# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-3
changelog:
  - Bump version to 1.4.2.4-3
  - Issue 50712 - Version comparison doesn't work correctly on git builds (relates to #1748994)


author: Mark Reynolkds <mreynolds@redhat.com> - 1.4.2.4-5
changelog:
  - Bump version to 1.4.2.4-5
  - Resolves: Bug 1676699 - dsconf allows to set an empty password for Directory Manager
  - Resolves: Bug 1714688 - dscontainer executable should be placed under /usr/libexec/dirsrv/
  - Resolves: Bug 1773115 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1790979 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1790981 - Entry cache contention during base search
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-6
changelog:
  - Resolves: Bug 1776227 - Error: 'PwPolicyManager' object has no attribute 'get_attr_list'
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10(fix regression)
  - Resolves: Bug 1758473 - AddressSanitizer: heap-use-after-free in log_get_loglist
  - Resolves: Bug 1790259 - Change the default behavior of 'nsslapd-verify-filter-schema'
  - Resolves: Bug 1773114 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-7
changelog:
  - Bump version to 1.4.2.4-7
  - Resolves: Bug 1744662 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1779216 - dsctl doesn't work with 'slapd-' in the instance name
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1793060 - dsctl healthcheck issues error : type object 'datetime.date' has no attribute 'fromisoformat'
  - Resolves: Bug 1758494 - LeakSanitizer: detected memory leaks in do_add 
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-8
changelog:
  - Bump version to 1.4.2.4-8
  - Resolves: Bug 1807971 - dsctl healthcheck fails at checking replica when conflict entries are present


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-9
changelog:
  - Bump version to 1.4.2.4-9
  - Resolves: Bug 1867097 - Memory leak in ACI using IP subject
  - Resolves: Bug 1862170 - python3-lib389 pulls unnecessary bash-completion package
  - Resolves: Bug 1867988 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.4-1
changelog:
  - Bump version to 1.4.3.4
  - Issue 50954 - Port buildnum.pl to python(part 2)
  - Issue 50955 - Fix memory leaks in chaining plugin
  - Issue 50954 - Port buildnum.pl to python
  - Issue 50947 - change 00core.ldif objectClasses for openldap migration
  - Issue 50755 - setting nsslapd-db-home-directory is overriding db_directory
  - Issue 50937 - Update CLI for new backend split configuration
  - Issue 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  - Issue 50945 - givenname alias of gn from openldap
  - Issue 50935 - systemd override in lib389 for dscontainer
  - Issue 50499 - Fix npm audit issues
  - Issue 49761 - Fix CI test suite issues
  - Issue 50618 - clean compiler warning and log level
  - Issue 50889 - fix compiler issues
  - Issue 50884 - Health check tool DSEldif check fails
  - Issue 50926 - Remove dual spinner and other UI fixes
  - Issue 50928 - Unable to create a suffix with countryName
  - Issue 50758 - Only Recommend bash-completion, not Require
  - Issue 50923 - Fix a test regression
  - Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  - Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  - Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  - Issue 50919 - Backend delete fails using dsconf
  - Issue 50872 - dsconf can't create GSSAPI replication agreements
  - Issue 50912 - RFE - add password policy attribute pwdReset
  - Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
  - Issue 50889 - Extract pem files into a private namespace
  - Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  - Issue 50686 - Port fractional replication test cases from TET to python3 final
  - Issue 49845 - Remove pkgconfig check for libasan
  - Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  - Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  - Issue 50786 - connection table freelist
  - Issue 50618 - support cgroupv2
  - Issue 50900 - Fix cargo offline build
  - Issue 50898 - ldclt core dumped when run with -e genldif option


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.5-1
changelog:
  - Bump version to 1.4.3.5
  - Issue 50994 - Fix latest UI bugs found by QE
  - Issue 50933 - rfc2307compat.ldif
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 49731 - dscreate fails in silent mode because of db_home_dir
  - Issue 50975 - Revise UI branding with new minimized build
  - Issue 49437 - Fix memory leak with indirect COS
  - Issue 49731 - Do not add db_home_dir to template-dse.ldif
  - Issue 49731 - set and use db_home_directory by default
  - Issue 50971 - fix BSD_SOURCE
  - Issue 50744 - -n option of dbverify does not work
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50976 - Clean up Web UI source directory from unused files
  - Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  - Issue 50966 - UI - Database indexes not using typeAhead correctly
  - Issue 50974 - UI - wrong title in "Delete Suffix" popup
  - Issue 50972 - Fix cockpit plugin build
  - Issue 49761 - Fix CI test suite issues
  - Issue 50971 - Support building on FreeBSD.
  - Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  - Issue 50963 - We should bundle *.min.js files of Console
  - Issue 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  - Issue 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  - Issue 50954 - buildnum.py - fix date formatting issue


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
changelog:
  - Bump version to 1.4.3.6
  - Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  - Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  - Issue 51008 - dbhome in containers
  - Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  - Issue 51014 - slapi_pal.c possible static buffer overflow
  - Issue 50545 - remove dbmon "incr" option from arg parser
  - Issue 50545 - Port dbmon.sh to dsconf
  - Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  - Issue 49731 - Fix additional issues with setting db home directory by default
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50905 - intermittent SSL hang with rhds
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
changelog:
  - Bump version to 1.4.3.7
  - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51031 - UI - transition between two instances needs improvement


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-0
changelog:
  - Bump version to 1.4.3.8-0
  - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  - Issue 51054 - Revise ACI target syntax checking
  - Issue 51068 - deadlock when updating the schema
  - Issue 51060 - unable to set sslVersionMin to TLS1.0
  - Issue 51064 - Unable to install server where IPv6 is disabled
  - Issue 51051 - CLI fix consistency issues with confirmations
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Issue 51047 - React deprecating ComponentWillMount
  - Issue 50499 - fix npm audit issues
  - Issue 50545 - Port dbgen.pl to dsctl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
changelog:
  - Bump version to 1.4.3.8-1
  - Resolves: Bug 1833350 - Rebase 389-ds-base for RHEL 8.3
  - Resolves: Bug 1728943 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Resolves: Bug 1775285 - [RFE] Implement the Password Policy attribute "pwdReset"
  - Resolves: Bug 1638875 - [RFE] extract key/certs pem file into a private namespace
  - Resolves: Bug 1758478 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Resolves: Bug 1795943 - Port dbmon.sh from legacy tools package
  - Resolves: Bug 1798394 - Port dbgen from legacy tools package
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1807419 - Unable to create a suffix with countryName either via dscreate or the admin console
  - Resolves: Bug 1816848 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Resolves: Bug 1816854 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  - Resolves: Bug 1816857 - Searches on cn=config takes values with spaces and makes multiple attributes out of them
  - Resolves: Bug 1816859 - lib389 - Replace exec() with setattr()
  - Resolves: Bug 1816862 - Memory leak in indirect COS
  - Resolves: Bug 1829071 - Installation of RHDS 11 fails on RHEL8 server with IPv6 disabled
  - Resolves: Bug 1833515 - set 'nsslapd-enable-upgrade-hash: off' as this raises warnings in IPA
  - Resolves: Bug 1790986 - cenotaph errors on modrdn operations
  - Resolves: Bug 1769734 - Heavy StartTLS connection load can randomly fail with err=1
  - Resolves: Bug 1758501 - LeakSanitizer: detected memory leaks in changelog5_init and perfctrs_init


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-2
changelog:
  - Bump version to 1.4.3.8-2
  - Resolves: Bug 1833350 - Remove cockpit dependancies that are breaking builds


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-3
changelog:
  - Bump version to 1.4.3.8-3
  - Resolves: Bug 1835619 - Healthcheck with --json option reports "Object of type 'bytes' is not JSON serializable" when mapping tree is deleted 
  - Resolves: Bug 1836428 - Directory Server ds-replcheck RFE to add a timeout command-line arg/value to wait longer when connecting to a replica server
  - Resolves: Bug 1843090 - abort when a empty valueset is freed
  - Resolves: Bug 1843156 - Prevent unnecessarily duplication of the target entry
  - Resolves: Bug 1843157 - Check for clock errors and time skew
  - Resolves: Bug 1843159 - RFE AD filter rewriter for ObjectCategory
  - Resolves: Bug 1843162 - Creating Replication Manager fails if uid=repman is used
  - Resolves: Bug 1816851 - Add option to healthcheck to list all the lint reports
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1748244 - dscreate doesn't sanitize instance name


