sip module non-fatal


author: Rex Dieter <rdieter@fedoraproject.org> - 5.11.3-0.2.dev1808131157
changelog:
  - drop backward-compat py3_sipdir
  - drop dep on python?-sip, rely only on python?-pyqt?-sip-api
  - move versioned qt5/sip-api deps to -base


author: Scott K Logan <logans@cottsay.net> - 0.12.2-1
changelog:
  - Update to 0.12.2 (rhbz#1476259)
  - Fix missing infrastructure files after making python 3 the default
  - Enable at least SOME tests
  - Make python-rpm recommended (will fall back to RPM CLI if not present)


author: Scott K Logan <logans@cottsay.net> - 0.13.0-1
changelog:
  - Update to 0.13.0
  - Conditional python2 package
  - Use python3_pkgversion
  - Create a separate 'doc' package
  - Co-own man page and sources directories among python2 and python3


author: Scott K Logan <logans@cottsay.net> - 0.7.0-1
changelog:
  - Update to 0.7.0
  - Conditional python2 package
  - Use python3_pkgversion
  - Create a separate 'doc' package


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.15-5
changelog:
  - Move /usr/bin/python into a separate package
    https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package
  - Revert https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-1
changelog:
  - Update to 3.1.0 (#1523904)
  - No need to sed dist-packages out anymore
  - getMimeTypeForFile fails no more
  - but some others tests are, add a fix


author: Christian Dersch <lupinix@mailbox.org> - 2.0.5-2
changelog:
  - initial package, splitting out the python2 subpackage of python-astropy (new
    upstream releases Python 3 only)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.0-5
changelog:
  - Python 2 binary package renamed to python2-bugzilla2fedmsg
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: williamjmorenor@gmail.com - 2016.9.26-6
changelog:
  - Fix path of .pem file
    Thanks to @carlwgeorge
    See: https://src.fedoraproject.org/rpms/python-certifi/pull-request/1


author: <jdennis@redhat.com> - 2018.10.15-3
changelog:
  - Resolves: rhbz#1659132 Incorrect location used for system certs
    where() now returns /etc/pki/tls/certs/ca-bundle.crt


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.11-4
changelog:
  - Python 2 binary package renamed to python2-coverage-test-runner
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 1.15-1
changelog:
  - Update to 1.15 based on PR by Jan Beran <jberan@redhat.com>
    https://src.fedoraproject.org/rpms/python-coverage-test-runner/pull-request/3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1-26
changelog:
  - Python 2 binary package renamed to python2-cpio
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jakub Ruzicka <jruzicka@redhat.com> 0.0.1-2
changelog:
  - Use python2-six to comply with python packaging guidelines.
  - Use macros for summary and description to prevent redundancy.


author: Jaroslav Mracek <jmracek@redhat.com> - 2.0.5-1
changelog:
  - Update to 2.0.5
  - Resolves: rhbz#1519543 -  Fedora 27 offline updates (gnome-software intitiated) are failing


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.4-1
changelog:
  - Update to 0.6.4 (#1465192).
  - http://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.4
  - Sort the BuildRequires alphabetically.
  - Run the tests.


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.7-1
changelog:
  - Update to 0.6.7 (#1609253).
  - https://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.7


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.9-7
changelog:
  - Python 2 binary package renamed to python2-dogtail
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-5
changelog:
  - Subpackage python2-grabbit has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.8.0-1
changelog:
  - spec: use python2 macros explicitly, fix python deps
  - runner: retry installing required packages
  - executor: add friendly error when results.yml is missing
  - Enable grabbing secrets from Vault server
  - file_utils: fix presence of status code errno for failed http requests
  - spec: adjust testcloud requirement
  - file_utils: retry 5xx errors when downloading files
  - yumrepoinfo: F26 is EOL
  - runner: retry network errors when adding minion repos
  - doit: update dodo.py to work with Python 3


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.0-1
changelog:
  - Python 3.7 fixes
  - Use F28 in example files
  - New BR: python2/3-testcloud
  - Add Branched F29 to yumrepoinfo
  - remove support for executing distgit (vanilla STI) tests
  - switch createrepo for createrepo_c
  - config: add minion_repos_ignore_errors (bool) option


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.2-1
changelog:
  - New packaging scheme
  - Build the library both for Python 2 and Python 3
  - Binaries will use Python 3 by default
  - runtask is now in taskotron-runner, which obsoletes libtaskotron-disposable


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.2-3
changelog:
  - Obsolete python2-libtaskotron in Fedora >= 30
  - Require python-bodhi-client instead of python-fedora


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.3-1
changelog:
  - yumrepoinfo.conf: Fedora 27 is EOL
  - spec: replace python-fedora with python-bodhi-client
  - requirements: unify libtaskotron sections


author: Ralph Bean <rbean@redhat.com> - 1.5.13-2.0.1cb025525
changelog:
  - Apply experimental upstream patch for stomp heartbeat handling
    https://github.com/mokshaproject/moksha/pull/65


author: mprahl <mprahl@redhat.com> - 1.6.0-2
changelog:
  - Add the dependency on python-neotime
  - Drop Python 3 on EPEL7 due to python-neotime dependencies that aren't packaged for Python 3


author: Petr Šplíchal <psssssss@gmail.com> 1.4-1
changelog:
  - Update specfile to new python packaging standards
  - Performance improvement for TestPlan.sortkey
  - Port to python-gssapi from pykerberos
  - Make TestRun errata_id default to None


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.1-35
changelog:
  - Python 2 binary package renamed to python2-notify
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Shea <dshea@redhat.com> - 1.0.7-13
changelog:
  - Run the testsuite in %check (#1626861)
  - Remove EPEL-related macros from the rawhide spec file
  - Switch to the pypi source file


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.15-1
changelog:
  - Add missing _modules attribute to Compose
  - composeinfo: add docs for Compose class
  - rpms: add doc example for using the Rpms class
  - common: document parse_nvra() return value elements
  - common: explain filename handling for parse_nvra()


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.17-1
changelog:
  - Do not use custom repr for objects with no compose
  - Add additional_variants attribute to unified images


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.19-1
changelog:
  - Fix get_minor_version on inputs with more that two components
  - Add new release types
  - Add __version__ attribute
  - Documentation improvements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2-14
changelog:
  - Python 2 binary package renamed to python2-progress
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.2.8-6
changelog:
  - Python 2 binary package renamed to python2-pycxx
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.29-5
changelog:
  - Python 2 binary package renamed to python2-pygithub
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.29-8
changelog:
  - Add missing Provides/Obsoletes for camelcase name (#1559280)
  - Rename python3 subpackage to python3-pygithub


author: Carl George <carl@george.computer> - 1.39-4
changelog:
  - Require python-jwt on RHEL, python2-jwt on Fedora rhbz#1634082
  - Add patch0 to ensure comments are included in create_review method rhbz#1633197


author: Petr Viktorin <pviktori@redhat.com> - 1.3.1-1
changelog:
  - Update to upstream 1.3.1 bugfix release
  - Always build for Python 3; conditionalize the Python 2 library


author: Rex Dieter <rdieter@fedoraproject.org> - 4.19.12-8
changelog:
  - -devel: move sipconfig/sipdistutils here
  - -devel: drop dep on non-private base pkg (which may go away soon anyway)
  - -devel: move subpkg defs nearer its basepkg in .spec
  - (more) consistently use %python3_pkgversion
  - drop (uneeded) python3_sip_bin.patch


author: Pete Walter <pwalter@fedoraproject.org> - 0.17.1-9
changelog:
  - Switch nautilus support to Python 3 in F30
  - Switch nemo support to Python 3 in F29 (#1638349)
  - Switch caja support to Python 3 in F29 (#1563523)
  - Remove gtk-update-icon-cache scriptlets


author: Jakub Ružička <jruzicka@redhat.com> 0.46.3-1
changelog:
  - deps: Remove requirement on pyOpenSSL (previously a workaround)
  - distgit: Add -R/--release-bump-index argument
  - distgit: Support DLRN 0.date.hash and 0.1.date.hash Release formats
  - distgit: Preserve Change-Id when amending a commit
  - distgit: normalize commit messages
  - new-version: ensure -H and -B work together
  - new-version: don't display redundant message on -b
  - new-version: enable `fedpkg new-sources` for Fedora by default
  - new-version: fix `fedpkg new-sources` getting wrong tarball
  - patch: return 0 on no new patches
  - pkgenv: show patches base and base git ref information
  - rdoinfo: Fix error on info-tags-diff for packages without buildsys-tags
  - rdoinfo: Use "project" as package primary key to compare tags
  - reqcheck: normalize python2/python3 package names
  - spec: better detection of multiple changelog entries
  - spec: don't get confused by changelog mentions in the changelog
  - spec: don't duplicate %{?dist}
  - core: action alias support
  - core: fix new action check for old state
  - refactor: Remove legacy coprbuild action
  - refactor: nice error messages on invalid Version/patches_base
  - refactor: split utils.cmd, create separate utils.git module
  - refactor: unify patch and update-patches
  - tests: Add Zuul v3 jobs
  - tests: Add newversion.feature scenario using --bug
  - tests: Add topy to tox as a linting check
  - tests: Extend newversion.feature for coverage of -H
  - tests: add topy to whitelist_externals
  - tests: expand fix.feature scenarios
  - tests: improved reporting and test names
  - tests: make spec file Then assert more descriptive
  - doc: Trailing whitespace cleanup in doc files
  - doc: Typo fixes from topy
  - doc: include feature scenarios in the documentation
  - doc: make file naming consistent
  - doc: remove obsolete building doc
  - doc: update README.md with Fedora/EPEL install instructions
  - doc: update README.md with current information
  - doc: update bug tracker information in the manual


author: Jakub Ružička <jruzicka@redhat.com> 0.47.0-2
changelog:
  - core: use distroinfo module to access rdoinfo
  - core: improve Python 3 compatibility
  - distgit: fix version to tag translations for vX.Y.Z tag style
  - distgit: allow '|' in patches_ignore regex
  - distgit: prevent unneeded patch file changes
  - doc: try using reno module to maintain release notes
  - doctor: reworked with rainbows


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 1.0.6-1
changelog:
  - Update to version 1.0.6
  - Switch URL to point to PyPi
  - Cleanup old macros in spec file
  - Add rencode.pyx file from git repository
  - Add BuildRequires for python{2,3}-wheel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.14.00-1
changelog:
  - Update to 6.14.00
  - Drop patches previously backported:
    - root-doxygen-makefile.patch
    - root-crash-fix.patch
    - root-test-stress-32bit.patch
  - Drop patches accepted upstream:
    - root-test-subdirs.patch
    - root-test-fixes.patch
    - root-out-of-bounds.patch
    - root-doxygen-tilde.patch
    - root-noinst.patch
  - Drop patches for issues fixed upstream:
    - root-dont-link-jvm.patch
    - root-system-pythia.patch
  - Drop patch root-urw-otf-hack.patch - broken font file no longer present
  - Drop Google Droid Sans Fallback font from EPEL 7 root-fonts package
    (the font is now available in EPEL 7)
  - Use two more patches from Fedora's llvm5.0 package
  - New root-test-subdirs.patch patch for more instances of the same issue
  - Fix a test not setting cache file directory so that it works offline
  - Fix a compatibility issue with the EPEL 7 gtest version
  - Fix a missing include
  - Workaround optimization problems in the Geom library
  - New subpackages due to library splits
    - root-tree-dataframe and root-vecops from root-tree-player
    - root-net-httpsniff from root-net-http
  - New subpackages due to package splits
    - root-gui-html from root-gui
    - root-gui-qtgsi from root-gui-qt
    - root-io-xmlparser from root-io-xml
    - root-proof-player from root-proof
  - New ROOT 7 subpackages
    - graf-gpadv7
    - graf-primitives
    - gui-fitpanelv7
    - gui-qt5webdisplay
  - Rename root-guibuilder package to root-gui-builder
  - Create empty .dist-info files so that rpm auto-generates provides


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.14.02-1
changelog:
  - Update to 6.14.02
  - Make python3 the preferred python for Fedora 29+:
    - Give python3 libPyROOT higher priority than python2 libPyROOT
    - The python scripts in root-cli use python3-root
    - Let root-tmva-python use python3-numpy
  - Fix build issue with undefined symbols in libSrvAuth
  - Make ROOTConfig-targets.cmake not error on missing files to work better with
    subpackages


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.14.04-3
changelog:
  - Fix crash in TBrowser when root-gui-html is not installed
  - Use empty .egg-info files instead of empty .dist-info files to make
    virtualenv happy
  - Add Requires on root-mathmore to root-mathcore (for default integrator)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.14.06-1
changelog:
  - Update to 6.14.06
  - Let clang ignore some gcc options it hasn't implemented
  - Don't build python2-jupyroot/jsmva packages for Fedora >= 29
  - Drop previously backported patch root-TGHtmlBrowser-crash.patch


author: Chenxiong Qi <cqi@redhat.com> - 1.55-1
changelog:
  - Fix installing pycurl for running tests (cqi)
  - Replace extra module_name with repo_name (cqi)
  - Replace name module with repo in tests/fixtures/rpkg*.conf (cqi)
  - Add --fail-fast functionality - #331 (tibbs)
  - Fix fake spec for build in rawhide (cqi)
  - Avoid to upload a file with different checksum - #204 (cqi)
  - Give more information when sources has invalid content - #227 (cqi)
  - Reserve README.md while import srpm - #149 (cqi)
  - Set to repo_name property when --name is specified (cqi)
  - Do not restrict argparse version (cqi)
  - Check old format args only if there is clone config (cqi)
  - Fix typo and reword option help and deprecation message (cqi)
  - Massive replacement of module (cqi)
  - Deprecate module_name inside rpkg internal (cqi)
  - Add new option --name and --namespace - #301 (cqi)
  - Man generator indent workaround (onosek)
  - Fixing imports in unittests (onosek)
  - Minor fixes to doc build (cqi)
  - Fix mistakes during rebase (cqi)
  - Run document generator script in Py3 explictly (cqi)
  - Remove warning of nonexisting source/_static/ during doc build (cqi)
  - Do not generate document for sample rpkg app (cqi)
  - Exclude subcommand which does not have help (cqi)
  - Ensure to clean files for generating HTML documents (cqi)
  - Fix rebase error: add module_build_watch back (cqi)
  - Fix MANIFEST.in to list files for building doc (cqi)
  - Rename generate_man_pages.py (cqi)
  - Generate HTML document and manpage for sample rpkg (cqi)
  - Simplify doc Makefile (cqi)
  - Generate commands HTML and man pages (cqi)
  - Update existing docstrings (cqi)
  - Generate documents by sphinx - #50 (cqi)
  - README: new code should be py3 compatible (ktdreyer)
  - Provide base_module to clone_config templates - #326 (tmz)
  - Refactor man generator to be reusable (puiterwijk)
  - Make sure gitcred doesn't land in man (puiterwijk)
  - Don't inject the credential helper to push if OIDC is unconfigured
    (puiterwijk)
  - Add docblocks to gitcred methods and don't quit if OpenIDC is unconfigured
    (puiterwijk)
  - Also inject the credential helper with rpkg push (puiterwijk)
  - Create a "gitcred" command that functions as an OIDC git-credential helper
    (puiterwijk)


author: Chenxiong Qi <cqi@redhat.com> - 1.56-1
changelog:
  - Validate greenwave policy early in Commands.build (cqi)
  - Refine error message for failure gating.yaml validation (cqi)
  - explain mbs-manager exception handling (nils)
  - test for missing mbs-manager with errno set (nils)
  - catch errno == ENOENT if mbs-manager is missing (nils)
  - add missing method docstring (nils)
  - Show full error from MBS (lsedlar)
  - Fix tests for greenwave policy validation (cqi)
  - Add testenv for building docs (cqi)
  - New option --buildrootdir - rhbz#1583822 (cqi)
  - Add --shell option to mockbuild - rhbz#1438685 (cqi)
  - Validate gating.yaml file for Greenwave gating (gnaponie)
  - Update README (cqi)
  - Reduce the number of repo creation for tests (cqi)
  - Fix flake8 error (cqi)
  - Drop rpm-py-installer from requires - #357 (cqi)
  - Allow _run_command to capture and return output to stdout or stderr (cqi)
  - Claim Python 3.7 in README and package classifiers (cqi)
  - Fix a bad test teardown (otaylor)
  - Refactor build command (cqi)
  - Remove rpmfluff package (cqi)
  - Set PYCURL_SSL_LIBRARY directly for installing pycurl (cqi)
  - Add py37 testenv (cqi)


author: Owen Taylor <otaylor@redhat.com> - 1.56-2
changelog:
  - Add patch from upstream pull-request to add a flatpak-build subcommand
  - Add PyYAML dependencies so that the spec file at least builds on epel6/epel7


author: Ondřej Nosek <onosek@redhat.com> - 1.57-1
changelog:
  - Use idna 2.7 for Python 2.6 (lsedlar)
  - Imports are sorted (onosek)
  - libmodulemd is missing on el7 - #402 (onosek)
  - Initialize bash autocompletion (onosek)
  - Set configuration in case of "clone --branches" as well (tim)
  - Fix fake spec file for clog tests (cqi)
  - Move argparse fix from fedpkg - #398 (onosek)
  - Send source mtime to dist-git - 220 (lsedlar)
  - Fix tests for mock package manager (lsedlar)
  - Specify package manager for mock-config (lsedlar)
  - Add contributing guide (onosek)
  - Validate the module build optional argument when parsing the argument
    (mprahl)
  - Add config options to parse the base module (e.g. platform) stream from the
    dist-git branch and apply a buildrequire override (mprahl)
  - Add the ability to pass in buildrequire and require overrides on a module
    build (mprahl)
  - Raise an error if the module build command receives optional arguments that
    conflict (mprahl)
  - Silence Python3 SafeConfigParser warnings (mmathesi)
  - Allow to pass posargs to tox from make (cqi)
  - Specify dependent packages in one place (cqi)
  - Don't registry flatpak-build command on Python-2.6 (otaylor)
  - Add flatpak-build subcommand (otaylor)
  - Don't pass the MBS API URL around as a parameter (otaylor)
  - TestContainerBuildWithKoji: tear down the mock appropriately (otaylor)
  - Refine test runner for py26 (cqi)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-13
changelog:
  - Ehm, need to patch the autogenerated rpmtests script too for python2
  - Ehm, it's ldconfig_scriptlets not scripts
  - Drop the non-working python envvar magic from obsoleted change


