# changelog

author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-17
changelog:
  - fix regression in glob use, inappropriate error code escape
  - clean up dead node links from discovery when reusing tpgt


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - boot session handling improvements
  - split out iscsiuio into a seperate sub-package
  - sync with new upstream additions
  - revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24.gitc9d830b
changelog:
  - sync with upstream v2.0.873-84-gc9d830b
  - ignore iscsiadm return in iscsi.service
  - make sure systemd order against remote mounts is correct
  - add discovery as a valid mode in iscsiadm.8
  - make sure to pass --with-security=no to isns configure


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-25.gitc9d830b
changelog:
  - split out session logout on shutdown to a separate service
  - 985321 roll up libiscsi patches, update python bindings to support python3
  - scriptlets were never split out properly for the iscsiuio subpackage
  - fix regression in network interface binding
  - created iscsi-shutdown.service to ensure that session cleanup happens
  - Add --with-slp=no
  - segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-26.git6aa2c9b
changelog:
  - rebase to upstream snapshot
  - add patch to improve GIL lock performance in libiscsi
  - Split Python 2 and Python 3 bindings out into subpackages


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-28.git6aa2c9b
changelog:
  - fixed broken multiple trigger scripts, removed old pre-systemd migration triggers
  - added libiscsi session API patch (bz #1262279)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.2.0.874-7.git86e8892
changelog:
  - Python 2 binary package renamed to python2-iscsi-initiator-utils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-1.git4ef9261
changelog:
  - pull in post 2.0.876 tagged fixes from upstream git
  - minimal packaging of libopeniscsiusr (internal use only, no dev package yet)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-5.gitf3c8e90
changelog:
  - iscsiuio: add mutex to protect netlink buffer for pass-through xmit
  - iscsid: get gateway information from sysfs when recovering sessions
  - enabled MaxOustandingR2T negotiation during login


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: Ralph Apel <r.apel at r-apel.de> 0:0.1-0.20041111.2jpp
changelog:
  - By default omit tests requiring xercesjarv
  - Add postun for javadoc
  - Drop useless macros for name, version, etc.


author: Andrew Overholt <overholt@redhat.com> 1:0-0.1.release20050331.1jpp.1
changelog:
  - Clean up
  - Remove tests
  - Fix e:nvr for new scheme (0.Z.tag.Xjpp.Y%{?dist}) and bump epoch for
    upgrades
  - Add instructions for how to create source drop
  - Don't do javadoc symlinking in %post{,un}
  - Remove Obsoletes and Provides on isorelax-bootstrap as they were never
    shipped in Fedora and I don't know what version to Obsolete/Provide


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.6.0-1
changelog:
  - Update to upstream version 0.6.0
  - Make maven provides versioned
  - Add additional pom_ macros to simplify additional pom editing


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.7.0-1
changelog:
  - Update to latest upstream
  - Full support for compat depmap generation
  - Generate maven-files-%{name} with a list of files to package
  - Add support for maven repo generation (alpha version)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.9.0-1
changelog:
  - Update to latest upstream version
  - Enable maven requires generator for xmvn packages
  - Enable requires generator for javadoc packages


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.10.0-1
changelog:
  - Update to upstream version 0.10.0
  - Implement %xmvn_alias, %xmvn_file and %xmvn_package macros
  - Fix regex in osgi.attr
  - Add support for pre- and post-goals in mvn-build script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.0-1
changelog:
  - Update to upstream version 0.12.0
  - Implement new pom macros: xpath_replace and xpath_set
  - Remove Support-local-depmaps.patch (accepted upstream)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.4-1
changelog:
  - Update to upstream version 0.12.4
  - Resolves: rhbz#913630 (versioned requires between subpackages)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.12.5-1
changelog:
  - Update to upstream version 0.12.5
  - Resolves problems with compat package provides and automatic requires


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.6-1
changelog:
  - Update to upstream version 0.12.6
  - Resolves: rhbz#917618 (remove jetty orbit provides)
  - Resolves: rhbz#917647 (system.bundle into autogenerated deps)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.15.0-1
changelog:
  - Update to upstream version 0.15.0
  - Added depmap for tools.jar
  - Added support for versioned autorequires
  - New plugin metadata from Maven Central