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-4
changelog:
  - Bump version to 1.4.3.8-4
  - Resolves: Bug 1806978 - ns-slapd crashes during db2ldif
  - Resolves: Bug 1450863 - Log warning when tuning of nsslapd-threadnumber above or below the optimal value
  - Resolves: Bug 1647017 - A distinguished value of a single valued attribute can be missing in an entry
  - Resolves: Bug 1806573 - Dsctl healthcheck doesn't work when using instance name with 'slapd-'
  - Resolves: Bug 1807773 - dsctl healthcheck : typo in DSREPLLE0002 Lint error suggested resolution commands
  - Resolves: Bug 1843567 - Healthcheck to find notes=F
  - Resolves: Bug 1845094 - User/Directory Manager can modify Password Policy attribute "pwdReset"
  - Resolves: Bug 1850275 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1442386 - Recreating an index while changing case will create an indexfile with the old name (different case) and after restart the indexfile is abandoned
  - Resolves: Bug 1672574 - nsIndexIDListScanLimit accepts any value
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-5
changelog:
  - Bump version to 1.4.3.8-5
  - Resolves: Bug 1841086 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1849418 - python3-lib389 pulls unnecessary bash-completion package


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1851973 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1888863 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1859228 - do not add referrals for masters with different data generation
  - Resolves: Bug 1859227 - create keep alive entry after on line init
  - Resolves: Bug 1896850 - NULL dereference in revert_cache()
  - Resolves: Bug 1861504 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1898850 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1904348 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1904349 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1904350 - do not add referrals for masters with different data generation
  - Resolves: Bug 1904351 - create keep alive entry after on line init
  - Resolves: Bug 1904352 - NULL dereference in revert_cache()
  - Resolves: Bug 1904353 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1904347 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-7
changelog:
  - Bump version to 1.4.3.8-7
  - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.9-1
changelog:
  - Bump version to 1.4.4.9
  - Issue 4105 - Remove python.six (fix regression)
  - Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  - Issue 4460 - BUG  - lib389 should use system tls policy
  - Issue 3657 - Add options to dsctl for dsrc file
  - Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  - Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  - Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  - Issue 4105 - Remove python.six from lib389 (#4456)
  - Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  - Issue 2054 - do not add referrals for masters with different data generation #2054 (#4427)
  - Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
  - Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  - Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  - Issue 4428 - Paged Results with Chaining Test Case
  - Issue 4383 - Do not normalize escaped spaces in a DN
  - Issue 4432 - After a failed online import the next imports are very slow
  - Issue 4404 - build problems at alpine linux
  - Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  - Issue 4429 - NULL dereference in revert_cache()
  - Issue 4391 - DSE config modify does not call be_postop (#4394)
  - Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.10-1
changelog:
  - Bump version to 1.4.4.10
  - Issue 4381 - RFE - LDAPI authentication DN rewritter
  - Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  - Issue 4513 - CI Tests - fix test failures
  - Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  - Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  - Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  - Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  - Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  - Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  - Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  - Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  - Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  - Issue 4414 - disk monitoring - prevent division by zero crash
  - Issue 4507 - Improve csngen testing task (#4508)
  - Issue 4498 - BUG - entryuuid replication may not work (#4503)
  - Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  - Issue 4480 - Unexpected info returned to ldap request (#4491)
  - Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  - Issue 4500 - Add cockpit enabling to dsctl
  - Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
  - Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  - Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  - Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  - Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  - Issue 4224 - cleanup specfile after libsds removal
  - Issue 4421 - Unable to build with Rust enabled in closed environment
  - Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  - Issue 4464 - RFE - clang with ds+asan+rust
  - Issue 4224 - openldap can become confused with entryuuid
  - Issue 4313 - improve tests and improve readme re refdel
  - Issue 4313 - fix potential syncrepl data corruption
  - Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
  - Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  - Issue 4446 - RFE - openldap password hashers
  - Issue 4403 - RFE - OpenLDAP pw hash migration tests (#4408)
  - Issue 4410  -RFE - ndn cache with arc in rust
  - Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.11-1
changelog:
  - Bump version to 1.4.4.11
  - Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  - Issue 4513 - Fix schema test and lib389 task module (#4514)
  - Issue 4535 - lib389 - Fix log function in backends.py
  - Issue 4534 - libasan read buffer overflow in filtercmp (#4541)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.12-1
changelog:
  - Bump version to 1.4.4.12
  - Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  - Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  - Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  - Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  - Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  - Issue 5442 - Search results are different between RHDS10 and RHDS11


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.13-1
changelog:
  - Bump version to 1.4.4.13
  - Update dscontainer (#4564)
  - Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  - Issue 4324 - Some architectures the cache line size file does not exist
  - Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  - Issue 4609 - CVE - info disclosure when authenticating


author: Thierry Bordaz <tbordaz@redhat.com> 1.4.4.14-1
changelog:
  - Bump version to 1.4.4.14
  - Issue 4671 - UI - Fix browser crashes
  - Issue 4229 - Fix Rust linking
  - Issue 4658 - monitor - connection start date is incorrect
  - Issue 4656 - Make replication CLI backwards compatible with role name change
  - Issue 4656 - Remove problematic language from UI/CLI/lib389
  - Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  - Issue 4661 - RFE - allow importing openldap schemas (#4662)
  - Issue 4659 - restart after openldap migration to enable plugins (#4660)
  - Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  - Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  - Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4646 - CLI/UI - revise DNA plugin management
  - Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  - Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  - Issue 4513 - CI - make acl ip address tests more robust
  - Issue 4619 - remove pytest requirement from lib389
  - Issue 4615 - log message when psearch first exceeds max threads per conn


author: Thierry Bordaz <tbordaz@redhat.com> 1.4.4.15-1
changelog:
  - Bump version to 1.4.4.15
  - Issue 4700 - Regression in winsync replication agreement (#4712)
  - Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  - Issue 4706 - negative wtime in access log for CMP operations


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.16-1
changelog:
  - Bump version to 1.4.4.16
  - Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  - Issue 4623 - RFE - Monitor the current DB locks (#4762)
  - Issue 4725 - RFE - Update the password policy to support a Temporary Password Rules (#4727)
  - Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  - Issue 4773 - RFE - Enable interval feature of DNA plugin
  - Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  - Issue 4764 - replicated operation sometime checks ACI (#4783)
  - Issue 4781 - There are some typos in man-pages
  - Issue 3555 - Fix UI audit issue
  - Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  - Issue 4725 - Fix compiler warnings
  - Issue 4770 - Lower FIPS logging severity
  - Issue 4759 - Fix coverity issue (#4760)
  - Issue 4742 - UI - should always use LDAPI path when calling CLI
  - Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  - Issue 4711 - SECURITY FIX - SIGSEV with sync_repl (#4738)
  - Issue 4637 - ndn cache leak (#4724)
  - Issue 4577 - Fix ASAN flags in specfile


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.17-1
changelog:
  - Bump version to 1.4.4.17
  - Issue 4927 - rebase lib389 and cockpit in 1.4.4
  - Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  - Issue 4912 - Account Policy plugin does not set the config entry DN
  - Issue 4796 - Add support for nsslapd-state to CLI & UI
  - Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  - Issue 4169 - backport lib389 cert list fix
  - Issue 4912 - dsidm command crashing when account policy plugin is enabled
  - Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  - Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  - Issue - 4696 - Password hash upgrade on bind (#4840)
  - Issue 4875 - CLI - Add some verbosity to installer
  - Issue 4884 - server crashes when dnaInterval attribute is set to zero
  - Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  - Issue 4734 - import of entry with no parent warning (#4735)
  - Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  - Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  - Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  - Issue 4736 - lib389 - fix regression in certutil error checking
  - Issue 4736 - CLI - Errors from certutil are not propagated
  - Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  - Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  - Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  - Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  - Issue 4262 - Fix Index out of bound in fractional test (#4828)
  - Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  - Issue 4656 - remove problematic language from ds-replcheck
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  - Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  - Issue 4506 - Improve SASL logging
  - Issue 4093 - Fix MEP test case
  - Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  - Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  - Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  - Issue 4447 - Crash when the Referential Integrity log is manually edited
  - Issue 4773 - Add CI test for DNA interval assignment
  - Issue 4750 - Fix compiler warning in retrocl (#4751)