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc1.1
changelog:
  - Update to rpm 4.14.2-rc1
  - Patching test-suite for python2 too painful, just sed it instead
  - Fix premature version increment from previous changelog entries, oops


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-1
changelog:
  - Updated to 0.8.1 (#1513790)
  - The package now uses flit
  - The tests are now invoked with pytest
  - LICENSE.txt renamed to LICENSE
  - Be more explicit in %files


author: Jakub Kadlčík <frostyx@email.cz> 0.6.13-1
changelog:
  - report reboot for new kernels (#83) (seanokeeffe797@gmail.com)
  - Get daemon names from dbus (#82) (seanokeeffe797@gmail.com)
  - Added Enterprise Linux install instructions (seanokeeffe797@gmail.com)
  - bash completion support (seanokeeffe797@gmail.com)
  - Use ID_LIKE in /etc/os-release (#81) (seanokeeffe797@gmail.com)
  - Fixes #85 - Always respect app type defines (seanokeeffe797@gmail.com)
  - Fixes #84 - ignore flag is now respected (seanokeeffe797@gmail.com)
  - Fixes #20 - print executable in interactive mode (seanokeeffe797@gmail.com)
  - Fixes #56 - Add Ubunut support (seanokeeffe797@gmail.com)
  - Fixes #76 - polkitd service can be restarted (seanokeeffe797@gmail.com)
  - Fixes #73 - add support for Oracle Linux (seanokeeffe797@gmail.com)
  - Fixes #66 - reconise postfix process correctly (seanokeeffe797@gmail.com)
  - Fixes #68 - recognised SSH sessions correctly (seanokeeffe797@gmail.com)


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.6.13.1-1
changelog:
  - Fixes #92 - Correct package version comparision (seanokeeffe797@gmail.com)
  - EPEL uses python-argcomplete not pythonX-argcomplete
    (seanokeeffe797@gmail.com)


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.7.0-1
changelog:
  - Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797@gmail.com)
  - Fixes #104 - Replace None with "" when sorting (seanokeeffe797@gmail.com)
  - Update Python 2 dependency declarations to new packaging standards
    (seanokeeffe797@gmail.com)
  - Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797@gmail.com)
  - Cache process info (elyscape@gmail.com)
  - Handle sshd sessions that use privilege separation (elyscape@gmail.com)
  - fix typo in docs (seanokeeffe797@gmail.com)
  - Switch Travis to container-based infrastructure (seanokeeffe797@gmail.com)
  - Fix RHBug #1469282 - bash completion should exit cleanly if python-
    argcomplete is not installed (seanokeeffe797@gmail.com)
  - Fix argparse logic in spec (#94) (frostyx@email.cz)
  - Update branches for fedora releaser (frostyx@email.cz)
  - Add epel releaser (seanokeeffe797@gmail.com)
  - rename tito releasers (seanokeeffe797@gmail.com)


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.34-4
changelog:
  - Python 2 binary package renamed to python2-ttystatus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jeremy Cline <jeremy@jcline.org> - 1.9.1-1
changelog:
  - Update to 1.9.1 (#1448841)
  - Add python-keyring and python-tqdm as dependencies
  - Remove python-clint as a dependency


author: Robert-André Mauchin <zebob.m@gmail.com> - 18.4.0-1
changelog:
  - Update to 18.4.0
  - Default binaries to Python 3
  - Drop old Obsoletes/Provides
  - Refresh BR
  - Remove useless macros
  - Use python_enable_dependency_generator


author: Paul Wouters <pwouters@redhat.com> - 1.8.2-1
changelog:
  - Updated to 1.8.2.
  - Enabled deny ANY query support and edns-tcp-keepalive
  - Set serve-stale timeout to 4h
  - Updated unbound.conf for latest options


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.22-9
changelog:
  - Do not lowercase hostnames with custom-protocol (rhbz 1567862)
  - upstream: https://github.com/urllib3/urllib3/issues/1267


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-4
changelog:
  - Modernize and generalize building of Python subpackages:
    - replace python with python2
    - use appropriate macros for when refering to Python 3
    - prefix Python-dependent plugins with the version of Python they are built
      with
  - Also build Python 3 subpackages for the other Python 3 version in EPEL7


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-5
changelog:
  - Build Python 3 version(s) of gevent plugin on Fedora and EPEL7
  - Build Python 3 version of greenlet plugin on Fedora and EPEL7
  - Build Python 2 version of greenlet plugin on EPEL7
  - Always build Python 3 version of tornado plugin when building with Python 3
    (drop python3_tornado build conditional)


author: Carl George <carl@george.computer> - 2.0.17.1-1
changelog:
  - Latest upstream (rhbz#1549354)
  - Enable uwsgi-plugin-coroae on EL7
  - Use systemd tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303)
  - Use /var/run/uwsgi when not using systemd
  - Build with versioned python command
  - Remove %config from systemd unit file
  - Disable greenlet plugin on EL7


author: Carl George <carl@george.computer> - 2.0.17.1-2
changelog:
  - Make python2-uwsgidecorators own the right files (rhbz#1600721)
  - Be more explicit with uwsgidecorators files


author: Tadej Janež <tadej.j@nez.si> - 2.0.17.1-3
changelog:
  - Re-enable greenlet plugin on EL7:
    - Python 3 version is always built
    - Python 2 version is only built on x86_64


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.22-9
changelog:
  - Python 2 binary package renamed to python2-weasyprint
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.40.0-4
changelog:
  - Python 2 binary package renamed to python2-websocket-client
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Carl George <carl@george.computer> - 0.46.0-1
changelog:
  - Latest upstream rhbz#1462523
  - Only ship one version of wsdump
  - Properly install LICENSE file
  - Remove tests from buildroot
  - Use Python build, install, and provides macros


author: Jan Beran <jberan@redhat.com> - 0.47.0-1
changelog:
  - Latest upstream (rhbz# 1548228)
  - Fixes python3-websocket-client requires both Python 2 and 3 (rhbz# 1531541)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.13-5
changelog:
  - Python 2 binary package renamed to python2-wstool
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Scott K Logan <logans@cottsay.net> - 0.1.17-9
changelog:
  - Remove rosinstall requriement entirely (not needed after 0.1.1)
  - Switch from {commit} to {version} for source archive
  - Align spec with python templates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:4.8.5-1
changelog:
  - Update to version 4.8.5
  - Drop Python 2 bindings for Fedora 30+
  - New subpackage for EPEL7: python36-xrootd


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.0-6
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Greg Hellings <greg.hellings@gmail.com> - 0.4.0-1
changelog:
  - Upstream version 0.4.4
  - Switched hard-coded python3 to use %{python3_pkgversion}
  - Addresses BZ#1647597


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.1.1-13
changelog:
  - Python 2 binary package renamed to python2-zope-deprecation
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dan Callaghan <dcallagh@redhat.com> - 3.4.21-2
changelog:
  - no longer building Python 2 bits in releases which have dropped Python 2
  - added missing requirements on PyYAML and six


author: Dan Callaghan <dcallagh@redhat.com> - 3.4.23-3
changelog:
  - python3-ansible-lint conflicts with python2-ansible-lint because
    /usr/bin/ansible-lint moved between subpackages


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.1-4
changelog:
  - Subpackage python2-astral has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Dominik Mierzejewski <dominik@greysector.net> 0.12.2-3
changelog:
  - remove trailing space from description
  - rename pname to standard pypi_name and use pypi_source macro


author: Dominik Mierzejewski <dominik@greysector.net> 0.12.2-4
changelog:
  - reintroduce python_provide macro call
  - put python3-setuptools into BR, even though it's redundant now
  - shorten Summary: to fit in 80 characters


author: Christian Heimes <cheimes@redhat.com> - 18.6b2-2
changelog:
  - Add new build and runtime dependency python3-toml
  - Don't download external packages in tests
  - Create missing empty_pyproject.toml for tests


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-10
changelog:
  - Python 2 binary package renamed to python2-cairocffi
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-16
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.4-13
changelog:
  - Python 2 binary package renamed to python2-django-ajax-selects
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.4-14
changelog:
  - Removed Python 2 subpackage for https://fedoraproject.org/wiki/Changes/Django20
  - Removed Groups
  - Added %python_provide for python3 subpackage
  - Use modern %py3_ macros and %license


author: David Carlos <ddavidcarlos1392@gmail.com> - 3.0.3-2
changelog:
  - Use py3_install and py3_build instead of {__python3}
  - Generates a sub package called python3-flask-cors, and keep the source name
  as python-flask-cors
  - Use py3_dist to resolve Requires and BuildRequires
  - Fix rpmlint warnings


author: David Carlos <ddavidcarlos1392@gmail.com> - 3.0.3-4
changelog:
  - Add python- prefix on source name
  - Add a blank line between each changelog report.
  - Change the path to build the package on prep step.


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - No build since tests fail, issue filed: https://github.com/nipy/nibabel/issues/579


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.8-0.2.git1fab571
changelog:
  - Enable documentation on rawhide where build succeeds (F30)
  - Remove extra buildinfo file
  - Make doc package noarch
  - Move THANKS file to correct bits


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 1.23-2
changelog:
  - Fix a crash caused by Qt color picker - patch by Miquel Garriga
  - Explicitly require python2 in script headers


author: Alexander Ploumistos <alexpl@fedoraproject.org> - 1.23-4
changelog:
  - Switch to python 3.x and python3 dependencies
  - Add unit testing dependencies
  - Comprehensive fix for python3-related issues - patch by Miquel Garriga


author: Jiri Konecny <jkonecny@redhat.com> - 0.8-1
changelog:
  - Test clean-up (jkonecny)
  - Move and rename force_quit loop (jkonecny)
  - Add dump screen stack method (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.0-1
changelog:
  - Fix docs based on the new PROCESSED feature (jkonecny)
  - Use new PROCESS_AND* in examples (jkonecny)
  - Add tests for PROCESSED_AND_{CLOSE|REDRAW} (jkonecny)
  - Use new PROCESSED_AND_{CLOSE|REDRAW} in advanced widgets (jkonecny)
  - Support PROCESSED_AND_CLOSE UserInputState (jkonecny)
  - Rename UserInputResult to UserInputAction (jkonecny)
  - Support PROCESSED_AND_REDRAW (jkonecny)
  - Fix link to the documentation in README (jkonecny)
  - Add link to the documentation (jkonecny)
  - Write documentation for Simpleline (jkonecny)
  - Disable pylint error for doc copyright variable (jkonecny)
  - Add new example used in the documentation (jkonecny)
  - Mock modules for readthedocs (jkonecny)
  - Do a small fixes to improve documentation (jkonecny)
  - Get version from the spec file (jkonecny)
  - Add documentation skeleton (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.1-1
changelog:
  - Add global configuration initialize test (jkonecny)
  - Use default password function from GlobalConfiguration (jkonecny)
  - Add tests for GlobalConfiguration class (jkonecny)
  - Move default width to GlobalConfiguration class (jkonecny)
  - Add GlobalConfiguration object (jkonecny)
  - Fix a missing article in docs. (jkonecny)
  - Add tests for UIScreen get_user_input method (jkonecny)
  - Only InputManager is used to get input in UIScreen (jkonecny)
  - Move emit of InputReadySignal to InputRequest (jkonecny)
  - Get only last input on concurrent input (jkonecny)
  - Add concurrency tests for InputHandler (jkonecny)
  - Add requester source to the InputHandler (#1557472) (jkonecny)
  - Use InputManager as screen helper not in ScreenScheduler (#1557472) (jkonecny)
  - Add test to check InputThreadManager after initialization (jkonecny)
  - Reinitialize InputThreadManager when app is initialized (jkonecny)
  - Input requests are now handled by InputThreadManager (jkonecny)
  - Remove io_manager property from ScreenScheduler (jkonecny)
  - Rename io_manager to input_manager (jkonecny)
  - Change IOManager to InputManager (jkonecny)
  - Move draw from IOManager to ScreenScheduler (jkonecny)
  - Separate password input to PasswordInputHandler (jkonecny)
  - Add DEFAULT_WIDTH constant (jkonecny)
  - Add tests for InputHandler (jkonecny)
  - Replace get_input_without_check by new property (jkonecny)
  - Separate input to a new module (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.2-1
changelog:
  - Document GlobalConfiguration class (jkonecny)
  - Add advanced input processing section to docs (jkonecny)
  - Make makefile zanata check more robust (jkonecny)
  - Add missing newline characters at the end (jkonecny)
  - Abstract widget buffer extensions (jkonecny)
  - Use python 3 sphinx module (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.3-1
changelog:
  - Fix pylint errors raised by new pylint version (jkonecny)
  - Setup logging handler properly for a library (jkonecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.4-1
changelog:
  - Fix and add tests for the new changes (#1646568) (jkonecny)
  - Add should_run_with_empty_stack configuration (#1646568) (jkonecny)
  - Remove wrong line in password_function conf (jkonecny)
  - Tweak date lang settings in make bumpver command (jkonecny)
  - Drop python-pocketlint build dependency (jkonecny)
  - Update spec file from Fedora (jkonecny)


author: Martin Gansser <martinkg@fedoraproject.org> - 1.4.5-1
changelog:
  - Update to 1.4.5-1
  - Cleanup spec file
  - Use Requires python2-requests
  - Write the content to Summary and in the rest use %{summary} marco


author: Petr Viktorin <pviktori@redhat.com> - 3.4.8-1
changelog:
  - Update to 3.4.8 bugfix release
  - Add patch 00290 to fix build with libxcrypt
  - Disable test_buffer on ppc64le


author: Miro Hrončok <mhroncok@redhat.com> - 3.4.8-3
changelog:
  - Fix multiprocessing regression on newer glibcs
  - Enable test_multiprocessing_fork(server) and _spawn again
  Resolves: rhbz#1569933


author: Miro Hrončok <mhroncok@redhat.com> - 3.5.5-1
changelog:
  - Rebased to version 3.5.5
  - Do not ship the Tools directory
  - Skip test_multiprocessing_fork(server) and _spawn for now
  - Skip test_rapid_restart on non x86 arches
  - Skip test_buffer on ppc64le