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.0-1
changelog:
  - Update to upstream version 2.0.0
  - Merge functionality of jpackage-utils
  - Provide and obsolete jpackage-utils
  - %add_maven_depmap macro now injects pom.properties to every JAR
  - %add_to_maven_depmap and %update_maven_depmap macros were removed
  - maven2jpp-mapdeps.xsl template has been removed
  - Macros related to installation of icons and desktop files were removed
  - 14 new manual pages were added
  - Documentation specific to JPackage was removed
  - Add BuildRequires: asciidoc, xmlto


author: Stanislav Ochotnicky <sochotnicky@redhat.com> 3.0.2-1
changelog:
  - Update to upstream version 3.0.2
  - Add separate python-javapackages subpackage
  - Add separate fedora-review-plugin-java subpackage
  - Enable part of unit tests


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.2.0-5
changelog:
  - Use wrapper script to inject ABRT agent JVM argument
  - Fix path to ABRT agent DSO
  - Resolves: rhbz#1153652


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 2.0.1-2mdk
changelog:
  - merged with Henri Gomez <hgomez@users.sourceforge.net> specs:
  - changed name to oro
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added Jikes support
  - changed jar name to oro.jar
  - corrected doc
  - more macros


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.0.4-1mdk
changelog:
  - 2.0.4
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - used new source packaging policy


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.0.4-7jpp
changelog:
  - section macro
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Fernando Nasser <fnasser.redhat.com> 2.0.8-3jpp
changelog:
  - Add AOT bits
  - Fix javadoc unversioned link handling
  - Add requires for post/postun javadoc sections added above


author: Marek Goldmann <mgoldman@redhat.com> - 1.11-1
changelog:
  - Upstream release 1.11 RHBZ#962761
  - CVE-2013-2035 HawtJNI: predictable temporary file name leading to local arbitrary code execution RHBZ#962614


author: Jerry James <loganjerry@gmail.com> - 2.1.1-1
changelog:
  - Version 2.1.1
  - Remove package name from Summary
  - Add patch to change the location of the JNI shared object


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Use tapsets from the misc tarball
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - The 'prelease' variable should refer to 'portablerelease', not 'rpmrelease'
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-13641


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12309
  - Resolves: RHEL-13600
  - Resolves: RHEL-13628
  - Resolves: RHEL-13635
  - Resolves: RHEL-13641
  - Resolves: RHEL-13612
  - Resolves: RHEL-13621


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-5
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.2.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-21477
  - Resolves: RHEL-20975


author: Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87
changelog:
  - Update to b87
  - Remove all rhino support; use nashorn instead
  - Remove upstreamed/unapplied patches


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89
changelog:
  - prelink dependence excluded also for aaech64
  - arm64 added to jitarches
  - added source100 config.guess to repalce the outdated one in-tree
  - added source101 config.sub  to repalce the outdated one in-tree
  - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent)
  - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent)
  - added gcc-c++ build depndece so builddep will  result to better situation


author: Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89
changelog:
  - Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch)
  - Added --disable-precompiled-headers for arm64 build


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129
changelog:
  - Add -headless subpackage based on java-1.7.0-openjdk
  - Add abrt connector support
  - Add -accessibility subpackage


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132
changelog:
  - updated to rc4 aarch64 tarball
  - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch
    patch2021 system-libpng-aarch64.patch


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132
changelog:
  - Include version information in desktop files
  - Move desktop files from tarball to top level source


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12
changelog:
  - backporting old fixes:
  - get rid of jre-abrt, uniquesuffix, parallel install, jsa files,
    config(norepalce) bug, -fstack-protector-strong, OrderWithRequires,
    nss config, multilib arches, provides/requires excludes
  - some additional cosmetic changes


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12
changelog:
  - bumped release to build by previous release.
  - forcing rebuild by jdk8
  - uncommenting forgotten comment on tzdb link


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12
changelog:
  - added build requires and requires for headles  _datadir/javazi-1.8/tzdb.dat
  - restriction of tzdata provider, so we will be aware of another possible failure


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01
changelog:
  - updated to u40-b01
  - adapted  rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch
  - adapted  jdk8042159-allow_using_system_installed_lcms2.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-5.b26
changelog:
  - Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK
  - commented out patch2 (obsolated by 666)
  - all ppc64 added to jitarches


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-12.b02
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-13.b02
changelog:
  - preparing for parallel debug+normal build
  - files and scripelts moved to extendable macros as first step to dual build
  - install and build may be done in loop for both release and slowdebug
  - debugbuild off untill its completed