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.3-1
changelog:
  - Bump version to 2.0.3
  - Issue 4619 - remove pytest requirement from lib389
  - Issue 4615 - log message when psearch first exceeds max threads per conn
  - Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  - Issue 4324 - Some architectures the cache line size file does not exist
  - Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  - Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  - PR 4564 - Update dscontainer
  - Issue 4149 - UI - port TreeView and opther components to PF4
  - Issue 4577 - Add GitHub actions
  - Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  - issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  - Issue 4609 - CVE - info disclosure when authenticating
  - Issue 4348 - Add tests for dsidm
  - Issue 4571 - Stale libdb-utils dependency
  - Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  - Issue 4577 - Add GitHub actions
  - Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  - Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  - Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  - Issue 4348 - Add tests for dsidm
  - Issue 4577 - Add GitHub actions
  - Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  - Issue 4093 - fix compiler warnings and update doxygen
  - Issue 4575 - Update test docstrings metadata
  - Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  - Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  - Issue 4513 - Add DS version check to SSL version test (#4570)
  - Issue 5442 - Search results are different between RHDS10 and RHDS11
  - Issue 4396 - Minor memory leak in backend (#4558)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4153 - Added a CI test (#4556)
  - Issue 4506 - BUG - fix oob alloc for fds (#4555)
  - Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  - Issue 4506 - Temporary fix for io issues (#4516)
  - Issue 4535 - lib389 - Fix log function in backends.py
  - Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  - Issue 4544 - Compiler warnings on krb5 functions (#4545)
  - Update rpm.mk for RUST tarballs


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.3-2
changelog:
  - Bump version to 2.0.3-2
  - Revert Issue 4609 - CVE - info disclosure when authenticating(breaks DogTag)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.0.3-3
changelog:
  - Remove a revert of the fix for Issue 4609 - CVE - info disclosure when authenticating(breaks Dogtag)
  - Dogtag has fixed own code that failed in the presence of the fix for Issue 4609


author: Thierry Bordaz <tbordaz@redhat.com> - 2.0.4-1
changelog:
  - Bump version to 2.0.4
  - Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  - Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  - Issue 4700 - Regression in winsync replication agreement (#4712)
  - Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  - Issue 4169 - UI - migrate monitor tables to PF4
  - issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  - Issue 2736 - remove remaining perl references
  - Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  - Issue 4706 - negative wtime in access log for CMP operations
  - Issue 3585 - LDAP server returning controltype in different sequence
  - Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  - Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  - Issue 4671 - UI - Fix browser crashes
  - Issue 4169 - UI - Add PF4 charts for server stats
  - Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  - Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  - Issue 4229 - Fix Rust linking
  - Issue 4673 - Update Rust crates
  - Issue 4658 - monitor - connection start date is incorrect
  - Issue 4169 - UI - migrate modals to PF4
  - Issue 4656 - remove problematic language from ds-replcheck
  - Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  - Issue 4656 - Remove problematic language from UI/CLI/lib389
  - Issue 4661 - RFE - allow importing openldap schemas (#4662)
  - Issue 4659 - restart after openldap migration to enable plugins (#4660)
  - Merge pull request #4664 from mreynolds389/issue4663
  - issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  - Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  - Issue 4646 - CLI/UI - revise DNA plugin management
  - Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  - Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  - Issue 4169 - UI - Migrate alerts to PF4
  - Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  - Issue 4595 - Paged search lookthroughlimit bug (#4602)
  - Issue 4169 - UI - port charts to PF4
  - Issue 2820 - Fix CI test suite issues
  - Issue 4513 - CI - make acl ip address tests more robust


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.5-1
changelog:
  - Bump version to 2.0.5
  - Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  - Issue 4169 - UI - Port plugin tables to PF4
  - Issue 4656 - Allow backward compatilbity for replication plugin name change
  - Issue 4764 - replicated operation sometime checks ACI (#4783)
  - Issue 2820 - Fix CI test suite issues
  - Issue 4781 - There are some typos in man-pages
  - Issue 4773 - Enable interval feature of DNA plugin
  - Issue 4623 - RFE - Monitor the current DB locks (#4762)
  - Issue 3555 - Fix UI audit issue
  - Issue 4725 - Fix compiler warnings
  - Issue 4770 - Lower FIPS logging severity
  - Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  - Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  - Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  - Issue 4759 - Fix coverity issue (#4760)
  - Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  - Issue 4714 - dscontainer fails with rootless podman
  - Issue 4750 - Fix compiler warning in retrocl (#4751)
  - Issue 4742 - UI - should always use LDAPI path when calling CLI
  - Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  - Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  - Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  - Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  - Issue 4711 - SIGSEV with sync_repl (#4738)
  - Issue 4734 - import of entry with no parent warning (#4735)
  - Issue 4729 - GitHub Actions fails to run pytest tests
  - Issue 4656 - Remove problematic language from source code
  - Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  - Issue 4169 - UI - migrate replication tables to PF4
  - Issue 4637 - ndn cache leak (#4724)
  - Issue 4577 - Fix ASAN flags in specfile
  - Issue 4169 - UI - PF4 migration - database tables
  - issue 4653 - refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)


author: Thierry Bordaz <tbordaz@redhat.com> - 2.0.6-1
changelog:
  - Bump version to 2.0.6
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  - Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  - Issue 4414 - disk monitoring - prevent division by zero crash
  - Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  - Issue 4656 - Fix replication plugin rename dependency issues
  - Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  - Issue 4506 - Improve SASL logging
  - Issue 4709 - Fix double free in dbscan
  - Issue 4093 - Fix MEP test case
  - Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  - Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  - Issue 4794 - BUG - don't capture container output (#4798)
  - Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  - Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  - Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  - Issue 4447 - Crash when the Referential Integrity log is manually edited
  - Issue 4773 - Add CI test for DNA interval assignment
  - Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  - Issue 4379 - fixing regression in test_info_disclosure
  - Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Issue 4575 Update test docstrings metadata
  - Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  - removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  - Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.13-1
changelog:
  - Update to 0.8.13 version (bz#1742435).
  - Try build on epel8 (bz#1757824).
  - Completely remove SOURCE1 sysvinit legacy.
  - Reformat with spaces.


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Paul Howarth <paul@city-fan.org> - 2018.06-1
changelog:
  - IPv6 databases are still seeing updates in June 2018
  - IPv4 databases are unchanged from previous release


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3.36-1
changelog:
  - 1.3.36
  - fix urw font path, Requires: urw-base35-fonts-legacy (#1847187)
  - bundle urw fonts on epel8+ (no urw-base3-fonts-legacy provided)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.06.09-21
changelog:
  - Add BuildRequires on gcc-c++
  - Packaging updates
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Install license in licensedir (where applicable)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.06.10-1
changelog:
  - Update to version 2.06.10
  - Drop patches - all fixed in the new version
  - Drop the -ffp-contract=off hack
  - Remove redundant m_outstream->setf(std::ios::fixed)
  - Fix GenEventCopmpare
  - Adjust expected test output for changes in the code


author: Peter Bieringer <pb@bieringer.de> - 8.4.0-2
changelog:
  - update to 8.4.0
  - add upstream patch fixing https://github.com/chrislim2888/IP2Location-C-Library/issues/47


author: Michael Cronenworth <mike@cchtml.com> - 1:6.9.10.64-1
changelog:
  - Update to 6.9.10.64
  - Set threading option (https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2)
  - Enable more image formats (RHBZ#1485823)