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.0.0-3
changelog:
  - Add instructions on how to obtain the tarball
  - Re-pack the sources tarball with ones obtained from VCS.


author: Artur Iwicki <fedora@svgames.pl> 0.1.0-3.20171027git08958f7
changelog:
  - Fix typo in Source0
  - Fix typo in License: tag
  - Remove the 'pkgconfig(Qt5Declarative)' build-requirement


author: Zdenek Dohnal <zdohnal@redhat.com>
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1:4.8.7-44
changelog:
  - fix QAudio hardcoding hw:0,0 on ALSA1.1 (patch by Jaroslav Škarvada, #1641151)
  - disable OpenSSL 1.1 patch for F27, keep building against compat-openssl10
    (It really does not make sense to switch over the F27 package at this point.)


author: Owen Taylor <otaylor@redhat.com> - 5.11.1-4
changelog:
  - rpm-macros: always refer to binaries in their installed location, even if %_libdir
    and %_bindir are redefined.


author: Rex Dieter <rdieter@fedoraproject.org> - 5.11.1-3
changelog:
  - apply sse2-related multilib hack on < f29 only
  - safer %_qt5_prefix, %qt5_archdatadir ownership
  - rebuild for %_qt5_prefix = %_prefix


author: Than Ngo <than@redhat.com> - 5.11.2-3
changelog:
  - backported patch to fix selection rendering issues if rounding leads to left-out pixels
  - backported patch to optimize insertionPointsForLine


author: Nikola Forró <nforro@redhat.com> - 1.2-2
changelog:
  - Improve package description
  - Use %autosetup and %make_build macros
  - Explicitly require specific Qt 5 version


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Michal Ruprich <mruprich@redhat.com> - 1.2.2-1
changelog:
  - rebase to 1.2.2(#1504420)
  - resolves #1462426 - Installing with dnf produces error /var/tmp/rpm-tmp.jMe0EE: line 44 [: too many arguments
  - resolves #1509292 - CVE-2017-16227 quagga: Incorrect AS_PATH size calculation for long paths


author: Ondřej Lysoněk <olysonek@redhat.com> - 1.2.2-4
changelog:
  - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
    certain forms of UPDATE message allowing to crash or potentially execute
    arbitrary code
  - Resolves: rhbz#1546008
  - Fixed CVE-2018-5380 - bgpd can overrun internal BGP code-to-string
    conversion tables potentially allowing crash
  - Resolves: rhbz#1546006
  - Fixed CVE-2018-5381 - Infinite loop issue triggered by invalid OPEN message
    allows denial-of-service
  - Resolves: rhbz#1546004
  - Fixed CVE-2018-5378 - bgpd does not properly bounds check the data sent with
    a NOTIFY allowing leak of sensitive data or crash
  - Resolves: rhbz#1546009


author: Riccardo Schirone <rschirone91@gmail.com> 2.9.0-1
changelog:
  - use system xxhash and openssl
  - bump to 2.9.0 release
  - use bcond_without to choose between release build or git one
  - add gcc as BuildRequires
  - do not directly call ldconfig but use RPM macros
  - add patch to compile on s390x architecture (disable debugger because there is no support)
  - add patch to make tags.r2 file generation reproducible
  - make common subpackage do not depend on arch of main package


author: Riccardo Schirone <rschirone91@gmail.com> 3.0.1-1
changelog:
  - rebase to upstream version 3.0.1 which includes some minor fixes and fixes
    for ppc64 and s390x architectures


author: Riccardo Schirone <rschirone91@gmail.com> 3.2.0-1
changelog:
  - rebase to upstream version 3.2.0
  - remove patch to disable debugger on s390x and use build option
  - move doc files to common package
  - fix CVE-2018-20455 CVE-2018-20456 CVE-2018-20457 CVE-2018-20458 CVE-2018-20459 CVE-2018-20460 CVE-2018-20461


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.2018.04-1
changelog:
  - rakudo builds again on all primary architectures
  - add BuildRequires perl(Digest::SHA)
  - update to 2018.04


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.2018.10-1
changelog:
  - update to 2018.10
  - follow the change in source from tools/install-dist.pl to tools/install-dist.p6


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.20170520git.1490608-3
changelog:
  - add macros for rakudo
  - use macros where possible
  - the manpage is not explicitly gzipped any more
  - add BR: coreutils sed and perl-podlators


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.20170619git.48efafc-1
changelog:
  - remove QA_SKIP_BUILD_ROOT variable
  - split installation in two steps
  - add information of the creating of the tar archive
  - rename the package to rakudo-zef
  - update to 0.20170619git.48efafc


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.20170619git.48efafc-2
changelog:
  - added check-section
  - switched to install with the 'tools/install-dist.pl' script from the rakudo sources
  - install to vendor_dir


author: Gerd Pokorra <gp@zimt.uni-siegen.de> 0.1.30-1
changelog:
  - use prove command in check session
  - add perl-Test-Harness for BuildRequires and Requires
  - update to 0.1.30


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.9.2-2
changelog:
  - spec modernization thanks to Filip Szymański <fszymanski@fedoraproject.org>
  - fixes rhbz #1592733 #1408563 #1495481 and #1559823


author: Björn Esser <besser82@fedoraproject.org> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fix FTBFS (#1556312, #1606078)
  - Use mariadb-connector-c-devel (#1494072)
  - Modernize spec-file


author: Mattia Verga <mattia.verga@email.it> - 5.4-0.1.rc2
changelog:
  - Update to 5.4RC2
  - Report correct dcraw version in bundled statement
  - Remove obsolete ld scriptlets


author: Owen Taylor <otaylor@redhat.com> - 5.4-3
changelog:
  - Don't explicitly require fftw - this pulls in unnecessary library subpackages
    and binaries; just count on RPM's standard library autodependencies.


author: Charles R. Anderson <cra@wpi.edu> - 1.8.4-2
changelog:
  - Escape macros in comments
  - 1.8.4 release security fixes rhbz#1670427:
    CVE-2018-8794 CVE-2018-8795 CVE-2018-8797 CVE-2018-20175 CVE-2018-20176
    CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8796 CVE-2018-8798
    CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20177 CVE-2018-20178
    CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182


author: Fabian Affolter <mail@fabian-affolter.ch> - 2.3-1
changelog:
  - Update to latest upstream release 2.3
  - Fix requirements (rhbz#1498766, rhbz#1501182)
  - Move to Python 3 (rhbz#1375797, rhbz#1482931)


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-1
changelog:
  - New release 2.4.0:
    + compose: clarify --cid vs. release/milestone/compose
    + Revise code and docs for new-style wiki auth
    + Stop allowing 'Alpha' milestone for most purposes


author: Mike DePaulo <mikedep333@gmail.com> - 1.2.31.2-1
changelog:
  - Update to latest stable release 1.2.31.2
  - Add remmina-gnome-session subpackage for new Kiosk mode


author: Simone Caronni <negativo17@gmail.com> - 1.2.32-1
changelog:
  - Update to 1.2.32, new Simple Terminal plugin.
  - Project moved to Gitlab, update spec file accordingly.


author: Steve Miller (copart) <code@rellims.com> - 0.9.3-1
changelog:
  - Bumped to upstream 0.9.3
    Resolves: #1645405 and #1642891
  - redhat-rpm-config-123 triggers bugs in gosetup, remove it from Go spec files as it’s just an alias
  - https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/message/RWD5YATAYAFWKIDZBB7EB6N5DAO4ZKFM/


author: Kamil Páral <kparal@redhat.com> - 2.0.4-2
changelog:
  - add python-pytest-cov builddep since it's needed for running the test suite
    with our new tox.ini


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 2.1.0-1
changelog:
  - Add OpenID Connect auth module for POST requests
  - Allow GET requests to just pass without auth
  - Publish more metadata in bus messages
  - Update Python 2 dependency declarations
  - generic message format which matches the HTTP API v2


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 2.1.2-1
changelog:
  - Support Python 3, use it on Fedora
  - Fix ImmutableMultiDict handling for python 3.7
  - Use tuples instead of list in RESULT_OUTCOME
  - Define resource limits for the database container
  - Makefile: Use generic Makefile provided by qa-make
  - Add config for task-dockerbuild


author: Kamil Páral <kparal@redhat.com> - 2.0.0-1
changelog:
  - remove flask-restful dependency
  - fix testcase info links
  - point default config to resultsdb 2.0 API
  - fix search box
  - synchronize major version number with resultsdb major number


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 2.1.0-1
changelog:
  - Fix default wildcard search in frontend (100x spedup)
  - Improve experience when an optional parameter is not defined on results


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 2.1.1-1
changelog:
  - Use Python 3
  - Limit searches by time by default and setting in the search UI
  - Handle exceptions from resultdb_api gracefully


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio (#1317500)
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME (#1567981)


author: Till Hofmann <thofmann@fedoraproject.org> - 1.5.1-1
changelog:
  - Update to 1.5.1
  - Run tests
  - Remove upstreamed patch
  - Add missing BR: doxygen
  - Add missing BR: graphviz


author: Pete Walter <pwalter@fedoraproject.org> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Update upstream URLs for the github switch
  - Switch to cmake
  - Use desktop-file-validate rather than desktop-file-install


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - rebase to 8.36.0
    - removed stdlog dependency as upstream is going to drop it
  - following upstream naming of pidfile
  - removed needless conditionals


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 8.36.0-3
changelog:
  - Rebuild for unannounced net-snmp soversion bump.
  - Use python3-docutils because rst2man has moved there.


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-1
changelog:
  - rebase to upstream version 8.37.0
    resolves: rhbz#1612079
    resolves: rhbz#1598217
    resolves: rhbz#1544139
  - dropped needless libee dependency
  - bumped librelp dependency to actually needed version


author: Fabio Valentini <decathorpe@gmail.com> - 3.8.2-2
changelog:
  - Drop code coverage and minitest plugins (patches: Vít Ondruch).
  - Patch test suite to remove broken tests and tests for optional functionality.


author: Fabio Valentini <decathorpe@gmail.com> - 3.8.2-3
changelog:
  - Fix kramdown test issues (patch: Vít Ondruch).
  - Patch test suite to remove tests reliant on upstream Gemfile and .gemspec.
  - Don't ignore test results anymore.


author: Jun Aruga <jaruga@redhat.com> - 1:2.0.3-2
changelog:
  - Improve bootstrapping logic.
    Ref: https://fedoraproject.org/wiki/Packaging:Guidelines#Bootstrapping
  - Fix wrong script interpreter for rpmlint.


author: Vít Ondruch <vondruch@redhat.com> - 1:2.0.4-4
changelog:
  - Buffer size in multipart parser allows for denial of service (CVE-2018-16470).
  - Cross-site scripting (XSS) via `scheme` method on `Rack::Request`
    (CVE-2018-16471).


author: Ed Marshall <esm@logic.net> - 0.12.0-1
changelog:
  * Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.10.1-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild


author: Julio Gonzalez Gil <git@juliogonzalez.es> - 1.84-2
changelog:
  - General cleanup to adapt to Fedora guidelines
  - Build with PIE enabled (required by Fedora)
  - Remove unneeded build requirement for mailcap


author: Julio Gonzalez Gil <git@juliogonzalez.es> - 1.84-3
changelog:
  - Require fuse package on runtime to allow mounting with systemd,
    mount command or /etc/fstab (#1637669)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 8.0-1
changelog:
  - Update to sagemath 8.0
  - Remove cryptominisat build requires
  - Remove no longer needed -singular patch (upstream updated)
  - Remove no longer -flask patch (upstream updated)
  - Remove no longer -pari patch (used now by cypari2)
  - Disable option to use bundled cysignals
  - Disable option to use bundled pari
  - Use system ipython


author: Jerry James <loganjerry@gmail.com> - 8.0-1
changelog:
  - Build with bundled ipywidgets for now
  - Drop unneeded -givaro patch
  - Lots of new BRs for building documentation
  - R python-backports-shutil_get_terminal_size and python-traitlets (bz 1464520)
  - Fix Singular LIB path
  - Make sure install operates in a UTF-8 environment
  - Build documention with an X server running
  - Build HTML documentation with mathjax


author: Jerry James <loganjerry@gmail.com> - 8.0-2
changelog:
  - Do not interpret GAP library informational messages as a libgap failure
  - Build with cryptominisat5
  - Sagemath now invokes gap instead of gap_stamp


author: Jerry James <loganjerry@gmail.com> - 8.2-1
changelog:
  - Update to sagemath 8.2
  - Create the sagemath-data-combinatorial_designs subpackage
  - Create the sagemath-notebook-export subpackage
  - Unbundle the LaTeX makecmds style
  - Install LaTeX style files in a more canonical place


author: Jerry James <loganjerry@gmail.com> - 8.2-2
changelog:
  - Rebuild for ntl 11.1.0
  - Optionally bundle thebe, threejs, and widgetsnbextension
  - Add provides for the optionally bundled packages
  - Add -flask patch
  - Apply new guidelines for python files in nonstandard places


author: Jerry James <loganjerry@gmail.com> - 8.2-4
changelog:
  - Rebuild for arb 2.14.0, eclib 20180710, ntl 11.2.1, and pari 2.11.0
  - Drop unneeded genus2reduction dependency; pari is used instead now


author: Jerry James <loganjerry@gmail.com> - 8.3-1
changelog:
  - Update to sagemath 8.3 (bz 1612867)
  - Drop -lrslib, -gap-hap, and -flask patches
  - Drop obsolete scriplets to fix F24 to F25 upgrade (bz 1594429 and 1618934)
  - Drop obsolete mktexlsr invocations
  - Fix more Singular paths
  - Fix still more uses of /usr/bin/env
  - Drop disallow/dissallow fixup for cython; now fixed in cython itself


author: Jerry James <loganjerry@gmail.com> - 8.3-2
changelog:
  - Add -buildroot patch and only build cython interfaces once
  - Drop LANGUAGES variable setting, now ignored by the sagemath build system
  - Drop unused SAGE_CBLAS variable from /usr/bin/sage
  - Do not force the C locale when launching sagemath
  - Allow the user to override SAGE_DEBUG in /usr/bin/sage
  - Add -ecm, -giac, and -latte patches to fix interactions with external tools
  - Add -sigfpe patch from upstream
  - Fix flask_autoindex and flask_openid imports in sagenb
  - Add Education category to the desktop file (bz 1624545)
  - Fix SINGULAR_SO variable in /usr/bin/sage (bz 1636759 and 1655248)
  - Invoke twistd-2 instead of twistd (bz 1640890)
  - Improve jupyter integration (bz 1663165)
  - Move existing jupyter integration into the notebook subpackage
  - Require python-jupyter-filesystem instead of owning its directories
  - Drop one more remnant of the F24 to F25 upgrade fixup


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Merlin Mathesius <mmathesi@redhat.com> - 1.2.1-4
changelog:
  - Patch to use correct C inline function semantics to fix FTBFS (BZ#1424417)
    Cleanup spec file conditionals


author: Klaus Wenninger <kwenning@redhat.com> - 1.3.1-1.git4927571
changelog:
  - Rebased to commit 4927571f8e9b00db8242654b1329dfbd71dcfe99
  - Removed disabling of shared-disk-support
    Resolves rhbz#1606301


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39


author: Matěj Týč <matyc@redhat.com> - 0.1.40-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.40 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.40
  - Update to use Python3 for build.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Fix Licence of this package


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - Fix man page build dependency on derivative content


author: Dave Love <loveshack@fedoraproject.org> - 4.0-1
changelog:
  - New version (#1606317, #1574496); soname bump affects old binaries
  - Remove bundled cubew, cubelib
  - Account for _libdir being partially ignored
  - Maybe BR gcc-plugin-devel


author: Dave Love <loveshack@fedoraproject.org> - 4.0-2
changelog:
  - Use ldconfig_scriptlets and remove some EPEL-ism in build
  - Patch to correct cube configuration
  - Build libwrap
  - Undefine _ld_as_needed, _hardened_build to make %check work
  - Require libunwind-devel, ocl-icd-devel, opari2 [#1610849]


author: Dave Love <loveshack@fedoraproject.org> - 4.1-2
changelog:
  - Avoid rpath in scorep-config output
  - Fix requires for MPI packages
  - Move files required for Scalasca to -config packages
  - Add license to libs packages