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-15.b02
changelog:
  - enabled debug packages
  - removed all provides duplicating package name
  - comments about files moved inside files section (to prevent different javadoc postuns)
   - see (RH1160693)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-17.b12
changelog:
  - obsoleted gcj and sindoc. rh1149674 and rh1149675
  - removed backup/restore on images and docs in favor of reconfigure in different directory


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-20.b25
changelog:
  - bumped to b25
  - removed upstreamed patch11 hotspot-build-j-directive.patch
  - policies repacked to stop spamming yum update
  - added and used source20 repackReproduciblePolycies.sh
  - added mehanism to force priority size


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.40-21.b25
changelog:
  - Fix building with gcc 5 by ignoring return-local-addr warning
  - Include additional debugging info for java class files and test that they are
    present


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-24.b25
changelog:
  - added patch501 1182011_JavaPrintApiDoesNotPrintUmlautCharsWithPostscriptOutputCorrectly.patch
  - added patch502 1182694_javaApplicationMenuMisbehave.patch
  - both upstreamed, will be gone with u60


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-30.b13
changelog:
  - updated to security u45
  - removed patch6: disable-doclint-by-default.patch
  - added patch d318d83c4e74.patch
  - added  rhbz1206656_fix_current_stack_pointer.patch
  - renamed PStack-808293.patch -> java-1.8.0-openjdk-PStack-808293.patch
  - renamed remove-intree-libraries.sh -> java-1.8.0-openjdk-remove-intree-libraries.sh
  - renamed to preven conflix with jdk7


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - moved to boot build by openjdk8
  - Use the template interpreter on ppc64le


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.45-36.b13
changelog:
  - Patch hotspot to not use undefined code rather than passing
    -fno-tree-vrp via CFLAGS.
    Resolves: RHBZ#1208369
  - Add upstream patch for DNS nameserver issue with IPv6 addresses.
    Resolves: RHBZ#1210739


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-37.b13
changelog:
  - added runtime requires for tzdata
  - Remove reference to tz.properties which is no longer used (by gnu.andrew)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-1.b16
changelog:
  - updated to u60b16
  - deleted upstreamed patches:
     patch501 1182011_JavaPrintApiDoesNotPrintUmlautCharsWithPostscriptOutputCorrectly.patch
     patch502 1182694_javaApplicationMenuMisbehave.patch
     patch504 1210739_dns_naming_ipv6_addresses.patch
     patch402 atomic_linux_zero.inline.hpp.patch
     patch401 fix_ZERO_ARCHDEF_ppc.patch
     patch400 ppc_stack_overflow_fix.patch
     patch204 zero-interpreter-fix.patch
  - added Patch506 gif4.1.patch to allow build agaisnt giflib > 4.1


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b16
changelog:
  - Patch503 d318d83c4e74.patch, patch505 1208369_memory_leak_gcc5.patch (and patch506 gif4.1.patch)
     moved out of "if with_systemtap" block


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-2.b24
changelog:
  - updated to security u60-b24
  - moved to openjdk instead of jdk8 topdir in sources
  - removed upstreamed patch99 java-1.8.0-openjdk-linux-4.x.patch
  - removed upstreamed patch503 pr2444.patch
  - removed upstreamed patch505 1208369_memory_leak_gcc5.patch
  - removed upstreamed patch506: gif4.1.patch
   - note: usptream version is suspicious
    GIFLIB_MAJOR >= 5 SplashStreamGifInputFunc, NULL
    ELSE SplashStreamGifInputFunc
   - but the condition seems to be viceversa


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-3.b24
changelog:
  - added one more md5sum test (thanx to Severin!)
   - I guess one more missing
  - doubled slash in md5sum test in post


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-14.b24
changelog:
  - updated aarch64 tarball to contain whole forest of latest jdk8-aarch64-jdk8u60-b24.2.tar.xz
  - using this forest instead of only hotspot
  - generate_source_tarball.sh - temporarily excluded repos="hotspot" compression of download
  - not only openjdk/hotspot is replaced, by wholeopenjdk
  - ln -s openjdk jdk8 done after replacing of openjdk
  - patches 9999 601 and 602 exclded for aarch64


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.60-15.b28
changelog:
  - moved to single source integration forest
  - removed patch patch9999 enableArm64.patch
  - removed patch patch600  %{name}-rh1191652-hotspot.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-2.b17
changelog:
  - added and applied patch605 soundFontPatch.patch as repalcement for removed sound font links
  - removed hardcoded soundfont links