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Thomas Haller <thaller@redhat.com> - 1:1.22.0-0.2
changelog:
  - Update to 1.22-rc1 (1.21.90)
  - large internal rework of libnm's NMClient
  - dhcp: switch implementation of "internal" DHCP to nettools' n-dhcp4
  - add support for carrier state of devices on D-Bus/libnm (rh #1722024)
  - cloud-setup: add initial and experimental tool for configuring in cloud (rh #1642461)
  - dhcp: support configuring FQDN hostname flags (rh #1649368)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.2-1
changelog:
  - Update to 1.22.2
  - core,libnm: expose capability for OVS support (rh #1785147)
  - dhcp: various bugfixes for nettools n-dhcp4 plugin


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.4-1
changelog:
  - Update to 1.22.4
  - dhcp: fix behavior of internal DHCP client when the server sends a NAK (rh #1787219)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.6-1
changelog:
  - Update to 1.22.6
  - nm-device: add new pending action to keep the device busy when in between states (rh #1759956)
  - cloud-setup: avoid unsupported settings in systemd service unit (rh #1791758)
  - do not create virtual device if master is not present (rh #1795919)
  - allow IPv6 RA timeout to be set to a value higher than 120 seconds (rh #1795957)
  - fix behaviour when 'ipv4.dhcp-timeout' option is set to 'infinity' (rh #1791378)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.8-1
changelog:
  - Update to 1.22.8
  - Added configuration option to customize IPv6 RA timeout (rh #1801158)
  - Removed length limitation for OVS Bridge, Patches and Interfaces (only Patch types) names (rh #1788432)
  - Reworked asynchronous deactivation of OVS interfaces (rh #1787989, rh #1782701)
  - Fixed failure when creating team interfaces (rh #1798947)
  - ifcfg-rh: fix clearing ovs slave type from ifcfg-rh file (rh #1804167)
  - Fixed bug causing virtual devices to not be available after AddConnection()/Update() (rh #1804350)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.8-3
changelog:
  - dhcp: keep trying after a send failure (rh #1806516)
  - ovs: fail port enslavement when the bridge is not found (rh #1797696)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-4
changelog:
  - core: fix leaking device state files in /run (rh #1810153)
  - dhcp: fix crash in nettools client when leaking GSource (rh #1810188)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-5
changelog:
  - dhcp: fix handling IO error in nettools DHCPv4 client (rh #1843357)
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1843360, CVE-2020-10754)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2.1
changelog:
  - device: restart DHCP only for devices that are active or activating (rh #1852612)
  - initrd: fix generating default BOOTIF= connection (rh #1853277)
  - ovs: fix race condition when setting MAC address for ovs interfaces (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - device: reset SR-IOV parameters on activation failure (rh #1819587)
  - initrd: enable ipv6.method=auto with ip=dhcp6 (rh #1854323)
  - core: add "nm-shared" zone for firewalld for shared mode (rh #1834907)
  - ppp: fix taking control of link (rh #1849386)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-2
changelog:
  - core: fix generation of local routes for VRF devices (rh #1857133)
  - team: fix crash on failure to connect to teamd (rh #1856723)
  - core: fix detecting failure of master active-connection (rh #1845018)
  - core: fix warning about setting active_slave of bond when activating master (rh #1858326)
  - import translations (rh #1820552)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-3
changelog:
  - core: fix managing devices after resuming from sleep (rh #1855563)
  - dhcp: fix BPF filter for internal client on big endian arch (rh #1861488)
  - core: support warning log setting IPv6 MTU with IPv6 disabled (rh #1840989)
  - wifi: fix crash parsing incomplete BSS info (rh #1866395)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-4
changelog:
  - bond: fix Reapply does not update bond options (rh #1847814)
  - dhcp: support DHCPv6 fqdn_fqdn option for hostname (rh #1858344)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-7
changelog:
  - dhcp: add dhcp-vendor-class-identifier option (rh #1871042)
  - initrd: parse 'rd.net.dhcp.vendor-class' kernel cmdline arg (rh #1872299)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-8
changelog:
  - initrd: accept mac address as interface specifier (rh #1879795)
  - initrd: fix parsing IPv6 prefix length (rh #1879795)


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-8
changelog:
  - Subpackage python2-PyDrive has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Nicolas Chauvet <kwizart@gmail.com> - 0.7.4-24
changelog:
  - Multilibs support - rhbz#1433758
  - Simplify description
  - Convert AUTHORS to UTF-8
  - Drop Groups
  - Add Obsoletes/Provides for a52dec-devel


author: Miroslav Suchý <msuchy@redhat.com> 1.5-1
changelog:
  - require systemd
  - Update Python 2 dependency declarations to new packaging standards
    (mmarusak@redhat.com)


author: Stuart D. Gathman <stuart@gathman.org> 0.2-3.20170616gitaf025f5
changelog:
  - BZ#1507333 EL6 missing python-argparse dependency
  - BZ#1515781 Agreement updated.
  - BZ#1409345 Unwritable certs silently skipped


author: Al Stone <ahs3@redhat.com> - 20180209-1
changelog:
  - Update to 20180209 source tree, including patch refeshes. Closes BZ#1544048
  - CVE-2017-13693: operand cache leak in dsutils.c -- applied github patch to
    fix the leak.  Resolves BZ#1485346.
  - CVE-2017-13694: acpi parse and parseext cache leaks in psobjects.c -- applied
    github patch to fix the leaks.  Resolves BZ#1485348.
  - CVE-2017-13695: operand cache leak in nseval.c -- applied github patch to fix
    the leak.  Resolves BZ#1485349.
  - Security fixes for the CVEs above applied.  Closes BZ#1485355.  NOTE: these
    patches fix acpica-tools ONLY; the kernel needs to be patch separately.
  - Added gcc to BuildRequires
  - It turns out the %build section was incorrectly passing in OPT_CFLAGS; it
    made the wrong assumptions about what generate/unix/Makefile.config did with
    that value.  Added to the spec file what should happen so that a full and
    complete set of C flags get passed in, not just the small subset that was.
  - Clean up compiler warnings for truncated strings
  - Clean up compiler warnings for pointer casting on 32-bit architectures


author: Al Stone <ahs3@redhat.com> - 20180508-1
changelog:
  - Update to 20180508 source tree, including patch refeshes. Closes BZ#1544048
  - acpidump/acpixtract no longer have alternatives, so remove the scriptlets
    that maintain them and just install them directly; we do leave the pre-
    and post- scriptlets to remove the alternatives for now.  Closes BZ#1576970
  - Typo: OPT_LDFLAGS, not OPT_LDLAGS in the build section.  Closes BZ#1560542


author: Al Stone <ahs3@redhat.com> - 20180508-2
changelog:
  - %pre and %post scriptlets fail -- stupid thinko where I inadvertently
    tested for alternatives not existing, vs existing


author: Al Stone <ahs3@redhat.com> - 20180629-1
changelog:
  - Update to 20180629 source tree, including patch refeshes. Closes BZ#1584923
  - Includes upstream fix for #1592971 (iasl segfault).