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-41
changelog:
  - Add nnp transition rule for vnstatd_t domain using NoNewPrivileges systemd feature BZ(1643063)
  - Allow l2tpd_t domain to mmap /etc/passwd file BZ(1638948)
  - Add dac_override capability to ftpd_t domain
  - Allow gpg_t to create own tmpfs dirs and sockets
  - Allow rhsmcertd_t domain to relabel cert_t files
  - Allow nova_t domain to use pam
  - sysstat: grant sysstat_t the search_dir_perms set
  - Label systemd-user-runtime-dir binary as systemd_logind_exec_t BZ(1644313)
  - Allow systemd_logind_t to read fixed dist device BZ(1645631)
  - Allow systemd_logind_t domain to read nvme devices BZ(1645567)
  - Allow systemd_rfkill_t domain to comunicate via dgram sockets with syslogd BZ(1638981)
  - kernel/files.fc: Label /run/motd.d(/.*)? as etc_t
  - Allow ipsec_mgmt_t process to send signals other than SIGKILL, SIGSTOP, or SIGCHLD to the ipsec_t domains BZ(1638949)
  - Allow X display manager to check status and reload services which are part of x_domain attribute
  - Add interface miscfiles_relabel_generic_cert()
  - Fix userdom_write_user_tmp_dirs() to allow caller domain also read/write user_tmp_t dirs
  - Dontaudit sys_admin capability for netutils_t domain
  - Label tcp and udp ports 2611 as qpasa_agent_port_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-41
changelog:
  - Dontaudit thumb_t domain to setattr on lib_t dirs BZ(1643672)
  - Dontaudit cupsd_t domain to setattr lib_t dirs BZ(1636766)
  - Add dac_override capability to postgrey_t domain BZ(1638954)
  - Allow thumb_t domain to execute own tmpfs files BZ(1643698)
  - Allow xdm_t domain to manage dosfs_t files BZ(1645770)
  - Label systemd-timesyncd binary as systemd_timedated_exec_t to make it run in systemd_timedated_t domain BZ(1640801)
  - Improve fs_manage_ecryptfs_files to allow caller domain also mmap ecryptfs_t files BZ(1630675)
  - Label systemd-user-runtime-dir binary as systemd_logind_exec_t BZ(1644313)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-43
changelog:
  - Update pesign policy to allow pesign_t domain to read bind cache files/dirs
  - Add dac_override capability to mdadm_t domain
  - Create ibacm_tmpfs_t type for the ibacm policy
  - Dontaudit capability sys_admin for dhcpd_t domain
  - Makes rhsmcertd_t domain an exception to the constraint preventing changing the user identity in object contexts.
  - Allow abrt_t domain to mmap generic tmp_t files
  - Label /usr/sbin/wpa_cli as wpa_cli_exec_t
  - Allow sandbox_xserver_t domain write to user_tmp_t files
  - Allow certutil running as ipsec_mgmt_t domain to mmap ipsec_mgmt pid files Dontaudit ipsec_mgmt_t domain to write to the all mountpoints
  - Add interface files_map_generic_tmp_files()
  - Add dac_override capability to the syslogd_t domain
  - Create systemd_timedated_var_run_t label
  - Update systemd_timedated_t domain to allow create own pid files/access init_var_lib_t files and read dbus files BZ(1646202)
  - Add init_read_var_lib_lnk_files and init_read_var_lib_sock_files interfaces


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-44
changelog:
  - Label /usr/share/spamassassin/sa-update.cron as spamd_update_exec_t
  - Add dac_override capability to ssad_t domains
  - Allow pesign_t domain to read gnome home configs
  - Label /usr/libexec/lm_sensors/sensord-service-wrapper as lsmd_exec_t
  - Allow rngd_t domains read kernel state
  - Allow certmonger_t domains to read bind cache
  - Allow ypbind_t domain to stream connect to sssd
  - Allow rngd_t domain to setsched
  - Allow sanlock_t domain to read/write sysfs_t files
  - Add dac_override capability to postfix_local_t domain
  - Allow ypbind_t to search sssd_var_lib_t dirs
  - Allow virt_qemu_ga_t domain to write to user_tmp_t files
  - Allow systemd_logind_t to dbus chat with virt_qemu_ga_t
  - Update sssd_manage_lib_files() interface to allow also mmap sssd_var_lib_t files
  - Add new interface sssd_signal()
  - Update xserver_filetrans_home_content() and xserver_filetrans_admin_home_content() unterfaces to allow caller domain to create .vnc dir in users homedir labeled as xdm_home_t
  - Update logging_filetrans_named_content() to allow caller domains of this interface to create /var/log/journal/remote directory labeled as var_log_t
  - Add sys_resource capability to the systemd_passwd_agent_t domain
  - Allow ipsec_t domains to read bind cache
  - kernel/files.fc: Label /run/motd as etc_t
  - Allow systemd to stream connect to userdomain processes
  - Label /var/lib/private/systemd/ as init_var_lib_t
  - Allow initrc_t domain to create new socket labeled as init_T
  - Allow audisp_remote_t domain remote logging client to read local audit events from relevant socket.
  - Add tracefs_t type to mountpoint attribute
  - Allow useradd_t and groupadd_t domains to send signals to sssd_t
  - Allow systemd_logind_t domain to remove directories labeled as tmpfs_t BZ(1648636)
  - Allow useradd_t and groupadd_t domains to access sssd files because of the new feature in shadow-utils


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-46
changelog:
  - Allow sensord_t to execute own binary files
  - Allow pcp_pmlogger_t domain to getattr all filesystem BZ(1662432)
  - Allow virtd_lxc_t domains use BPF BZ(1662613)
  - Allow openvpn_t domain to read systemd state BZ(1661065)
  - Dontaudit ptrace all domains for blueman_t BZ(1653671)
  - Change label of /usr/libexec/lm_sensors/sensord-service-wrapper from lsmd_exec_t to sensord_exec_t BZ(1662922)
  - Allow hddtemp_t domain to read nvme block devices BZ(1663579)
  - Add dac_override capability to spamd_t domain BZ(1645667)
  - Allow pcp_pmlogger_t to mount tracefs_t filesystem BZ(1662983)
  - Allow pcp_pmlogger_t domain to read al sysctls BZ(1662441)
  - Allow saslauthd_t domain to mmap own pid files BZ(1653024)
  - Add dac_override capability for snapperd_t domain BZ(1619356)
  - Allow staff_t domain to read read_binfmt_misc filesystem
  - Add interface fs_read_binfmt_misc()
  - Allow init_t domain to mmap init_var_lib_t files and dontaudit leaked fd. BZ(1651008)
  - Make workin: systemd-run --system --pty bash BZ(1647162)
  - Allow ipsec_t domain dbus chat with systemd_resolved_t BZ(1662443)
  - Label /usr/lib/systemd/user as systemd_unit_file_t BZ(1652814)
  - Add rules to allow systemd to mounton systemd_timedated_var_lib_t.


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-47
changelog:
  - Allow plymouthd_t search efivarfs directory BZ(1664143)
  - Allow arpwatch send e-mail notifications BZ(1657327)
  - Allow tangd_t domain to bind on tcp ports labeled as tangd_port_t
  - Allow gssd_t domain to read/write kernel keyrings of every domain.
  - Allow systemd_timedated_t domain nnp_transition BZ(1666222)
  - Add the fs_search_efivarfs_dir interface
  - Create tangd_port_t with default label tcp/7406
  - Add interface domain_rw_all_domains_keyrings()
  - Some of the selinux-policy macros doesn't work in chroots/initial installs. BZ(1665643)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-48
changelog:
  - Allow sensord_t domain to use nsswitch and execute shell
  - Allow opafm_t domain to execute lib_t files
  - Allow opafm_t domain to manage kdump_crash_t files and dirs
  - Allow virt domains to read/write cephfs filesystems
  - Allow virtual machine to write to fixed_disk_device_t
  - Update kdump_manage_crash() interface to allow also manage dirs by caller domain Resolves: rhbz#1491585
  - Allow svnserve_t domain to create in /tmp svn_0 file labeled as krb5_host_rcache_t
  - Allow vhostmd_t read libvirt configuration files
  - Update dbus_role_template interface to allow userdomains to accept data from userdomain dbus domains
  - Allow boltd_t domain to read cache_home_t files BZ(1669911)
  - Allow winbind_t domain to check for existence of processes labeled as systemd_hostnamed_t BZ(1669912)
  - Allow gpg_agent_t to create own tmpfs dirs and sockets
  - Add multiple interfaces for vpnc interface file
  - Allow openvpn_t domain to manage vpnc pidfiles BZ(1667572)
  - Label /var/run/fcgiwrap dir as httpd_var_run_t BZ(1655702)
  - In MongoDB 3.4.16, 3.6.6, 4.0.0 and later, mongod reads netstat info from proc and stores it in its diagnostic system (FTDC). See: https://jira.mongodb.org/browse/SERVER-31400 This means that we need to adjust the policy so that the mongod process is allowed to open and read /proc/net/netstat, which typically has symlinks (e.g. /proc/net/snmp).
  - Allow gssd_t domain to manage kernel keyrings of every domain.
  - Revert "Allow gssd_t domain to read/write kernel keyrings of every domain."
  - Add miscfiles_filetrans_named_content_letsencrypt() to optional_block
  - Allow unconfined domains to create letsencrypt directory in /var/lib labeled as cert_t
  - Allow staff_t user to systemctl iptables units.
  - Allow systemd to read selinux logind config
  - Allow transition from init_t domain to user_t domain during ssh login with confined user user_u Resolves: rhbz#1664448
  - Add interface systemd_hostnamed_signull()
  - Allow init_t domain access to USB ttys BZ(1663620)
  - Fix userdom_admin_user_template() interface by adding bluetooth,alg,dccp create_stream_socket permissions.
  - Allow init_t create a directory in directories with var_log_t label
  - Add new interface domain_manage_all_domains_keyrings()


author: Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-49
changelog:
  - Allow glusterd_t to write to automount unnamed pipe Resolves: rhbz#1674243
  - Allow ddclient_t to setcap Resolves: rhbz#1674298
  - Add dac_override capability to vpnc_t domain
  - Add dac_override capability to spamd_t domain
  - Allow ibacm_t domain to read system state and label all ibacm sockets and symlinks as ibacm_var_run_t in /var/run
  - Allow ibacm_t domain to send dgram sockets to kernel processes
  - Allow dovecot_t to connect to MySQL UNIX socket
  - Fix typo bug in sensord policy
  - Update ibacm_t policy after testing lastest version of this component
  - Allow sensord_t domain to mmap own log files
  - Update policy with multiple allow rules to make working installing VM in MLS policy
  - Allow all user domains to read realmd_var_lib_t files and dirs to check if IPA is configured on the system
  - Allow syslogd_t domain to send null signal to all domains on system Resolves: rhbz#1673847
  - Allow systemd-logind daemon to remove shared memory during logout Resolves: rhbz#1674172
  - Fix typos in userdomain policy
  - Update mount_read_pid_files macro to allow also list mount_var_run_t dirs
  - Fix typo bug in userdomain SELinux policy
  - Allow user domains to stop systemd user sessions during logout process
  - Add s_manage_fusefs_named_sockets interface
  - Allow systemd-journald to receive messages including a memfd


author: Björn Esser <besser82@fedoraproject.org> - 3.3.15-2
changelog:
  - Fix runtime dependency: 's!lipreport!libreport!g' (#1536580)
  - Prefer %global over %define
  - Remove obsolete %defattr(-,root,root,-)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.16-1
changelog:
  - Do not show status_icon when there's no alert (#1543758)
  - Run seapplet only on SELinux enabled system (#1541631)
  - Use context in Gio.AppInfo.launch (#1542156)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
changelog:
  - Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
  - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.18-1
changelog:
  - Move sedispatch.conf to /etc/audit/plugins.d/
  - Fix summary and "if" text for AVCs with unknown target path


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.7-1
changelog:
  - cvs_data: Add "fix_cmd" and enable "fix" button
  - chrome: Update "fix_cmd" and enable "fix" button
  - automount_exec_config: Update messages and enable "fix" button
  - allow_ftpd_use_*: Update messages and enable "fix" button
  - allow_execmod: Update messages and enable "fix" button
  - catchall_boolean: fix import of boolean_desc (#1444549)
  - restorecon: fix "then" text
  - Spelling fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.8-1
changelog:
  - Do not split If sentences to framework and plugins - requires
    setroubleshoot 3.3.13 at least - (rhbz#1210243, rhbz#1322734, rhbz#1115510)
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Björn Esser <besser82@fedoraproject.org> - 2:4.5-9
changelog:
  - Add patch to include crypt.h, if present
  - Use %make_{build,install} macros
  - Refresh other patches for proper alignment


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.5-10
changelog:
  - Raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-4
changelog:
  - use cap_setxid file capabilities for newxidmap instead of making them setuid
  - limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
    and the 0 is always used by root anyway
  - manual page improvements


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.2
changelog:
  - Add PR #1324 which makes the docker:// and shub:// URLs work with only
    the runtime subpackage.  All the changes are to this file so it does
    not add a patch.  Moves python files to the runtime subpackage, so the
    BuildRequires & Requires /usr/bin/python3 go back there as well.
  - Improve the underlay option comment in singularity.conf as found in
    the current version of PR #1638.


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.3
changelog:
  - Move the BuildRequires /usr/bin/python3 back to the primary package,
    because otherwise it doesn't get installed at build time.  Leave
    the Requires on the runtime subpackage.
  - Add singularity.abignore to avoid warnings from abipkgdiff.


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.4
changelog:
  - Move the Requires /usr/bin/python3 to be under %package runtime instead
    of under its %description.


author: Dave Dykstra <dwd@fnal.gov> - 2.6.0-1.1
changelog:
  - Update to released upstream 2.6.0
  - Rename PR 1638 to 1817
  - Rename PR 1762 to 1818
  - Note that PR 1324 was also renamed, to 1819


author: Raphael Groner <projects.rg@smart.ms> - 1.2.7.1.20170611git
changelog:
  - new version
  - use git snapshot to include latest upstream patches
  - include upstream patch to get full path of su binary
  - distribute additonal files
  - drop workaround for duplicated readme files
  - fix length of line in description


author: Tom Callaway <spot@fedoraproject.org> - 1.3.0-2
changelog:
  - conditionalize bundled bits
  - fix t/gcode.t (needed to define config->layer_height before trying to use it)
  - exclude big endian architectures


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36.2
   - daemon, vendor: bump github.com/coreos/go-systemd/activation,
     handle API changes
   - snapstate: update fontconfig caches on install
   - overlord,daemon: mock security backends for testing
   - sanity, spread, tests: add CentOS
   - Revert "cmd/snap, tests/main/snap-info: highlight the current
     channel"
   - cmd/snap: add nanosleep to blacklisted syscalls when running with
     --strace
   - tests: add regression test for LP: #1803535
   - snap-update-ns: fix trailing slash bug on trespassing error
   - interfaces/builtin/opengl: allow reading /etc/OpenCL/vendors
   - cmd/snap-confine: nvidia: pick up libnvidia-opencl.so
   - interfaces/opengl: add additional accesses for cuda


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36.3
   - wrappers: use new systemd.IsActive in core18 early boot
   - httputil: retry on temporary net errors
   - wrappers: only restart service in core18 when they are active
   - systemd: start snapd.autoimport.service in --no-block mode
   - data/selinux: fix syntax error in definition of snappy_admin
     interfacewhen installing selinux-policy-devel package.
   - centos: enable SELinux support on CentOS 7
   - cmd, dirs, interfaces/apparmor: update distro identification to
     support ID="archlinux"
   - apparmor: allow hard link to snap-specific semaphore files
   - overlord,apparmor: new syskey behaviour + non-ignored snap-confine
     profile errors
   - snap: add new `snap run --trace-exec` call
   - interfaces/backends: detect too old apparmor_parser


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37
   - snapd: fix race in TestSanityFailGoesIntoDegradedMode test
   - cmd: fix snap-device-helper to deal correctly with hooks
   - tests: various fixes for external backend
   - interface: raw-usb: Adding ttyACM[0-9]* as many serial devices
     have device node /dev/ttyACM[0-9]
   - tests: fix enable-disable-unit-gpio test on external boards
   - tests: define new "tests/smoke" suite and use that for
     autopkgtests
   - interfaces/builtin/opengl: allow access to NVIDIA VDPAU
     library
   - snapshotstate: don't task.Log without the lock
   - overlord/configstate/configcore: support - and _ in cloud init
     field names
   - cmd/snap-confine: use makedev instead of MKDEV
   - tests: review/fix the autopkgtest failures in disco
   - systemd: allow only a single daemon-reload at the same time
   - cmd/snap: only auto-enable unicode to a tty
   - cmd/snap: right-align revision and size in info's channel map
   - dirs, interfaces/builtin/desktop: system fontconfig cache path is
     different on Fedora
   - tests: fix "No space left on device" issue on amazon-linux
   - store: undo workaround for timezone-less released-at
   - store, snap, cmd/snap: channels have released-at
   - snap-confine: fix incorrect use "src" var in mount-support.c
   - release: support probing SELinux state
   - release-tools: display self-help
   - interface: add new `{personal,system}-files` interface
   - snap: give Epoch an Equal method
   - many: remove unused interface code
   - interfaces/many: use 'unsafe' with docker-support change_profile
     rules
   - run-checks: stop running HEAD of staticcheck
   - release: use sync.Once around lazy intialized state
   - overlord/ifacestate: include interface name in the hotplug-
     disconnect task summary
   - spread: show free space in debug output
   - cmd/snap: attempt to restore SELinux context of snap user
     directories
   - image: do not write empty etc/cloud
   - tests: skip snapd snap on reset for core systems
   - cmd/snap-discard-ns: fix umount(2) typo
   - overlord/ifacestate: hotplug-remove-slot task handler
   - overlord/ifacestate: handler for hotplug-disconnect task
   - ifacestate/hotplug: updateDevice helper
   - tests: reset snapd state on tests restore
   - interfaces: return security setup errors
   - overlord: make InstallMany work like UpdateMany, issuing a single
     request to get candidates
   - systemd/systemd.go: add missing tests for systemd.IsActive
   - overlord/ifacestate: addHotplugSeqWaitTask helper
   - cmd/snap-confine: refactor call to snap-update-ns --user-mounts
   - tests: new backend used to run upgrade test suite
   - travis: short circuit failures in static and unit tests travis job
   - cmd: automatically fix localized <option>s to <option>
   - overlord/configstate,features: expose features to snapd tools
   - selinux: package to query SELinux status and verify/restore file
     contexts
   - wrappers: use new systemd.IsActive in core18 early boot
   - cmd: add tests for lintArg and lintDesc
   - httputil: retry on temporary net errors
   - cmd/snap-confine: remove unused sc_discard_preserved_mount_ns
   - wrappers: only restart service in core18 when they are active
   - overlord/ifacestate: helpers for serializing hotplug changes
   - packaging/{fedora,opensuse}: own /var/lib/snapd/cookie
   - systemd: start snapd.autoimport.service in --no-block mode
   - data/selinux: fix syntax error in definition of snappy_admin
     interface
   - snap/info: bind global plugs/slots to implicit hooks
   - cmd/snap-confine: remove SC_NS_MNT_FILE
   - spread: record each tests/upgrade job
   - osutil: do not import dirs
   - cmd/snap-confine: fix typo "a pipe"
   - tests: make security-device-cgroups-{devmode,jailmode} work on arm
     devices
   - tests: force test-snapd-daemon-notify exit 0 when the interface is
     not connected
   - overlord/snapstate: run 'remove' hook before 'auto-disconnect'
   - centos: enable SELinux support on CentOS 7
   - apparmor: allow hard link to snap-specific semaphore files
   - tests/lib/pkgdb: disable weak deps on Fedora
   - release: detect too old apparmor_parser
   - tests: improve how the log is checked to see if the system is
     waiting for a reboot
   - cmd, dirs, interfaces/apparmor: update distro identification to
     support ID="archlinux"
   - spread, tests: add Fedora 29
   - cmd/snap-confine: refactor calling snapd tools into helper module
   - apparmor: allow snap-update-ns access to common devices
   - cmd/snap-confine: capture initialized per-user mount ns
   - tests: reduce verbosity around package installation
   - data: set KillMode=process for snapd
   - cmd/snap: handle DNS error gracefully
   - spread, tests: use checkpoints when dumping audit log
   - tests/lib/prepare: make sure that SELinux context of repacked core
     snap is controlled
   - testutils: split checkers, tweak tests
   - tests: fix for tests test-*-cgroup
   - spread: show AVC audits when debugging, start auditd on Fedora
   - spread: drop Fedora 27, add Fedora 29
   - tests/lib/reset: restore context of removed snapd directories
   - testutil: add File{Present,Absent} checkers
   - snap: add new `snap run --trace-exec`
   - tests: fix for failover test on how logs are checked
   - snapctl: add "services"
   - overlord/snapstate: use file timestamp to initialize timer
   - cmd/libsnap: introduce and use sc_strdup
   - interfaces: let NM access ifindex/ifupdown files
   - overlord/snapstate: on refresh, check new rev can read current
   - client, store: don't use store from client (use client from store)
   - tests/main/parallel-install-store: verify installation of more
     than one instance at a time
   - overlord: don't write system key if security setup fails
   - packaging/fedora/snapd.spec: fix bogus date in changelog
   - snapstate: update fontconfig caches on install
   - interfaces/apparmor/backend.go:411:38: regular expression does not
     contain any meta characters (SA6004)
   - asserts/header_checks.go:199:35: regular expression does not
     contain any meta characters (SA6004)
   - run staticcheck every time :-)
   - tests/lib/systemd-escape/main.go:46:14: printf-style function with
     dynamic first argument and no further arguments should use print-
     style function instead (SA1006)
   - tests/lib/fakestore/cmd/fakestore/cmd_run.go:66:15: the channel
     used with signal.Notify should be buffered (SA1017)
   - tests/lib/fakedevicesvc/main.go:55:15: the channel used with
     signal.Notify should be buffered (SA1017)
   - spdx/parser.go:30:1: only the first constant has an explicit type
     (SA9004)
   - overlord/snapstate/snapmgr.go:553:21: printf-style function with
     dynamic first argument and no further arguments should use print-
     style function instead (SA1006)
   - overlord/patch/patch3.go:44:70: printf-style function with dynamic
     first argument and no further arguments should use print-style
     function instead (SA1006)
   - cmd/snap/cmd_advise.go:200:2: empty branch (SA9003)
   - osutil/udev/netlink/conn.go:120:5: ineffective break statement.
     Did you mean to break out of the outer loop? (SA4011)
   - daemon/api.go:992:22: printf-style function with dynamic first
     argument and no further arguments should use print-style function
     instead (SA1006)
   - cmd/snapd/main.go:94:5: ineffective break statement. Did you mean
     to break out of the outer loop? (SA4011)
   - cmd/snap/cmd_userd.go:73:15: the channel used with signal.Notify
     should be buffered (SA1017)
   - cmd/snap/cmd_help.go:102:7: io.Writer.Write must not modify the
     provided buffer, not even temporarily (SA1023)
   - release: probe apparmor features lazily
   - overlord,daemon: mock security backends for testing
   - cmd/libsnap: move apparmor-support to libsnap
   - cmd: drop cruft from snap-discard-ns build rules
   - cmd/snap-confine: use snap-discard-ns ns to discard stale
     namespaces
   - cmd/snap-confine: handle mounted shared /run/snapd/ns
   - many: fix composite literals with unkeyed fields
   - dirs, wrappers, overlord/snapstate: make completion + bases work
   - tests: revert "tests: restore in restore, not prepare"
   - many: validate title
   - snap: make description maximum in runes, not bytes
   - tests: discard mount namespaces in reset.sh
   - tests/lib: sync cla check back from snapcraft
   - Revert "cmd/snap, tests/main/snap-info: highlight the current
     channel"
   - daemon: remove enableInternalInterfaceActions
   - mkversion: use "test -n" rather than "! test -z"
   - run-checks: assorted fixes
   - tests: restore in restore, not in prepare
   - cmd/snap: fix missing newline in "snap keys" error message
   - snap: epoch lists must contain no duplicate entries
   - interfaces/avahi_observe: Fix typo in comment
   - tests: add SPREAD_JOB to the description of
     systemd_create_and_start_unit
   - daemon, vendor: bump github.com/coreos/go-systemd/activation,
     handle API changes
   - Revert "cmd/snap-confine: don't allow mapping lib{uuid,blkid}"
   - packaging/fedora: use /usr/lib/sysctl.d macro
   - cmd/snap-confine: remove unneeded unshare
   - sanity: extend the kernel version check to cover CentOS/RHEL
     kernels
   - wrappers: remove all desktop files from a snap on removal
   - snap: add an explicit check for `epoch: null` loading
   - snap: check max description length in validate
   - spread, tests: add CentOS support
   - cmd/snap-confine: allow mapping more libc shards
   - cmd/snap-discard-ns: add support for --from-snap-confine
   - tests: make tinyproxy support systemd notify
   - tests: fix shellcheck
   - snap, store: rename `snap.Epoch`'s `Unset` to `IsZero`
   - store: add a test for a non-zero epoch refresh (with epoch bump)
   - store: v1 search doesn't send epoch, stop pretending it does
   - snap: make any "0" epoch be Unset, and marshalled to {[0],[0]}
   - overlord/snapstate: amend test should send local revision
   - tests: use mock-gpio.py in enable-disable-units-gpio test
   - snap: enforce minimal snap name len of 2
   - cmd/libsnap: add sc_verify_snap_lock
   - cmd/snap-update-ns: extra debugging of trespassing events
   - userd: force zenity width if the text displayed is long
   - overlord/snapstate, store: always send epochs
   - cmd/snap-confine,snap-update-ns: discard quirks
   - cmd/snap: add nanosleep to blacklisted syscalls when running with
     --strace
   - cmd/snap-update-ns, tests: clean trespassing paths
   - nvidia, interfaces/builtin: OpenCL fixes
   - ifacestate/hotplug: removeDevice helper
   - cmd: install snap-discard-ns in "make hack"
   - overlord/ifacestate: setup security backends phased by backends
     first
   - ifacestate/helpers: added SystemSnapName mapper helper method
   - overlord/ifacestate: set hotplug-key of the connection when
     connecting hotplug slots
   - snapd: allow snap-update-ns to read /proc/version
   - cmd: handle tumbleweed and leap in autogen.sh
   - interfaces/tests: MockHotplugSlot test helper
   - store,daemon: make UserInfo,LoginUser part of the store interface
   - overlord/ifacestate: use remapper when checking if system snap is
     installed
   - tests: fix how pinentry is prepared for new gpg v 2.1 and 2.2
   - packaging/arch: fix bash completions path
   - interfaces/builtin: add device-buttons interface for accessing
     events
   - tests, fakestore: extend refresh tests with parallel installed
     snaps
   - snap, store, overlord/snapshotstate: drop epoch pointers
   - snap: make Epoch default to {[0],[0]} on load from yaml
   - data/completion: pass documented arguments to completion functions
   - tests: skip opensuse from interfaces-openvswitch-support test
   - tests: simple reproducer for snap try and hooks bug
   - snapstate: do not allow classic mode for strict snaps
   - snap: make Epoch's MarshalJSON not simplify
   - store: remove unused currentSnap and currentSnapJSON
   - many: some small doc comment fixes in recent hotplug code
   - ifacestate/udevmonitor: added callback to signal end of
     enumeration
   - cmd/libsnap: add simplified feature flag checker
   - interfaces/opengl: add additional accesses for cuda
   - tests: add core18 only hooks test and fix running core18 only on
     classic
   - sanity, release, cmd/snap: refuse to try to do things on WSL.
   - cmd: make coreSupportsReExec faster
   - overlord/ifacestate: don't remove the dash when generating unique
     slot name
   - cmd/snap-seccomp: add full complement of ptrace constants
   - cmd: update autogen.sh for opensuse
   - interfaces/apparmor: allow access to /run/snap.$SNAP_INSTANCE_NAME
   - spread.yaml: add more systems to the autopkgtest and qemu backends
   - daemon: spool sideloaded snap into blob dir
     overlord/snapstate: address review feedback
   - packaging/opensuse: stop using golang-packaging
   - overlord/snapshots: survive an unknown user
   - wrappers: fix generating of service units with multiple `before`
     dependencies
   - data: run snapd.autoimport.service only after seeding
   - cmd/snap: unhide --name parameter to snap install, tweak help
     message
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - tests/main/snap-service-after-before-install: verify after/before
     in snap install
   - overlord/ifacestate: mark connections disconnected by hotplug with
     hotplug-gone
   - ifacestate/ifacemgr: don't reload hotplug-gone connections on
     startup
   - tests: install dependencies during prepare
   - tests,store,daemon: ensure proxy settings are honored in
     auth/userinfo too
   - tests: core 18 does not support classic confinement
   - tests: add debug output for degraded test
   - strutil: make VersionCompare faster
   - overlord/snapshotstate/backend: survive missing directories
   - overlord/ifacestate: use map[string]*connState when passing conns
     around
   - tests: move fedora 28 to manual
   - overlord/snapshotstate/backend: be more verbose when
     SNAPPY_TESTING=1
   - tests: removing fedora 26 system from spread.yaml
   - tests: linode execution is not needed anymore
   - tests/lib: adjust to changed systemctl behaviour on debian-9
   - tests: fixes and new backend for tests on nested suite
   - strutil: let MatchCounter work with a nil regexp
   - ifacestate/helpers: findConnsForHotplugKey helper
   - many: move regexp.(Must)Compile out of non-init functions into
     variables
   - store: also make snaps downloaded via deltas 0600
   - snap: use Lstat to determine snap size, remove
     ReadSnapInfoExceptSize
   - interfaces/builtin: add adb-support interface
   - tests: fail if install_snap_local fails
   - strutil: add extra test to CommaSeparatedList as suggested by
     mborzecki
   - cmd/snap, daemon, strutil: use CommaSeparatedList to split a CSL
   - ifacestate: optimize disconnect hooks
   - cmd/snap-update-ns: parse the -u <uid> command line option
   - cmd/snap, tests: snapshots for all
   - client, cmd/daemon: allow disabling keepalive, improve degraded
     mode unit tests
   - snap: only show "next" refresh time if its after the hold time
   - overlord/snapstate: run tests for classic snaps even on systems
     that don't support classic
   - overlord/standby: fix a race between standby goroutine and stop
   - cmd/snap-exec: don't fail on some try mode snaps
   - cmd/snap, userd, testutil: tweak DBus tests to use private session
     bus connection
   - cmd: remove remnants of sc_should_populate_mount_ns
   - client, daemon, cmd/snap: indicate that services are socket/timer
     activated
   - cmd/snap-seccomp: only look for PTRACE_GETFPX?REGS where available
   - cmd/snap-confine: remove SC_NS_FAIL_GRACEFULLY
   - snap/pack, cmd/snap: allow specifying the filename of 'snap pack'
   - cmd/snap-discard-ns: add support for per-user mount namespaces
   - cmd/snap-confine: remove stale mount profile along stale namespace
   - data/apt: close stderr when calling snap in the apt install hook.
   - tests/main: fixes for the new shellcheck
   - testutil, cmd/snap: introduce and use testutil.EqualsWrapped and
     fly
   - tests: initial setup for testing current branch on nested vm and
     hotplug management
   - cmd: refactor IPC and lifecycle of the helper process
   - tests/main/parallel-install-store: the store has caught up, do not
     expect failures
   - overlord/snapstate, snap, wrappers: start services in the right
     order during install
   - interfaces/browser-support, cmd/snap-seccomp: Allow read-only
     ptrace, for the Breakpad crash reporter
   - snap,client: use a different exit code for retryable errors
   - overlord/ifacestate: don't conflict on own discard-snap tasks when
     refreshing & doing garbage collection
   - cmd/snap: tweak `snap services` output when there is no services
   - interfaces/many: updates to support k8s worker nodes
   - cmd/snap: gnome-software install via snap:// handler
   - overlord/many: cleanup use of snapName vs. instanceName
   - snapstate: add command-chain to supported featureset
   - daemon, snap: mark screenshots as deprecated
   - interfaces: fix decoding of json numbers for static/dynamic
     attributes* ifstate: fix decoding of json numbers
   - cmd/snap: try not to panic on error from "snap try"
   - tests: new cosmic image for spread tests on gce
   - interfaces/system-key: add parser mtime and only discover features
     on write
   - overlord/snapshotstate/backend: detect path to tar in unit tests
   - tests/unit/gccgo: drop gccgo unit tests
   - cmd: use relative file names in locking APIs
   - interfaces: fix NormalizeInterfaceAttributes, add tests
   - overlord/snapshotstate/backend: fall back on sudo when no runuser
   - cmd/snap-confine: reduce verbosity of debug and error messages
   - systemd: extend Status() to work for socket and timer units
   - interfaces: typo 'allows' for consistency with other ifaces
   - systemd,wrappers: don't start disabled services
   - ifacestate: simplify task chaining in ifacestate.Connect
   - tests: ensure that goa-daemon is off
   - snap/pack, snap/squashfs: remove extra copy before mksquashfs
   - cmd/snap: block 'snap help <cmd> --all'
   - asserts, image: ensure kernel, gadget, base and required-snaps use
     valid snap names
   - apparmor: add unit test for probeAppArmorParser and simplify code
   - interfaces/apparmor: conditionally add explicit deny rules for
     ptrace
   - po: sync translations from launchpad
   - osutil: tweak handling of error adduser errors
   - cmd: rename ns_group to mount_ns
   - tests/main/interfaces-accounts-service: more debugging
   - snap/pack, snap/squashfs: use type to determine mksquashfs args
   - data/systemd, wrappers: tweak system-shutdown helper for core18
   - tests: show list of processes when ifaces-accounts-service fails
   - tests: do not run degraded test in autopkgtest env
   - snap: overhaul validation error messages
   - ifacestate/hooks: only create interface hook tasks if hooks exist
   - osutil: workaround overlayfs on ubuntu 18.10
   - interfaces/home: don't allow snaps to write to $HOME/bin
   - interfaces: improve Attr error further
   - snapstate: tweak GetFeatureFlagBool() to have a default argument
   - many: cleanup remaining parallel installs TODOs
   - image: improve validation of extra snaps