author: Al Stone <ahs3@redhat.com> - 20180629-3
changelog:
  - Add in man page for acpiexamples.  So that the man page makes some sense,
    also copy the source code used for acpiexamples to the doc directory for
    this package.  Closes BZ#1611145.
  - Add in the converterSample.asl file from the misc tests.  Clean up the
    run-misc-tests.sh script, too, to make it more robust by simplifying
    the work done.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Sumit Bose <sbose@redhat.com> - 0.8.2-3
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1677194]
  - adcli join fails in FIPS enabled environment [#1717355]
  - forward port of RHEL-7.7 fixes and enhancements


author: Sumit Bose <sbose@redhat.com> - 0.8.2-4
changelog:
  - adcli update --add-samba-data does not work as expected [#1745931]
  - Issue is that with arcfour-hmac as first encryption type [#1745932]
  - [RFE] enhancement adcli to set description attribute and to show all AD
    attributes [#1737342]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-6
changelog:
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260]
  - No longer able to delete computer from AD using adcli [#1846882]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1846878]
  - Typo in adcli update --help option [#1791611]
  - Manpage and help does not explain the use of "-C" option [#1791545]


author: Michal Ambroz <rebus _AT seznam.cz> - 3.7.18-1
changelog:
  - bump to 3.7.18 which contains:
  - Remove upstream patch Sanity-check-size-passed-to-malloc.patch
  - Fix affverify failing due to context being freed too soon
  - Fix pyaff build issue with newer Python (3.7) and cython (0.29)
  - from version 3.7.17
  - fix #34: option typo (25 minutes ago)
  - minor fixes to configure.ac (3 months ago)
  - Fix issue #32, an off-by-one buffer overflow (6 months ago)
  - whitespace (6 months ago)
  - Sanity check size passed to malloc... (6 months ago)
  - Fix incrementing in vnode_split_raw.cpp for comment consistnecy (12 months ago)
  - Update Win32 readmes to fix issue #26. (1 year, 2 months ago)
  - build python3 package


author: Radovan Sroka <rsroka@redhat.com> - 0.16-6
changelog:
  - ported syslog format from rhel7
    resolves: rhbz#1584136
  - fixed crypto problem with libgcrypt
    resolves: rhbz#1584120


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.6-3
changelog:
  - Sync with the RHEL 7
  - Add Dell WD15/WD19 Dock to USB-Audio.conf and create UCM configs
  - Resolves: rhbz#1664247


author: Ian Kent <ikent@redhat.com> - 5:6.2.0-38
changelog:
  - Update "Requires(pre)" to use /usr/bin/grep instead of /bin/grep.
  - Remove "BuildRequires: tcp_wrappers-devel" as tcp_wrappers is depricated.
  - Add "BuildRequires: kernel-headers" for linux/version.h requirement.
  - add libnsl2 Requires and libnsl2-devel BuildRequires.
  - add "BuildRequires: rpcsvc-proto-devel" to pull in missing glibc RPC code.
  - disable hesiod support.
  - Remove obsolete Group tag.
  - Remove obsolete scriptlets.
  - Update use linux libtirpc if present patch.


author: Robert Scheck <robert@fedoraproject.org> - 1.0.2-6
changelog:
  - Added build-time conditionals for RHEL/CentOS 7 (#1846719)
  - Corrected build requirement from qt5-devel to qt5-qtbase-devel


author: Martin Kolman <mkolman@redhat.com> - 8.0.2-1
changelog:
  - add initial RHEL8 help content
    Resolves: rhbz#1634756
  - adapt spec file to new help content
    Related: rhbz#1634756


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-2
changelog:
  - Updated RPM description for ansible-freeipa 0.1.8
    Related: RHBZ#1748986
  - ipahost: Fix choices of auth_ind parameter, allow to reset parameter
    Resolves: RHBZ#1783992
  - ipauser: Allow reset of userauthtype, do not depend on first,last for mod
    Resolves: RHBZ#1784474
  - ipahost: Enhanced failure msg for member params used without member action
    Resolves: RHBZ#1783948
  - Add missing attributes to ipasudorule
    Resolves: RHBZ#1788168
    Resolves: RHBZ#1788035
    Resolves: RHBZ#1788024
  - ipapwpolicy: Use global_policy if name is not set
    Resolves: RHBZ#1797532
  - ipahbacrule: Fix handing of members with action hbacrule
    Resolves: RHBZ#1787996
  - ansible_freeipa_module: Fix comparison of bool parameters in compare_args_isa
    Resolves: RHBZ#1784514
  - ipahost: Add support for several IP addresses and also to change them
    Resolves: RHBZ#1783979
    Resolves: RHBZ#1783976
  - ipahost: Fail on action member for new hosts, fix dnsrecord_add reverse flag
    Resolves: RHBZ#1803026


author: Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
changelog:
  - Update to version 0.1.10:
    - ipaclient: Not delete keytab when ipaclient_on_master is true
    - New module to manage dns forwarder zones in ipa
    - Enhancements of sudorule module tests
    - Gracefully handle RuntimeError raised during parameter validation in
      fail_jso
    - ipareplica_prepare: Fix module DOCUMENTATION
    - ipa[server,replica,client]: setup_logging wrapper for
      standard_logging_setup
    - Created FreeIPABaseModule class to facilitate creation of new modules
    - New IPADNSZone module
    - Add admin password to the ipadnsconfig module tests
    - Added alias module arguments in dnszone module
    - Fixed a bug in AnsibleFreeIPAParams
    - utils/build-galaxy-release: Do not add release tag to version for galaxy
    - ipaserver docs: Calm down module linter
    - galaxy.yml: Add system tag
    - ipareplica_setup_kra: Remove unused ccache parameter
    - ipareplica_setup_krb: krb is assigned to but never used
    - utils/galaxy: Make galaxy scripts more generic
    - galaxyfy-playbook.py: Fixed script name
    Related: RHBZ#1818768


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-2
changelog:
  - Fixes service disable when service has no certificates attached
    Resolves: RHBZ#1836294
  - Add suppport for changing password of symmetric vaults
    Resolves: RHBZ#1839197
  - Fix forwardzone issues
    Resolves: RHBZ#1843826
    Resolves: RHBZ#1843828
    Resolves: RHBZ#1843829
    Resolves: RHBZ#1843830
    Resolves: RHBZ#1843831
  - ipa[host]group: Fix membermanager unknow user issue
    Resolves: RHBZ#1848426
  - ipa[user,host]: Fail on duplucate names in the users and hosts lists
    Resolves: RHBZ#1822683


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-6
changelog:
  - Allow to manage multiple dnszone entries
    Resolves: RHBZ#1845058
  - Fixed error msgs on FreeIPABaseModule subclasses
    Resolves: RHBZ#1845051
  - Fix `allow_create_keytab_host` in service module
    Resolves: RHBZ#1868020
  - Modified return value for ipavault module
    Resolves: RHBZ#1867909
  - Add support for option `name_from_ip` in ipadnszone module
    Resolves: RHBZ#1845056
  - Fixe password behavior on Vault module
    Resolves: RHBZ#1839200


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-5.20180925gitd0076f5
changelog:
  - Update to commit d0076f507a6027455540e2e4f25f84ca38803e07
  - Set CONFIG_LOWBITDEPTH to 1
  - Fix #1632658


author: Germano Massullo <germano.massullo@gmail.com> - 3.14.14-18
changelog:
  - Replaced BuildRequires: gnome-vfs2 with BuildRequires: GConf2-devel More infos at https://bugzilla.redhat.com/show_bug.cgi?id=1745727#c5


author: Milan Broz <gmazyland@gmail.com> - 20171227-1
changelog:
  - Update to version 20171227 (soname increase).
  - Temporarily keep libargon2.so.0.
  - Fix a crash if running under memory pressure.


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.2.0-2
changelog:
  - Updated description, source URL.
  - Removed autoconf/automake and cleaning of RPM_BUILD_ROOT.
  - Updated package doc directory to macro.
  - Added configure --docdir parameter to allow build for epel7 too.