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.1
   - cmd/snap-confine: add special case for Jenkins
   - tests: workaround missing go dependencies in debian-9
   - daemon, polkit: pid_t is signed
   - interfaces: add display-control interface
   - interfaces: add block-devices interface
   - tests/main/searching: video section got renamed to photo-and-video
   - interfaces/camera: allow reading vendor/etc info from
     /run/udev/data/+usb
   - interfaces/dbus: be less strict about alternations for well-known
     names
   - interfaces/home: allow dac_read_search with 'read: all'
   - interfaces/pulseaudio: allow reading subdirectories of
     /etc/pulse
   - interfaces/system-observe: allow read on
     /proc/locks
   - tests: get test-snapd-dbus-{provider,consumer} from the beta
     channel
   - interfaces/apparmor: mock presence of overlayfs root
   - packaging/{fedora,opensuse,ubuntu}: add /var/lib/snapd/lib/glvnd


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.2
   - cmd/snap, overlord/snapstate: silently ignore classic flag when a
     snap is strictly confined
   - snap-confine: remove special handling of /var/lib/jenkins
   - cmd/snap-confine: handle death of helper process gracefully
   - snap-confine: fix classic snaps for users with /var/lib/* homedirs
     like jenkins/postgres
   - packaging: disable systemd environment generator on 18.04
   - tests: update smoke/sandbox test for armhf
   - cmd/snap-confine: refactor and cleanup of seccomp loading
   - snap-confine: increase locking timeout to 30s
   - snap-confine: fix incorrect "sanity timeout 3s" message
   - snap: fix hook autodiscovery for parallel installed snaps
   - tests: iterate getting journal logs to support delay on boards on
     daemon-notify test
   - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile
   - interfaces: add u2f-devices interface


author: Neal Gompa <ngompa13@gmail.com> - 1.23-1
changelog:
  - Update to 1.23
  - Fix snapd-login-service crash
  - Improve failure handling when snapd socket read/writes fail
  - Backport from upstream: Fix runtime assertion when snapd socket is NULL


author: Neal Gompa <ngompa13@gmail.com> - 1.24-1
changelog:
  - Update to 1.24
  - Add several new APIs for getting details on snaps
  - Fix issues with Qt bindings
  - Add support for setting snapd socket
  - Add support for snap channels
  - Make clients using provided sockets non-blocking


author: Neal Gompa <ngompa13@gmail.com> - 1.29-1
changelog:
  - Update to 1.29
  - Add several new APIs for managing snaps
  - Fix crash accessing freed memory
  - Fix small memory leaks
  - Fix crash on 32-bit architectures


author: Neal Gompa <ngompa13@gmail.com> - 1.32-1
changelog:
  - Update to 1.32
  - Fix crash when calling snapd_login_async
  - Support new bad-query, network-timeout errors from snapd
  - Support QSnapdClient::find/Section method without flags set
  - Assert name parameter set in snapd_snap_match_channel
  - Add methods to extrack track/risk/branch from channel names
  - Implement snapd_client_abort_change
  - Handle incorrectly named tracks field


author: Neal Gompa <ngompa13@gmail.com> - 1.38-1
changelog:
  - Update to 1.38
  - Fix snapd_snap_match_channel not matching risks correctly
  - Fix return value of SnapdSnap::matchChannel when fails to match
  - Support new snapd errors SNAPD_ERROR_NOT_FOUND, SNAPD_ERROR_NOT_IN_STORE
  - Fix progress callback scope annotations
  - Fix reference leak
  - Fix missing out annotation in find/find_section
  - Remove deprecated snapd-login-service
  - Deprecated APIs for snapd-login-service
  - Fix small memory leaks
  - Fix linking with --no-undefined
  - Compile snapd-qt with -fPIC to avoid compile failure on Fedora


author: Neal Gompa <ngompa13@gmail.com> - 1.39-1
changelog:
  - Update to 1.39
  - Fix memory leak in QSnapdAssertion
  - Remove cancelled requests from the request queue.
  - Fix SnapdClient reference leak in each request


author: Neal Gompa <ngompa13@gmail.com> - 1.41-1
changelog:
  - Update to 1.41
  - New APIs for getting build and common IDs
  - Fix buffer overflows reading HTTP chunked data


author: Neal Gompa <ngompa13@gmail.com> - 1.43-1
changelog:
  - Update to 1.43
  - New APIs for getting snaps asynchronously
  - New APIs for getting system info and publisher info
  - Deprecated async client list APIs
  - Fix small memory leak
  - Fix compile warnings


author: Neal Gompa <ngompa13@gmail.com> - 1.44-1
changelog:
  - Update to 1.44
  - Reconnect to snapd if disconnected while trying to send the request
  - Handle short writes to snapd


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Victor Toso <victortoso@redhat.com> - 0.12.14-2
changelog:
  - Align QXLRam to 4 bytes to avoid compilers detect misaligned access
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1565766


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.1-1
changelog:
  - New upstream release
  - Disable celt 0.5.1 support, Opus support has been there for 4 years, so
    celt should no longer be needed


author: Paul Wouters <pwouters@redhat.com> - 5.6.2-5
changelog:
  - Resolves rhbz#1574939 IKEv2 VPN connections fail to use DNS servers provided by the server
  - Resolves rhbz#1449875 Strongswan on epel built without the sql plugin but with the sqlite plugin


author: Mikhail Zabaluev <mikhail.zabaluev@gmail.com> - 5.6.3-3
changelog:
  - Add plugin bypass-lan, disabled by default
  - Resolves rhbz#1554479 Update to strongswan-charon-nm fails


author: Sérgio Basto <sergio@serjux.com> - 2.0.19-1
changelog:
  - Update Homepage and SourceURL
  - This is a many bug fixes
    https://github.com/subdownloader/subdownloader/pull/14
  - Move to python-qt5
  - Spec cleanup


author: Matthew Miller <mattdm@fedoraproject.org> - 1.8.20p2-4
changelog:
  - replace file-based requirements with package-level ones:
  - /etc/pam.d/system-auth to 'pam'
  - /bin/chmod to 'coreutils' (bug #1488934)
  - /usr/bin/vi to vim-minimal
  - ... and make vim-minimal "recommends" instead of "requires", because
    other editors can be configured.


author: Radovan Sroka <rsroka@redhat.com> 1.8.25-1
changelog:
  - rebase sudo to latest stawble version
  - install /etc/dnf/protected.d/sudo instead of /etc/yum/protected.d/sudo (1626968)


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.18-4
changelog:
  - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758).
  - Include all upstream patches since 5.1.18.


author: Pete Walter <pwalter@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop opengl-game-wrapper.sh use
  - Update URL
  - Spec file cleanup
  - Remove ExcludeArch: ppc64le


author: Steve Grubb <sgrubb@redhat.com> - 4.0.6-1
changelog:
  - New upstream bugfix release
  - Fixes CVE-2018-18956 Segmentation fault in the ProcessMimeEntity function


author: Stefan Berger <stefanb@linux.vnet.ibm.com> - 0.1.0-0.20180918git67d7ea3
changelog:
  - Created initial version of rpm spec files
  - Version is now 0.1.0
  - Bugzilla for this spec: https://bugzilla.redhat.com/show_bug.cgi?id=1611829


author: Stefan Berger <stefanb@linux.ibm.com> - 0.1.0-0.20181106git05d8160
changelog:
  - Follow improvements in swtpm repo
  - Remove ownership change of swtpm_setup.sh; have root own the file as required


author: Fabio Valentini <decathorpe@gmail.com> - 0.14.49-1
changelog:
  - Update to version 0.14.49.
  - Drop upstreamed osext patch.
  - Add upstream patch to fix building tests with go 1.11.


author: Fabio Valentini <decathorpe@gmail.com> - 0.14.50-1
changelog:
  - Update to version 0.14.50.
  - Clean up .spec file and use new macros.
  - Drop upstreamed go1.11 patch.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-6.git9f3aed1
changelog:
  - Fix a local vulnerability from a race condition in chown-recursive (CVE-2018-15687, #1639076)
  - Fix a local vulnerability from invalid handling of long lines in state deserialization (CVE-2018-15686, #1639071)
  - Fix a remote vulnerability in DHCPv6 in systemd-networkd (CVE-2018-15688, #1639067)
  - The DHCP server is started only when link is UP
  - DHCPv6 prefix delegation is improved
  - Downgrade logging of various messages and add loging in other places
  - Many many fixes in error handling and minor memory leaks and such
  - Fix typos and omissions in documentation
  - Typo in %_environmnentdir rpm macro is fixed (with backwards compatiblity preserved)
  - Matching by MACAddress= in systemd-networkd is fixed
  - Creation of user runtime directories is improved, and the user
    manager is only stopped after 10 s after the user logs out (#1642460 and other bugs)
  - systemd units systemd-timesyncd, systemd-resolved, systemd-networkd are switched back to use DynamicUser=0
  - Aliases are now resolved when loading modules from pid1. This is a (redundant) fix for a brief kernel regression.
  - "systemctl --wait start" exits immediately if no valid units are named
  - zram devices are not considered as candidates for hibernation
  - ECN is not requested for both in- and out-going connections (the sysctl overide for net.ipv4.tcp_ecn is removed)
  - Various smaller improvements to unit ordering and dependencies
  - generators are now called with the manager's environment
  - Handling of invalid (intentionally corrupt) dbus messages is improved, fixing potential local DOS avenues
  - The target of symlinks links in .wants/ and .requires/ is now ignored. This fixes an issue where
    the unit file would sometimes be loaded from such a symlink, leading to non-deterministic unit contents.
  - Filtering of kernel threads is improved. This fixes an issues with newer kernels where hybrid kernel/user
    threads are used by bpfilter.
  - "noresume" can be used on the kernel command line to force normal boot even if a hibernation images is present
  - Hibernation is not advertised if resume= is not present on the kernenl command line
  - Hibernation/Suspend/... modes can be disabled using AllowSuspend=,
    AllowHibernation=, AllowSuspendThenHibernate=, AllowHybridSleep=
  - LOGO= and DOCUMENTATION_URL= are documented for the os-release file
  - The hashmap mempool is now only used internally in systemd, and is disabled for external users of the systemd libraries
  - Additional state is serialized/deserialized when logind is restarted, fixing the handling of user objects
  - Catalog entries for the journal are improved (#1639482)
  - If suspend fails, the post-suspend hooks are still called.
  - Various build issues on less-common architectures are fixed


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-7.git9f3aed1
changelog:
  - Hibernation checks for resume= are rescinded (#1645870)
  - Various patches:
    - memory issues in logind, networkd, journald (#1653068), sd-device, etc.
    - Adaptations for newer meson, lz4, kernel
    - Fixes for misleading bugs in documentation
  - net.ipv4.conf.all.rp_filter is changed from 1 to 2


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-8.gite339eae
changelog:
  - systemd-journald and systemd-journal-remote reject entries which
    contain too many fields (CVE-2018-16865, #1664973) and set limits on the
    process' command line length (CVE-2018-16864, #1664972)
  - Fix out-of-bounds read when parsing a crafted syslog message in systemd-journald
    (CVE-2018-16866, #1664975)
  - A signal is again used to stop user sessions instead of dbus (#1664491)


author: Adam Williamson <awilliam@redhat.com> - 239-9.gite339eae
changelog:
  - Requires(post) openssl-libs to fix live image build machine-id issue
    See: https://pagure.io/dusty/failed-composes/issue/960


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-10.git4dc7dce
changelog:
  - Fix large memory usage by systemd-journald (#1665931)
  - Some minor fixes to systemd-nspawn, udevadm, documentation and logging


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-74
changelog:
  - Resolves: #1606506 - telnet: FTBFS in Fedora rawhide
  - Resolves: #1505954 - telnet failing to parse .telnetrc due to strncpy used on overlaping buffers


author: Conrad Meyer <cemeyer@uw.edu> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - Buildsystem has changed to use meson.  Adapt, following https://fedoraproject.org/wiki/Packaging:Meson .


author: Tom Callaway <spot@fedoraproject.org> - 7:2017-16
changelog:
  - add algobox
  - remove Provides: tex(textcase.sty) from revtex4 (used to live there, now it is in textcase)
  - add versioning to mensa-tex provide


author: Tom Callaway <spot@fedoraproject.org> - 8:2018-1
changelog:
  - update ALL THE THINGS
  - bump epoch
  - use a mirror that isn't broken/evil
  - use %sources macro to make things nicer in the spec file
  - hopefully fix all broken dependencies


author: Tom Callaway <spot@fedoraproject.org> - 8:2018-23
changelog:
  - add missing Provide to texlive-ocgx2, and add Requires on that provide to texlive-media9
    Fun fact: This makes them completely circular dependencies.


author: Tom Callaway <spot@fedoraproject.org> - 7:20180414-28
changelog:
  - do not try to ls /usr/share/texlive/fmtutil.cnf.d, it can be empty, 
    and that makes for noisy errors in scripts (bz1650935)
    Thanks to Villy Kruse.
  - fix pkgconfig cleanup sed to use %{source_date} instead of %{version}
    which is overridden with subpackage specific data at that point. (bz1426622)


author: Martin Stransky <stransky@redhat.com> - 60.3.0-5
changelog:
  - Backported Wayland related code from Firefox 63
  - Added fix for mozbz#1507475 - crash when display changes


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.35-1
changelog:
  - Fix for CVE-2018-16737, CVE-2018-16738 and CVE-2018-16758 
  - Update to new upstream version 1.0.35


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.10-1
changelog:
  - Do not undo tags when git state is dirty (skuznets@redhat.com)
  - Parse options in `tito init` (skuznets@redhat.com)
  - Only use `rpmbuild --noclean` if it is supported (skuznets@redhat.com)
  - Explicitly define indicies in formatting statements (skuznets@redhat.com)
  - Achieve quiet output from `rpmbuild` without passing `--quiet`
    (skuznets@redhat.com)
  - Update the MANIFEST.in (skuznets@redhat.com)
  - Correctly pass verbosity options through the builder CLI
    (skuznets@redhat.com)
  - Use correct print-formatting directive in debugging (skuznets@redhat.com)
  - Use `.format()` string formatting correctly in Builder (skuznets@redhat.com)
  - Refactor `rpmbuild` invocation for readability (skuznets@redhat.com)
  - Added `--quiet` and `--verbose` to `tito build` (skuznets@redhat.com)
  - Add a Travis CI manifest (skuznets@redhat.com)
  - Only flush output stream if flushing is supported (skuznets@redhat.com)
  - Added support for choosing platforms for tests (skuznets@redhat.com)
  - Refactored version->tag mapping logic in Tagger (skuznets@redhat.com)
  - Improved debugging for RPM build step (skuznets@redhat.com)
  - Print command debugging information only once (skuznets@redhat.com)
  - Flush output buffers (skuznets@redhat.com)
  - Document `tito tag --use-release` in the manpage (skuznets@redhat.com)
  - Added an option to not escalate privileges on `tito build --install`
    (skuznets@redhat.com)
  - Factor out the version->tag mapping in the Builder (skuznets@redhat.com)
  - Collapse tagger class selection logic (skuznets@redhat.com)
  - Rename `globalconfig` section to `buildconfig` in README
    (skuznets@redhat.com)
  - fixes #29 - remove --list-tags and --only-tags (jmrodri@gmail.com)
  - 253 - print cmd info when --debug is supplied (jmrodri@gmail.com)
  - Work around `dnf` issues and install builddep for Rawhide
    (skuznets@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.11-1
changelog:
  - Fixing remote_git_name (adammhaile@gmail.com)
  - Fix links in README.md file (mzalewsk@redhat.com)
  - Encourage usage of git push --follow-tags (mzalewsk@redhat.com)
  - Print mock output when building with MockBuilder (yuxzhu@redhat.com)
  - Fix a race condition when /tmp/tito doesn't exist (vfreex@gmail.com)
  - Don't append 'None' to Release line with no '%{?dist}' part
    (patrice.fournier@ifax.com)
  - python3's map() returns a map object, but we expect sources to be a list
    (evgeni@golov.de)
  - Submitting was missing a t. (jmrodri@gmail.com)
  - update links (robberphex@gmail.com)
  - use LC_ALL=C.UTF-8 rather than plain C (msuchy@redhat.com)
  - make ReleaseTagger honour --use-version (egolov@redhat.com)
  - also verify that ReleaseTagger supports --use-release (egolov@redhat.com)
  - add test for ReleaseTagger together with --use-version (egolov@redhat.com)
  - Format package list more cleanly (skuznets@redhat.com)
  - Custom tag support in tito release (vrutkovs@redhat.com)
  - VersionTagger should support custom tag format (vrutkovs@redhat.com)
  - Remove createrepo_c BR from spec (ngompa13@gmail.com)
  - Use createrepo_c for creating rpm-md repos (ngompa13@gmail.com)
  - Fixup Fedora Dockerfiles to work correctly (ngompa13@gmail.com)
  - Remove useless EL5 stuff (ngompa13@gmail.com)


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.8-2
changelog:
  - fixes rhbz #1652128 CVE-2018-19387
  - tmux: NULL Pointer Dereference in format_cb_pane_tabs in format.c


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.47-1
changelog:
  - Update to 8.0.47
  - Resolves: rhbz#1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615


author: Troy Dawson <tdawson@redhat.com> - 1:8.0.47-2
changelog:
  - Change "zip -u" to "zip"
  - Resolves: rhbz#1495241 [tomcat] zip -u in spec file causes race condition


author: Coty Sutherland <csutherl@redhat.com> - 1:8.5.29-1
changelog:
  - Update to 8.5.29
  - Resolves: rhbz#1548290 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unitended exposure of resources
  - Resolves: rhbz#1548284 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.10-1
changelog:
  - Update to 9.0.10
  - Resolves: rhbz#1624929 - CVE-2018-1336 tomcat: A bug in the UTF-8 decoder can lead to DoS
  - Resolves: rhbz#1579612 - CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1607586 - CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1607584 - CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.13-1
changelog:
  - Update to 9.0.13
  - Resolves: rhbz#1636513 - CVE-2018-11784 tomcat: Open redirect in default servlet


author: Marcel Härry <mh+fedora@scrit.ch> - 0.3.2.10-1
changelog:
  - Update to latest version. Security-Fixes TROVE-2018-001, TROVE-2018-002,
    TROVE-2018-003 and TROVE-2018-004


author: Robert Mayr <robyduck@fedoraoproject.org> 0.2.7-1
changelog:
  - Updated Tor Browser signing key because they added a new subkey and verification was failing
  - Improved localization, and added Russian


author: Robert Mayr <robyduck@fedoraoproject.org> 0.2.8-1
changelog:
  - Automatically refresh GPG keyring, to prevent signature verification false positives
  - Improve GnuPG code by using GPGME if available
  - Added Czech, Hungarian localization


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Sun Yunying <yunying.sun@intel.com> - 2.0.1-1
changelog:
  - Update to 2.0.1 release
  - Remove the tcti SONAME patch since it's already included in 2.0.1
  - Update dependency of tpm2-abrmd-selinux to fixed version instead dynamic one


author: Sun Yunying <yunying.sun@intel.com> - 2.0.2-1
changelog:
  - Update to 2.0.2 release
  - Add patch to fix configure error, also add autoreconf to update configure


author: Sun Yunying <yunying.sun@intel.com> - 2.0.3-1
changelog:
  - Update to 2.0.3 release
  - Remove gdbus related patch and autoreconf scriptlet as it's included in 2.0.3


author: Yunying Sun <yunying.sun@intel.com> - 3.1.0-1
changelog:
  - Update Requires version of tpm2-tss to 2.0.0
  - Remove BuildRequires for tcti-abrmd since it is optional
  - Remove BuildRequires for tcti-{device,mssim} as it is now dynamically loaded
  - Update to 3.1.0 release


author: Javier Martinez Canillas <javierm@redhat.com> - 3.1.2-1
changelog:
  - Update to 3.1.2 release
  - Restore TCTI configuration environment for tools
  - Restore tpm2_getcap tool properties output
    Resolves: rhbz#1625647


author: Javier Martinez Canillas <javierm@redhat.com> - 3.1.3-2
changelog:
  - Fix broken -T option and a couple of minor fixes
  - Add pandoc BuildRequires
    Resolves: rhbz#1663934


author: Javier Martinez Canillas <javierm@redhat.com> - 1.4.0-1
changelog:
  - Update URLs to point to the new project location
  - Add README.md CHANGELOG.md to %files directive
  - Update to 1.4.0 release (RHBZ#1508870)


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 release (RHBZ#1508870)
  - Remove patch file 60-tpm-udev.rules, use upstream tpm-udev.rules instead
  - Disable ESAPI to fix build errors caused by dependency to libgcrypt 1.6.0
  - Add scriptlet to fix Rpath errors
  - Update file installation paths and names accordingly


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-2
changelog:
  - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora
  - Bump release version to 2.0.0-2


author: Tim Landscheidt <tim@tim-landscheidt.de> - 0.13.5-5
changelog:
  - Loosen requirements for python3-slugify and python3-urllib3 in
    requirements.txt (#1653103, #1654677).
  - Add pinned version requirements from requirements.txt to
    BuildRequires/Requires.
  - Add BuildRequires for python3-mock, python3-six, python3-slugify and
    python3-urllib3.
  - Add Requires for python3-requests (#1653103).
  - Add %check section.


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry James <loganjerry@gmail.com> - 1.8-1
changelog:
  - New upstream version
  - Drop upstreamed -uio patch
  - Add -net-protocols patch to fix bz 1514786
  - Add -autofs patch to fix compilation under kernel 4.14+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-7
changelog:
  - Dropped exlusive arch in tuned-profiles-nfv-host-bin (it seems it
    blocked all tuned packages on non x86 architectures)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
      resolves: rhbz#1536476
    - realtime-virtual-host: script.sh: add error checking
      resolves: rhbz#1461509
    - man: improved tuned-profiles-cpu-partitioning.7
      resolves: rhbz#1548148
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
      resolves: rhbz#1571403
    - plugin_scheduler: whitelist/blacklist processed also for thread names
      resolves: rhbz#1512295
    - bootloader: patch all GRUB2 config files
      resolves: rhbz#1556990
    - profiles: added mssql profile
      resolves: rhbz#1442122
    - tuned-adm: print log excerpt when changing profile
      resolves: rhbz#1538745
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
      resolves: rhbz#1550573
    - sysctl: support assignment modifiers as other plugins do
      resolves: rhbz#1564092
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Ondřej Lysoněk <olysonek@redhat.com> - 2.10.0-2
changelog:
  - tuned-adm: Fix a traceback when run without action specified
  - Fixed compatibility with python-3.7


author: Patsy Franklin <pfrankli@redhat.com> - 2017c-1
changelog:
  - Rebase to tzdata-2017c.
    - Northern Cyprus will revert to using EQ rules on October 29, 2017.
    - Sudan will switch from +03 to +02 on November 1, 2017.
    - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
      experiment with DST.
    - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
    - Namibia - starting September 3, 2017 switches from +)1 with DST to
      +02 all year.  This change takes effect April 1, 2018.
    - Turks & Caicos changes from -04 all year to -05 with US DST starting
      on March 11, 2018.  Effective change date is November 4, 2018.
    - tzdata now includes two text versions of the time zone data - tzdata.zi
      and leapseconds.
    - Includes two patches to deal with build issues.


author: Patsy Franklin <pfrankli@redhat.com> - 2018c-1
changelog:
  - Rebase to tzdata-2018c:
    - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
    - Brazil's DST will start on the first Sunday in November
    - Support for the new zic -t option.
    - Add back pacificnew file omitted in tzdata-2018a


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d:
    - DST for Asia/Gaza and Asia/Hebron has changed
      from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-1
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    Includes changes for tzdata-2018f.
    - Volgograd will change from UTC+03 to UTC+04 on 2018-10-28 at 02:00.
    - Fiji will end DST on 2019-01-13 instead of the 2019-01-20 as
      previously predicted.
    - Most of Chile will end DST on the first Saturday in April at 24:00
      and restart DST on the first Saturday in September at 24:00.
    - Morocco will change from UTC+00/+01 to permanent +01 effective 2018-10-27.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Peter Robinson <pbrobinson@fedoraproject.org> 2018.09-0.4.rc3
changelog:
  - 2018.09 RC3
  - Enable nanopi_neo_plus2, pine_h64, rock960-rk3399, a64-olinuxino
  - Build against new upstream AllWinner ATF support
  - Use firmware provided DT on Raspberry Pi
  - Support for Pine64-LTS


author: Pablo Greco <pablo@fliagreco.com.ar>
changelog:
  - Added conditional to enable devtoolset-7-gcc for .el7 build (Arrfab)
  - Added conditional BR, python2-pyelftools is python-pyelftools in .el7 (Arrfab)


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.3-1
changelog:
  - Remove required parameters -i or -j and added support for reading json file from stdin.
  - Remove "-n" or "--name" parameter. Name of the container will be required for this tool


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.4-1
changelog:
  - Add manpages
  - Add support for communicating with libvirt daemon
  - Add support for communicating with X server.
  - Add support for read/write to the controlling terminal


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-1
changelog:
  - Fix capability allow rules when capabilities are specified in JSON file
  - Add additional SELinux allow rules to base container template to allow container to read proc_type types.


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Jakub Martisko <jamartis@redhat.com> - 6.0-42
changelog:
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Christian Kellner <ckellner@redhat.com> - 0.99.9-1
changelog:
  - New upstream release
  - Drop unneccessary patch to fix udev events access
  - Fix daemon lockdown issues (keyboard backlight, AC status changes)
  - Out-of-tree build fixes and documentation fixes


author: Martin Gansser <martinkg@fedoraproject.org> - 1.3.0-0.6.20180127git58ad802
changelog:
  - Update to 1.3.0-0.6.20180127git58ad802
  - Dropped %{name}-unbundle-qxtglobalshortcut.patch
  - Delete bundled qxtglobalshortcut sources


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-2
changelog:
  - Add valgrind-3.14.0-s390x-fix-reg-alloc-vr-vs-fpr.patch.
  - Add valgrind-3.14.0-s390x-sign-extend-lochi.patch.
  - Add valgrind-3.14.0-s390x-vec-reg-vgdb.patch.
  - Add valgrind-3.14.0-s390x-vec-float-point-code.patch
    and valgrind-3.14.0-s390x-vec-float-point-tests.patch
  - Disable full regtests on fedora everywhere.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-4
changelog:
  - Add valgrind-3.14.0-get_otrack_shadow_offset_wrk-ppc.patch,
    valgrind-3.14.0-new-strlen-IROps.patch,
    valgrind-3.14.0-ppc-instr-new-IROps.patch,
    valgrind-3.14.0-memcheck-new-IROps.patch,
    valgrind-3.14.0-ppc-frontend-new-IROps.patch,
    valgrind-3.14.0-transform-popcount64-ctznat64.patch and
    valgrind-3.14.0-enable-ppc-Iop_Sar_Shr8.patch (#1652926)


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-5
changelog:
  - Add valgrind-3.14.0-wcsncmp.patch (#1645971)
  - Replace valgrind-3.14.0-s390x-vec-float-point-{code,test}.patch
    with upstream versions.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-6
changelog:
  - Add valgrind-3.14.0-final_tidyup.patch
  - Add valgrind-3.14.0-ppc64-ldbrx.patch
  - Add valgrind-3.14.0-ppc64-unaligned-words.patch
  - Add valgrind-3.14.0-ppc64-lxvd2x.patch
  - Add valgrind-3.14.0-ppc64-unaligned-vecs.patch
  - Add valgrind-3.14.0-ppc64-lxvb16x.patch
  - Add valgrind-3.14.0-set_AV_CR6.patch
  - Add valgrind-3.14.0-undef_malloc_args.patch
  - Add valgrind-3.14.0-jm-vmx-constraints.patch
  - Add valgrind-3.14.0-sigkill.patch
  - Add valgrind-3.14.0-ppc64-ptrace.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64.
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-9
changelog:
  - Add valgrind-3.14.0-vbit-test-sec.patch
  - Add valgrind-3.14.0-x86-Iop_Sar64.patch
  - Add valgrind-3.14.0-power9-addex.patch


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.0.3-1
changelog:
  - Use Python 3
  - Use qa-make Makefile
  - Fix secrets serialization
  - Change the API side a bit
  - Move OIDC config


author: Martin Gansser <martinkg@fedoraproject.org> - 2.4.0-1
changelog:
  - Dropped dvbsddevice and rcu plugins
  - SPEC File cleanup
  - Dropped patch9  vdr-1.7.29-hlcutter-0.2.3.diff
  - Dropped patch14 0001-Fix-build-with-systemd-230.patch
  - Dropped patch19 vdr-2.2.0-menuselection.patch
  - Dropped Patch20 %{name}-2.3.2-unsignedtosigned.diff
  - Dropped Patch21 %{name}-gcc7-fix.patch
  - Add %{name}-2.4.0-01-fix-svdrp-modt-recflag.diff
  - Add skincurses-log-errors.patch
  - Add 12_osdbase-maxitems.patch


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1.91-1
changelog:
  - Update to 1.1.91
  - Switched to BR python2-devel according to Fedora Packaging guidelines for Python


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.1-2
changelog:
  - Add BR gcc-c++
  - Add BR pkgconfig(freetype2)
  - License is GPLv2+ not GPL+
  - Convert HISTORY file to utf-8


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.48-2
changelog:
  - Use %{version} for SOURCE tag
  - Use %bcond_with/without for debugging flag
  - Mark COPYING as %license file
  - Use korrekt license GPLv2+
  - take ownership of unowned directory %{vdr_configdir}/plugins/osd2web/