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.8.20180831git0047a6c
changelog:
  resolves: rhbz#1639745 - build requires go-toolset-7 which is not available
  resolves: rhbz#1643567 - service auditd stop exits prematurely
  resolves: rhbz#1616428 - Update git snapshot of audit package
  - Remove static libs subpackage


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.11.20190607gitf58ec40
changelog:
  resolves: rhbz#1643567 - service auditd stop exits prematurely
  resolves: rhbz#1693470 - libauparse memory leak
  resolves: rhbz#1694071 - ausearch doesn't record device/inode details checkpointing a single file
  resolves: rhbz#1695638 - Rebase audit package to pick up latest bugfixes
  resolves: rhbz#1705894 - aureport aborts when using a specific input
  resolves: rhbz#1706045 - RFE: Backport support for new audit record types
  resolves: rhbz#1715852 - RFE: provide a way to filter on network address family


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.15.20191104git1c2f876
changelog:
  resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates
  resolves: rhbz#1767054 - move audit rules to shared data directory
  resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files
  resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit
  resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin


author: Paolo Gigante <paolo.gigante@rackspace.co.uk> 0.10-1
changelog:
  - Added pre and post prep script hooks
  - Added a pidfile and process check to --status
  - Added a auter success log with a last run timestamp
  - Clear pidfile if the process is no longer running when disabling auter
  - Added auter.aptModule for ubuntu/debian support


author: Paolo Gigante <paolo.gigante@rackspace.co.uk> 0.11-4
changelog:
  - Updated documentation and references to include apt for Ubuntu/debian
  - Removed debugging message that was printed during apt update
  - Added "Valid Options" in auter.conf
  - Added the pre/post prep directories in auter.conf
  - Added retention and rotation for last-prep-output and last-apply-output files in /var/lib/auter
  - Corrected file permissions for the auter-postreboot cron file
  - Added --stdout option to force output to stdout even if there is no active tty
  - Added a package manager lock file check before prep and apply functions call the package manager
  - Improved checks to confirm prepared patches are still required
  - Adjusted some string arguments to arrays for better handling


author: Paolo Gigante <paolo.gigante.sa@gmail.com> 0.12-1
changelog:
  - Added --skip-all-scripts to skip the executions of all custom scripts
  - Added --skip-scripts-by-phase to skip the executions of custom scripts for the specified phase
  - Added --skip-scripts-by-phase to skip the executions of custom scripts by name
  - Added man page for auter.conf
  - Updated auter.aptModule to reflect changes in auter.yumdnfModule
  - added no-wall option
  - Fix for --status when run as non-root user
  - Logs auter output in /var/lib/auter/ when no updates are available
  - Minor improvements to rotation of output files in /var/lib/auter/


author: Nick Rhodes <nrhodes91@gmail.com> 0.12.1-1
changelog:
  - Add max-delay option to override MAXDLAY via command line
  - Redirect stderr to stdout and capture in APPLYOUTPUT variable


author: Nick Rhodes <nrhodes91@gmail.com> 1.0.0-1
changelog:
  - #220 Introduce package dependant reboots using AUTOREBOOT option
  - #215 Remove rpm and deb package build tests from travis
  - #223 Parallelize the travis jobs
  - #224/#225 Clean up ShellCheck warnings


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-36
changelog:
  - bz1743442 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map (userspace part)
    - also use strictexpire for offsets (mounts).
    - change expire type naming to better reflect usage.
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option.
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
    - fix missing initialization of autofs_point flags.
  - Resolves: rhbz#1743442


author: Ian Kent <ikent@redhat.com> - 5.1.4-37
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update ldap READMEs and schema definitions.
  - Resolves: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-38
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update spec file doc inclusions for schema definition update.
  - Related: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-39
changelog:
  - bz1802251 - Autofs will only mount share once if sss is first ini
    nsswitch.conf
    - fix a regression with map instance lookup.
  - Resolves: rhbz#1802251


author: Ian Kent <ikent@redhat.com> - 5.1.4-41
changelog:
  - bz1835547 - [RHEL8]autofs cannot mount samba/cifs shares that end with a
    dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1835547


author: Ian Kent <ikent@redhat.com> - 5.1.4-42
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
  -Resolves: rhbz#1841456


author: Ian Kent <ikent@redhat.com> - 5.1.4-43
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - fix autofs mount options construction.
  -Related: rhbz#1841456


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.31.1-43
changelog:
  - Enabled pstoedit backend
  - Fixed out of bounds write when using pstoedit backend
    Resolves: CVE-2016-7392
  - Fixed hardcoded version on source URL
  - Fixed bogus date in changelog (best effort)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7-12
changelog:
  - use %make_build %ldconfig_scriptlets %license
  - %build: --enable-shared=yes --enable-static=no --disable-silent-rules


author: Michal Sekletár <msekleta@redhat.com> - 0.7-19
changelog:
  - make sure we get compiled with -fstack-protector-strong (#1624099)
  - fix issues reported by coverity (#1602449)


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.3.4-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: John Marshall <jmarshall@users.sourceforge.net> - 1.9-1
changelog:
  - New spec file for bcftools, now separate from samtools (#1767792).
  - Backported Python 3 and configure patches from later upstream development.


author: Jun Aruga <jaruga@redhat.com> - 1.9-1
changelog:
  - Exclude a CPU architecture s390x.
  - Add Conflicts tag for samtools < 1.0.
  - Align the field delimiter as 1 space.
  - Use additional RPM macros for Source0.
  - Add a logic to check if bcftools is built with system htslib.
  - Update comments for license.


author: Dalibor Pospisil <dapospis@redhat.com> - 1.18-12
changelog:
  - optiomized CPU info gathering
  - enhanced library search
  - added missing dependencies on /usr/bin/bc and /usr/bin/time


author: Dalibor Pospisil <dapospis@redhat.com> - 1.20-1
changelog:
  - Rebase to the latest upstream
  - improvements to libraries search
  - docs update
  - some optimizations
  - fixed pattern for mathing port or socket in rlWaitFor*
  - log colorizing on all screen* terminals
  - IFS fixes
  - Use /etc/os-release in rlGetDistro*() (#35)
  - support for curl 7.29.0
  - prefer curl over wget
  - silence status of service in rlService{Start,Stop,Restore} functions (#…
  - TESTPACKAGE variable to force package name (#54)


author: Dalibor Pospisil <dapospis@redhat.com> - 1.21-1
changelog:
  - Rebase to the laster upstream
  - better and more consistent search for libraries
  - ability to parse yaml files including main.fmf and metadata.yaml


author: Dalibor Pospisil <dapospis@redhat.com> - 1.22-1
changelog:
  - ability to parse fmf id references
  - ability the use simpler library name - library(foo), {url: '../foo.git', name: '/'}, meaming the library is n the root folder
  - ability put library even deeper in the tree - library(foo/path/to/the/library), {url: '../foo.git', name: '/path/to/the/library'}
  - rebased yash to 1.0
  - and few more minor fixes


author: Dalibor Pospisil <dapospis@redhat.com> - 1.23-1
changelog:
  - TestResults state indicator
  - profiling code
  - rebased yash to 1.1
  - fixed rlAssertLesser
  - fixed failed library load name logging


author: Dalibor Pospisil <dapospis@redhat.com> - 1.24-1
changelog:
  - rlImport --all imports only required libraries, not recommend
  - implemented chkconfig fallback to systemctl
  - fixed `make test` test suite execution


author: Dalibor Pospisil <dapospis@redhat.com> - 1.25-1
changelog:
  - rebased yash to version 1.2, fixes the backtick iterpretation
  - docs fixes, by Štěpán Němec <snemec@redhat.com>


author: Dalibor Pospisil <dapospis@redhat.com> - 1.28-1
changelog:
  - cleanup rlRun_LOG files at rlJournalEnd
  - close journal in rlDie - generate journal.xml at that moment
  - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike
  - rlAssertRequired can now handle versioned dependencies
  - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.2.1-17
changelog:
  - Python 2 binary package renamed to python2-beecrypt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Robert Scheck <robert@fedoraproject.org> 4.2.1-20
changelog:
  - Update python 2 dependency declarations to new packaging standards,
    see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 4.2.1-22
changelog:
  - Subpackage python2-beecrypt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
changelog:
  - Add manual page for dnssec-importkey-pkcs11 (#1666785)
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Nick Clifton <nickc@redhat.com> - 2.30-71
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779245)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.