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.5-9.20170611git254122b
changelog:
  - Use mariadb-connector-c-devel instead of mariadb-devel only for f28,
    fixes (BZ#1493698).
  - Add BR openssl-devel


author: Cole Robinson <crobinso@redhat.com> - 1.5.0-1
changelog:
  - Rebased to version 1.5.0
  - python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  - Switch --location ISO to use isoinfo (Andrew Wong)
  - virt-install: add --cpu numa distance handling (Menno Lageman)
  - virt-install: fix --disk for rbd volumes with auth (Rauno Väli)
  - virt-install: add --cputune vcpupin handling (Wim ten Have)
  - details ui: Showing attached scsi devices per controller (Lin Ma)
  - network ui: Show details about SR-IOV VF pool (Lin Ma)
  - Greatly expand UI test suite coverage


author: Cole Robinson <crobinso@redhat.com> - 2.0.0-1
changelog:
  - Rebased to version 2.0.0
  - Finish port to Python 3
  - Improved VM defaults: q35 PCIe, usb3, CPU host-model
  - Search based OS selection UI for new VMs
  - Track OS name for lifetime of domain in <metadata> XML
  - Host interface management UI has been completely removed
  - Show domain IP on interface details page


author: Cole Robinson <crobinso@redhat.com> - 2.1.0-1
changelog:
  - Rebased to version 2.1.0
  - Bash autocompletion support (Lin Ma, Cole Robinson)
  - UI and command line --vsock support (Slavomir Kaslev)
  - virt-xml: Add --os-variant option (Andrea Bolognani)
  - virt-install: use libosinfo cpu, mem, disk size defaults (Fabiano
    Fidencio)
  - virt-install: Better usage of libosinfo -unknown distro IDs (Fabiano
    Fidencio)
  - virt-install: More usage of libosinfo for ISO --location detection
  - virt-install: Add --location LOCATION,kernel=X,initrd=Y for pointing to
    kernel/initrd in media that virt-install/libosinfo fails to detect


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.3.rc0
changelog:
  - Update the "check if NID is defined" patch
  - Improve compatibility with the kerberos gssapi header file
  - Rebuild for gsoap 2.8.48 (Fedora 27)


author: James Hennessy <jphxxxx@gmail.com>
changelog:
  - Fixed issue where vpnc-script is using resolvconf on systems where "resolve" isn't enabled in /etc/nsswitch.


author: suve <veg@svgames.pl> 1.2-1
changelog:
  - New upstream version
  - gettext added as depencency
  - Install section now relies on upstream's Makefile


author: suve <veg@svgames.pl> 1.2-2
changelog:
  - Use "_prefix" macro instead of bare string "/usr" during build & install
  - Remove curly braces from "find_lang" macro call
  - Adjust URL (remove trailing slash) and Source0


author: Artur Iwicki <fedora@svgames.pl> 1.3-1
changelog:
  - Update to new upstream version
  - Use tag/name-tag.tar.gz as Source0 instead of tag.tar.gz#/name-tag.tar.gz


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.9.14-2
changelog:
  - Spec file cleanups.
  - Add unpack_wafdir.py (rhbz#1509550).
  - Fix rpmlint issue (rhbz#1509716).
  - Fix doc building (rhbz#1512232).


author: Giulia Naponiello <gnaponie@redhat.com> - 0.8.0-1
changelog:
  - Removed support to SQLite in favor of PostgreSQL.
  - Fixed and improved interaction with PostgreSQL.
  - Added information on the README file on how to configure the db.


author: Lukas Holecek <lholecek@redhat.com> - 0.10.0-1
changelog:
  - Comment is now explicitly required when creating waivers (both in API and
    CLI).
  - Multiple waivers can now be created with single POST request (#98). To create
    multiple waivers, POST list to "waivers/" instead of single waiver.
  - When creating a waiver by referring to a result ID, WaiverDB now accepts
    results with ``'type': 'brew-build'`` as an alias for ``'koji_build'``.
  - Messaging can be disabled is settings with ``MESSAGE_PUBLISHER = None``.
  - The ``KERBEROS_HTTP_HOST`` setting in the server configuration is now
    ignored. This setting is no longer needed because GSSAPI will automatically
    find a key in the Kerberos keytab matching the service principal in the
    client request.
  - New man pages are available for ``waiverdb-cli(1)`` and ``waiverdb(7)`` (REST
    API).
  - Changed error message for bad ``since`` value. E.g.
    ``api/v1.0/waivers/?since=123`` results in HTTP 400 with message
    ``{"message": {"since": "time data '123' does not match format
    '%Y-%m-%dT%H:%M:%SOURCE.%f'"}}``.
  - CORS headers are now supported for every request (#160).
  - Wrong ``subject`` filter produces more user-friendly error (#162).
  - Setting a keytab file is no longer required: if one is not explicitly set,
    ``/etc/krb5.keytab`` will be used (#55).
  - Unused option ``resultsdb_api_url`` was removed from client.conf.
  - Containers on Quay (`<https://quay.io/repository/factory2/waiverdb>`__).


author: Matt Prahl <mprahl@redhat.com> - 0.13.0-1
changelog:
  - Stop validating subject types against a hard-coded list. Since Greenwave
    now supports arbitrary subject types, this list of valid subject types
    no longer needs to be maintained.


author: Dmitri Smirnov <dmitri@smirnov.ee> - 1.0.6-6
changelog:
  - Added install hint and native messaging host files for Chromium
  - Minor whitespace consistency changes in spec file


author: Wolfgang Stöggl <c72578@yahoo.de> - 0.8.1-1
changelog:
  - New upstream version
  - Added websocketpp-0.8.1-cmake-configversion-compatibility-anynewerversion.patch
  - The following patches are not needed any more and have been removed:
    websocketpp-0.7.0-openssl11.patch
    websocketpp-0.7.0-zlib-permessage-deflate.patch
    websocketpp-0.7.0-minor-adjustments-to-recent-extension-negotiation.patch
  - Switch to pkgconfig(openssl) again
  - Update version and URL in websocketpp.pc


author: Wolfgang Stöggl <c72578@yahoo.de> - 0.8.1-2
changelog:
  - Update websocketpp-0.8.1-cmake-configversion-compatibility-anynewerversion.patch
    Disable check for same 32/64bit-ness in websocketpp-configVersion.cmake


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Ben Rosser <rosser.bjr@gmail.com> - 20171222-1
changelog:
  - Updated to latest upstream release. (#1528622)
  - Moved appdata file to new appdata location, /usr/share/metainfo.
  - Removed dependency on 'time' package as per #1533795.


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.0-1
changelog:
  - New version 2.6.0
  - Fix for CVE-2018-9256, CVE-2018-9257, CVE-2018-9258, CVE-2018-9259, CVE-2018-9260, CVE-2018-9261, CVE-2018-9262, CVE-2018-9263, CVE-2018-9264, CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268, CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272, CVE-2018-9273, CVE-2018-9274
  - Switch from autotools to cmake
  - Removed python2-devel(#1560284) and libssh2-devel from dependencies
  - Removed python scripts


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-1
changelog:
  - New version 2.6.2
  - Contains fixes for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.5-1
changelog:
  - New version 2.6.5
  - Contains fixes for CVE-2018-19622, CVE-2018-19623,  CVE-2018-19624, CVE-2018-19625, CVE-2018-19626, CVE-2018-19627, CVE-2018-19628


author: Ben Cotton <bcotton@fedoraproject.org> - 0.7.1-1
changelog:
  - Update to latest upstream release
  - Remove unneeded dependences, which allows us more build arches
  - Split the X11 version into an optional subpackage


author: Kevin Fenzi <kevin@scrye.com> - 4.9.7-1
changelog:
  - Update to 4.9.7 security update. Fixes bug #1598612
  - Fixes CVE-2018-12895 bugs #1595584 and #1595585


author: Karel Zak <kzak@redhat.com> - 3.0-31
changelog:
  - #1626689 - linux.words contains "half-embracinghalf-embracingly"
  - add Donald Trump between presidents


author: Jiří Klimeš <blueowl@centrum.cz> - 1:2.6-12
changelog:
  - Fix crash when using MACsec without loaded macsec.ko (rh #1497640)
  - Enable Fast BSS Transition for station mode (rh #1372928)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-0.1.rc2
changelog:
  - New version
  - Fixed compilation with gcc-8.0.1
    Resolves: rhbz#1556544
  - De-fuzzified compile-fix patch


author: Richard Shaw <hobbes1069@gmail.com> - 1.9.1-1
changelog:
  - Update to 1.9.1.
  - Update compile patch to deal with qt5_use_modules no longer being available in
    rawhide/f29.


author: Rex Dieter <rdieter@fedoraproject.org> - 18.02.0-1
changelog:
  - 18.02.0
  - drop references to now-absent texinfo content
  - .spec cosmetics, use %autosetup %make_build %_metainfodir


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.0-4
changelog:
  - move files from /usr/lib/xen to /usr/libexec/xen
  - create symlink at /usr/lib/xen for compatibility


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.0-10
changelog:
  - insufficient TLB flushing / improper large page mappings with AMD IOMMUs
  	[XSA-275] (#1651665)
  - x86: DoS from attempting to use INVPCID with a non-canonical addresses
  	[XSA-279] (#1651970)
  - xen: various flaws (#1652251)
    resource accounting issues in x86 IOREQ server handling [XSA-276]
    x86: incorrect error handling for guest p2m page removals [XSA-277]
    Fix for XSA-240 conflicts with shadow paging [XSA-280]


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.1-1
changelog:
  - update to 4.11.1
    remove patches for issues now fixed upstream
    adjust xen.use.fedora.ipxe.patch
  - only include qemutrad build requirements for platforms that use it
  - construct ovmf.bin from edk2-ovmf package (#1656651)


author: Xavier Bachelot <xavier@bachelot.org> - 2.7.0-28
changelog:
  - Clean up spec.
  - Add patch for CVE-2016-4463 (RHBZ#1351469).
  - Add patch for CVE-2017-12627 (RHBZ#1551526).


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.4.2-1
changelog:
  - Update to 1.4.2, fixes rhbz#1404980
  - Port to GtkApplication (this should help with keyboard shortcut issues)
  - Translation updates: Catalan, Croatian, Danish, Dutch (Flemish),
    Greek, Indonesian, Italian, Kazakh, Lithuanian, Norwegian Bokmal,
    Serbian, Thai


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-6
changelog:
  - Fix font issues (rhbz#1523624) :
   - Adjust xfig-3.2.5-urwfonts.patch for new font names in urw-base35-fonts
   - Except for the symbols font, use the old un-scalable Adobe PCF Symbol font
     for now as StandardSymbolsPS.otf from urw-base35-fonts is currently broken
   - Add a patch to deal with some fonts being scalable, while Symbol is not
   - Note the dingbats font is also broken in urw-base35-fonts, but there is no
     replacement for it, so that font is still broken, see rhbz#1534206
  - ghostscript-core no longer exists, instead require ghostscript (rhbz#1536581)
  - Remove obsolete icon-cache and desktop-database scriptlets
  - Add a patch from Debian fixing some issues with arrows


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-7
changelog:
  - Fix font issues take 2 (rhbz#1523624) :
   - It turns out the new urw fonts are completely unusuable as X11 core fonts,
     stop using them for now (see bug rhbz#1551219)
   - Add a patch to use the fallback fonts for non-scalable fonts too, so that
     we at least show something somewhat reasonable for Bookman, New Century
     Schoolbook and Palatino
   - This means that display of Zapf Chancery and Zapf Dingbats currently
     falls back to the "fixed" font, which is completely wrong for Dingbats


author: Hans de Goede <hdegoede@redhat.com> - 3.2.7a-1
changelog:
  - New upstream release 3.2.7a
  - Add Requires: transfig to make sure esp export works (rhbz#1642033)
  - Switch back to URW fonts so that Bookman, New Century Schoolbook and
    Palatino work again. This uses the old version of the URW fonts which are
    now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
  - Trim the changelog


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.7.3-2
changelog:
  - added patch which allows build xml-security-c against openssl 1.1
  - added ac_fixes patch: do not use sed to remove hardcoded compile
    options. Use patch because you will never know is such correction
    still needed (added autoconf, automake and libtool to BuildRequires)
  - added libstdc++-devel to BuildReqires and to devel Requires
  - add explicit all %configure options to prevent build by mistake package
    against nss and force use openssl
  - added --disable-debug to %configure options
  - added use %autosetup in %prep
  - do not waste IOs on remove not packaged files and add them %files
    with %exclude
  - indent and clean spec (move patch comments to the patch)


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.6-2
changelog:
  - Allow oddjob-mkhomedir in SELinux policy (stolen from grishin-a)
  - Allow no new privileges transition in SELinux policy


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.6-3
changelog:
  - mark files in /etc/xrdp as configs
  - run ldconfig
  - remove chmod of certs/keys
  - fix script interpreter


author: Matěj Cepl <mcepl@redhat.com> - 2018.07.21-2
changelog:
  - Add youtube-dl-2018.07.21-ceskatelevize-https.patch to workaround
    (badly) around https://github.com/rg3/youtube-dl/issues/16307


author: Orion Poplawski <orion@nwra.com> - 2.39-4
changelog:
  - Use upstream install locations
  - Fix group of ykval-config.php
  - Add apache config file
  - Package munin plugins
  - Add %license


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-517
changelog:
  - Use explicit python2 executable at build time
  - reposync: prevent path traversal (CVE-2018-10897)
  - Resolves: bug#1600454


author: Björn Esser <besser82@fedoraproject.org> - 1.1.31-518
changelog:
  - Replace %define with %global
  - Use explicit python2 shebang
  - Move COPYING to %license
  - Use %py_byte_compile for %pluginhome
  - Clean trailing white-space
  - Remove obsolete Group tag
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Use %autosetup
  - Drop rm -rf %{buildroot}
  - Use %make_install
  - Drop unused definition of %python_sitelib


author: Hans de Goede <hdegoede@redhat.com> - 1.30-27
changelog:
  - Fix FTBFS (rhbz#1606782)
  - Add appdata
  - Fix the spaceship being unable to shoot on locales which use a comma as
    decimal separator


author: Petr Šabata <contyk@redhat.com> - 0.4.3-1
changelog:
  - 0.4.3 bump
  - Now includes more icons!
  - Based on Ankur Sinha's PR, https://src.fedoraproject.org/rpms/zathura/pull-request/1


author: Petr Šabata <contyk@redhat.com> - 0.3.1-1
changelog:
  - 0.3.1 bump
  - Don't link against the no longer provided libmupdfthird,
    see rhbz#1438824 for more info


author: Jonathan Dieter <jdieter@gmail.com> - 0.9.16-1
changelog:
  - Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  - Add functions to API to simplify extracting a single chunk
  - Change default zstd compression to 9 for a 6x speed increase in compression
    speed for a 5% increase in compression size


author: Jonathan Dieter <jdieter@gmail.com> - 1.0.2-1
changelog:
  - Use hash table for finding identical chunks, speeding up process considerably
  - Add test case to verify that identical chunk checking is working


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Switch to cmake; upstream is deprecating qmake
  - and its rule for detecting Qt >= 5.5.1 breaks on F28's Qt 5.10


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-3
changelog:
  - Clean up ancient Fedora and RHEL conditionals
  - Remove cruft from %prep
  - Use %autosetup, %make_build, and %make_install macros
  - Use https for URL and SOURCE tags
  - Check upstream GPG signature in %prep
  - Simplify %{_libdir}/znc/ file list
  - Enable verbose make
  - Pass --with-tcl to ensure tclConfig.sh is found
  - Remove Group tag
  - Use system-wide crypto policy
  - Use %license tag for LICENSE file
  - Add ChangeLog.md and NOTICE files to %doc
  - Move znc-buildmod.1 to znc-devel


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 0-0.9gitfe0f368
changelog:
  - Require specific version of znc, to avoid unexpected breakage when znc
    updates.  (Broken deps are better than a broken server.)


author: Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)


author: Kamil Dudka <kdudka@redhat.com> - 5.5-1
changelog:
  - update to latest upstream release, which fixes the following vulnerabilities:
      CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
      CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
      CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()