author: Nick Clifton <nickc@redhat.com> - 2.30-72
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1801879)


author: Nick Clifton <nickc@redhat.com> - 2.30-74
changelog:
  - Stop the BFD library from issueing warning messages about allocated sections being found outside of loadable segments.  (#1630115)
  - Fix linker testsuite failures for the aarch64 and s390x targets.  (#1632775, #1809101)
  - Fix building the binutils with address sanitization enabled.  (#1678323)
  - Add support for the PT_GNU_PROPERTY segment.  (#1721606)
  - Fix an internal error in the GOLD linker.  (#1722715)
  - Fix the generation of corrupt .note.gnu.property notes.  (#1723533)
  - Stop objcopy's --set-section-flags option from setting the 'shared' flag on non-COFF binaries.  (#1807308)
  - Fix a bug in the secondary reloc processing code.  (#1809186)


author: Nick Clifton <nickc@redhat.com> - 2.32-15.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783958)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-17
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1779417)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Nick Clifton <nickc@redhat.com> - 2.32-18
changelog:
  - Fix failures in linker testuite due to compiling test code without -D_FORTIFY_SOURCE specified.  (#1809101)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Germano Massullo <germano.massullo@gmail.com> - 7.16.1-7
changelog:
  - 7.16.6 release
  - Removed cc_config_cpp_3249.patch
  - Disabled disabled_idle_detection.patch. Read https://bugzilla.redhat.com/show_bug.cgi?id=1822723


author: Germano Massullo <germano.massullo@gmail.com> - 7.16.6-6
changelog:
  - Renamed boinc-manager.desktop to boincmgr.desktop This fixes https://bugzilla.redhat.com/show_bug.cgi?id=1880553


author: Christian Kellner <ckellner@redhat.com> - 0.1-2
changelog:
  - Set database path to /var/lib/boltd, create it during
    installation, which is needed for the service file to work.


author: Christian Kellner <ckellner@redhat.com> - 0.8-1
changelog:
  - bolt 0.8 upstream release with pre-boot ACL and IOMMU support
    D-Bus Configuration moved from sysconfdir to datadir
    Resolves: #1629715


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.3.1-2
changelog:
  - Review for Fedora Package Review
  - Use %url
  - Remove Unneeded lines
  - Use only %buildroot
  - Use desktop file validation
  - Fix some spellings
  - Shorten description lines
  - Fix SVG file permissions


author: Marian Csontos <mcsontos@redhat.com> 0.9-7
changelog:
  - Reduce log level of "Could not load BootEntry" messages.
  - Raise more appropriate LookupError on unknown BLS keys.


author: Mat Booth <mat.booth@redhat.com> - 1.57-1
changelog:
  - Update to latest release of bouncycastle
  - Build all bouncycastle modules from a single source tree, using upstream's
    own build scripts
  - Add sub-packages for each module


author: Jerome Marchand <jmarchan@redhat.com> - 0.9-2
changelog:
  - Fixes gethostlatency
  - Fixes a struct definition issue that made several tools fail
  - Add CI gating


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-3
changelog:
  - Fix ENOMEM issue on arm64 machine with many cpus
  - Fix statsnoop and opensnoop on aarch64
  - Drop tcpdrop on ppc64


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-1
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -  Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "ComSign CA"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-80.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Matthew Miller <mattdm@fedoraproject.org> - 2.12.6.7-1
changelog:
  - update to upstream "unstable" 2.12.6.7 for rawhide (code cleanups only)
  - * misc errors in help corrected
  - * various buffer sizes and stacks increased


author: Mattia Verga <mattia.verga@protonmail.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Fix build errors on s390x
  - Fix FCFLAGS transmission to fortran compiler
  - Enable multi-threading support


author: Neal Gompa <ngompa13@gmail.com> - 0.7.0-6
changelog:
  - Backport patch to fix aliasing violation breaking builds on GCC 10 on ARM (#1807872)
  - Disable "DiskFile holes" test to stop build failures


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Brian Stinson <bstinson@centosproject.org> - 8-1.0.8
changelog:
  - Add base module platform Provides so DNF can auto-discover modular platform (ngompa)pr#6
  - Switched CR repo to mirrorlist to spread the load (arrfab)pr#5


author: bstinson@centosproject.org - 8-1.0.9
changelog:
  - Add the Devel repo to centos-release
  - Install os-release(5) content to /usr/lib and have /etc/os-release be a symlink (ngompa)pr#9


author: Pablo Greco <pgreco@centosproject.org> - 8-2.0.1
changelog:
  - Relax dependency for centos-repos
  - Remove update_boot, it was never used in 8
  - Add rootfs_expand to aarch64
  - Bump release for 8.2


author: Antonio Trande <sagitterATfedoraproject.org> - 3.3.1-6
changelog:
  - Fix undefined references to HDF5 (bz#1623439)
  - Add shebang to cgconfig
  - Remove spurious executable bit
  - Add Requires gcc-gfortran to the devel sub-package


author: Petr Pisar <ppisar@redhat.com> - 2.24.0-5
changelog:
  - Specify all dependencies
  - Package a license
  - Align a spec file with the current packaging guide lines
  - Fix the file permissions


author: Simone Caronni <negativo17@gmail.com> - 2.25.0-1
changelog:
  - Update to 2.25.0.
  - Add patches from upstream.
  - Use autosetup macro.
  - rpmlint fixes.
  - Trim changelog.
  - Use automatic dependency generator.


author: Björn Esser <besser82@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (BZ#1693841)
  - Section of man-page was moved to man1
  - Add patch to disable --update command
  - Add patch to fix shebang
  - De-tabbify spec file


author: Björn Esser <besser82@fedoraproject.org> - 9.0.302-17
changelog:
  - Add patch to fix build with glibc 2.28 and earlier (#1603648)
  - Apply LDFLAGS properly
  - Use %make_build macro
  - Mark COPYING file as %license


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 7.0.1-3
changelog:
  - Make cron script as config(noreplace) (bz#1786860)
  - Implement random delay before running update script from cron


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.5-48
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Stephane Thiell <sthiell@stanford.edu> 1.8.3-2
changelog:
  - Removed unversioned __python macros https://fedoraproject.org/wiki/Changes/PythonMacroError [1896129]


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-3
changelog:
  - fix bogus changelog date (nils@redhat.com)
  - remove subpackages we don't ship (nils@redhat.com)
  - deactivate main package BRs if we don't build it (nils@redhat.com)
  - concentrate main package BRs in one place (nils@redhat.com)
  - add tito.props for cobbler (tkasparek@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 2.0.7-5
changelog:
  - 1640635 - don't quote kernel args (michael.mraka@redhat.com)
  - use python3 dependencies (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.7-6
changelog:
  - 1633713 - Require the Python interpreter directly instead of using the
    package name (tkasparek@redhat.com)


author: Matej Marusak <mmmarusak@redhat.com> - 209-1
changelog:
  - New overview design
  - Session timeouts
  - Banners on login screen
  - Client certificate authentication
  - Dropped support for pam_rhost


author: Martin Pitt <mpitt@redhat.com> - 210-1
changelog:
  - Overview: Add CPU utilization to usage card
  - Dashboard: Support SSH identity unlocking when adding new machines
  - SElinux: Introduce an Ansible automation script
  - Translation updates (partially fixes rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211-1
changelog:
  - Fix HTTPS requests > 4 KiB (rhbz#1785509)
  - Better support for various TLS certificate formats
  - Switch from Zanata to Weblate
  - Overview layout optimizations
  - Translation updates (rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211.1-1
changelog:
  - system: Fix graph layout across all browsers (rhbz#1792623)
  - websocket: Fix unaligned access in send_prefixed_message_rfc6455()


author: Matej Marusak <mmarusak@redhat.com> - 211.2-1
changelog:
  - Users: Fix reboot warnings of changed roles
  - Translation updates (rhbz#1754958)
  - Fix CPU mitigations to recognize kernel options at the beginning of line


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - Rebase to upstream version 219
  - Accept upper-case login names for ssh/polkit agent challenges (rhbz#1825749)
  - Show last/failed login (rhbz#1784772)
  - Modernize services page (rhbz#1791193)
  - Search in journal (rhbz#1710731)
  - The default mode is not consistent with the mode in the created bond (rhbz#1817948)
  - Fix deadlock in channel pressure handling (rhbz#1751783)


author: Matej Marusak <mmarusak@redhat.com> - 220-1
changelog:
  - New navigation with integrated switching of hosts
  - Logs: Inline help for filtering
  - Fix cockpit-system AppStream dependency (rhbz#1838003)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - Support for Cross-Origin-Resource-Policy
  - Accounts: Some buttons are hidden when access is limited
  - Developers: Importing "base1/patternfly.css" is deprecated
  - Translation updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 221.1-1
changelog:
  - Put back missing base1/patternfly.css
  - Services: Don't offer 'Start Service' in Limited Access mode


author: Matej Marusak <mmarusak@redhat.com> - 222-1
changelog:
  - Logs: More flexible text filters
  - Services, Dashboard: Hide some buttons when access is limited
  - Webserver: Lock down cockpit.service privileges
  - Localization updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 223-1
changelog:
  - Webserver: Standard-conformant lifetime of web server Certificate
  - Support certificate authentication against Active Directory
  - Fix cockpit-desktop privileges (rhbz#1841104)
  - Translation updates (rhbz#1820538)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 0.3-1
changelog:
  - New version 0.3
  - Add/edit/remove sources
  - Remove new line in encrypted password rhbz#1655862
  - Resolve issues with changes saved to the workspace


author: Martin Pitt <mpitt@redhat.com> - 4-1
changelog:
  - Add additional blueprint name validation rhbz#1696415
  - Fix images not loading on refresh
  - Add notification for source repo deletion
  - Fix AppStream ID
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Show depsolve errors on the blueprints page
  - Add labels for additional output types (rhbz#1769154)
  - Expose Image Builder on /composer, not /welder
  - Define a URL for each tab on a blueprint page
  - Provide a link in the image creation notification to the Images tab on the blueprint page


author: Matej Marusak <mmarusak@redhat.com> - 12.1-1
changelog:
  - Fix integration tests, external test repository URL ceased to exist
  - Translation updates rhbz#1784453
  - Add documentation URL page help menu


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 15-1
changelog:
  - Drop obsolete functionality for Fedora Atomic
  - Localize dates and times
  - Make tests non-destructive, to support gating
  - Fix crash on filtering anonymous images
  - Translation updates
  - Show historical logs


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Nick Rhodes <nrhodes91@gmail.com> - 0.19.0-1
changelog:
  - Added lsblk and blkid (PR 115)
  - Fix flake8 warnings (PR 118)
  - Filtering out update line in pcs status (PR 112)


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Robert Scheck <robert@fedoraproject.org> - 4.5.1.0-3
changelog:
  - Added patch to append only to log files rather to override always
  - Relocate SQLite database to FHS conform /var/lib/coturn/turndb path
  - Include default log file directory with logrotate configuration
  - Provide /run/coturn and correct PID file handling (#1705146)
  - Ensure private keys for SSL certs can be only read by coturn user
  - Ensure /etc/coturn/turnserver.conf can be only read by coturn user
  - Correct subpackage licensing as per Fedora Packaging Guidelines


author: Robert Scheck <robert@fedoraproject.org> - 4.5.1.1-3
changelog:
  - Added upstream patch for CVE-2020-6061 (#1816159)
  - Backported upstream patch for CVE-2020-6062 (#1816163)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1:0.2-13.20151118gitf4d2682
changelog:
  - Add a patch to fix build failures
  - Respect Fedora's CFLAGS
  - Bring the spec up-to-date with current packaging guidelines


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-2
changelog:
  - Consistently produce valid URLs by prepending protocol. (RhBug:1632121)
  - modifyrepo_c: Prevent doubling of compression (test.gz.gz) (RhBug:1639287)
  - Correct pkg count in headers if there were invalid pkgs (RhBug:1596211)
  - Add support for modular errata (RhBug:1656584)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-3
changelog:
  - Backport patch to switch off timestamps on documentation in order to remove
    file conflicts (RhBug:1738788)


author: Ales Matej <amatej@redhat.com> - 0.15.1-1
changelog:
  - Update to 0.15.1
  - Allow pip to see installation of python3-createrepo_c
  - Imporove documentation
  - Remove dependency on deltarpm in favour of drpm
  - Obsolete createrepo on all Fedoras again (RhBug:1702771)
  - Fix issue with createrepo_c hanging at the end (RhBug:1714666)
  - Don't include packages with forbidden control chars in repodata
  - Depend on the appropriate minimum version of libmodulemd
  - Add --pkgorigins mode for Koji
  - Prevent exiting with 0 if errors occur while finalizing repodata.
  - Add support for reading and merging module metadata
  - Update --keep-all-metadata to keep all additional metadata, not just updateinfo and groupfile (RhBug:1639287)
  - mergerepo_c: Add support for --koji simple mode
  - Fix generating corrupted sqlite files (RhBug: 1696808)
  - Do not obsolete createrepo on Fedora < 31
  - mergerepo_c: check if nevra is NULL and warn user about src.rpm naming
  - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past
  - Enhance support of zchunk
  - Support of zchunk
  - [spec] Fix ldconfig for rhel <= 7
  - Fix "CR_DELTA_RPM_SUPPORT" redefined warnings
  - Set to build against Python 3 by default
  - Update README
  - Add mergerepo_c --repo-prefix-search and --repo-prefix-replace.
  - Fix missing packages in mergerepo_c in case multiple VR exists for single pkg in repo.


author: Ales Matej <amatej@redhat.com> - 0.15.1-2
changelog:
  - Add reboot_suggested to UpdateRecord (RhBug:1772466)
  - Explicitly output boolean values for updateinfo.xml (RhBug:1772466)
  - Fix modifyrepo_c with modules.yaml as a symbolic link (RhBug:1776399)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-1.git21ffdc8
changelog:
  - openssh: add missing curve25519-sha256 to the key exchange list
  - openssh: fix RSA certificate support
  - fips-mode-setup: drop the kernel boot option if there is no separate
    /boot drive
  - fips-finish-install: regenerate all initramdisks
  - add libssh configuration backend


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-2.git21ffdc8
changelog:
  - fix ownership of policy directories
  - nss: enable X25519 in appropriate policies and conflict with old nss
  - openssh: conflict with old incompatible openssh version


author: Tomáš Mráz <tmraz@redhat.com> - 20191022-1.gite17cc3a
changelog:
  - custom crypto policies support
  - update-crypto-policies: fix handling of list operations in policy modules
  - update-crypto-policies: fix updating of the current policy marker
  - fips-mode-setup: fixes related to containers and non-root execution
  - make it possible to use fips-mode-setup --check without dracut
  - add .config symlinks so a crypto policy can be set with read-only
    /etc by bind-mounting /usr/share/crypto-policies/<policy> to
    /etc/crypto-policies/back-ends
  - run the update-crypto-policies in posttrans


author: Tomáš Mráz <tmraz@redhat.com> - 20200527-2.git63fc906
changelog:
  - explicitly enable DHE-DSS in gnutls config if enabled in policy
  - use grubby with --update-kernel=ALL to avoid breaking kernelopts
  - OSPP subpolicy: Allow GCM for SSH protocol
  - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
  - if the policy in FIPS mode is not a FIPS policy print a message
  - openssl: Add SignatureAlgorithms support
  - custom crypto policies: enable completely overriding contents of the list
    value
  - added ECDHE-ONLY.pmod policy module example
  - openssh: make LEGACY policy to prefer strong public key algorithms
  - various python code cleanups
  - update-crypto-policies: dump the current policy to
    /etc/crypto-policies/state/CURRENT.pol
  - split scripts into their own subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 20200610-1.git0ac8b1f
changelog:
  - fallback to FIPS policy instead of the default-config in FIPS mode
  - java: Document properly how to override the crypto policy
  - krb5: No support for 3des anymore
  - reorder the signature algorithms to follow the order in default openssl list


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Matthew Miller <mattdm@fedoraproject.org> - 0.4.2-1
changelog:
  - upstream release which fixes dst translation bug
  - new feature: allow format specifiers to turn off padding (as GNU date does)
  - new feature: matlab-style day numbers


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