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-7.b17
changelog:
  - changed way of generating the sources. As result:
  - "updated" to aarch64-jdk8u65-b17 (from aarch64-port/jdk8u60)
  - used aarch64-port-jdk8u60-aarch64-jdk8u65-b17.tar.xz as new sources


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-8.b17
changelog:
  - used extracted lua scripts.
  - now depnding on copy-jdk-configs
  - config files persisting in pre instead of %pretrans


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-9.b17
changelog:
  - extracted lua scripts moved from pre where they don't work to pretrans
  - requirement on copy-jdk-configs made Week.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-11.b17
changelog:
  - Define our own optimisation flags based on the optflags macro and pass to OpenJDK build cflags/cxxflags.
  - Remove -fno-devirtualize as we are now on GCC 5 where the GCC bug it worked around is fixed.
  - Pass __global_ldflags to --with-extra-ldflags so Fedora linker flags are used in the build.
  - Also Pass ourcppflags to the OpenJDK build cflags as it wrongly uses them for the HotSpot C++ build.
  - Add PR2428, PR2462 & S8143855 patches to fix build issues that arise.
  - Resolves: rhbz#1283949
  - Resolves: rhbz#1120792


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-12.b17
changelog:
  -removed patch4 java-1.8.0-openjdk-PStack-808293.patch
  -removed patch13 libjpeg-turbo-1.4-compat.patch


author: jvanek <jvanek@redhat.com> - 1:1.8.0.72-1.b15
changelog:
  - updated to aarch64-jdk8u72-b15 (from aarch64-port/jdk8u)
  - used aarch64-port-jdk8u-aarch64-jdk8u72-b15.tar.xz as new sources
  - removed already upstreamed patch501 8146566.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b15
changelog:
  - Explicitly set the C++ standard to use, as the default has changed to C++ 2014 in GCC 6.
  - Turn off -Werror due to format warnings in HotSpot and -std usage warnings in SCTP.
  - Run tests under the check stage and use the debug build first.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.72-5.b15
changelog:
  - Add -fno-delete-null-pointer-checks -fno-guess-branch-probability flags to resolve x86/x86_64 crash.


author: jvanek <jvanek@redhat.com> - 1:1.8.0.72-10.b15
changelog:
  - returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-11.b15
changelog:
  - Add patches to allow the SunEC provider to be built with the system NSS install.
  - Re-generate source tarball so it includes ecc_impl.h.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS)
  - Remove patch which disables the SunEC provider as it is now usable.
  - Correct spelling mistakes in tarball generation script.
  - Move completely unrelated AArch64 gcc 6 patch into separate file.
  - Resolves: rhbz#1019554 (fedora bug)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16
changelog:
  - Fix regression introduced on s390 by large code cache change.
  - Update to u72b16.
  - Drop 8147805 and jvm.cfg fix which are applied upstream.


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15
changelog:
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03
changelog:
  - Avoid WithSeed versions of NSS functions as they do not fully process the seed
  - List current java.security md5sum so that java.security is replaced and ECC gets enabled.
  - Resolves: rhbz#1245810


author: jvanek <jvanek@redhat.com> - 1:1.8.0.77-2.b03
changelog:
  - added patch400  jdk8-archivedJavadoc.patch
  - added javadoc-zip(-debug) subpackage with compressed javadoc


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Use basename of test file to avoid misinterpretation of full path as a package
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Add 8132051 port to Zero.
  - Turn on bootstrap build for all to ensure we are now good to go.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Revert settings to production defaults so we can at least get a build.
  - Switch to a slowdebug build to try and unearth remaining issue on s390x.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Turn off -Werror so s390 can build in slowdebug mode.
  - Add fix for formatting issue found by previous s390 build.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Temporarily remove power64 from JIT arches to see if endian issue appears on Zero.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error)
  - Enable full bootstrap on all architectures to check we are good to go.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Roll back release number as release 1 never succeeded, even with tests disabled.
  - Resolves: rhbz#1325423


author: jvanek <jvanek@redhat.com> - 1:1.8.0.91-4.b14
changelog:
  - updated to aarch64-shenandoah-jdk8u71-b15-beta02 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u71-b15-beta02.tar.xz as new sources for hotspot
  - reverted  nss version fix


author: jvanek <jvanek@redhat.com> - 1:1.8.0.91-6.b14
changelog:
  - Enable weak reference discovery in ShenandoahMarkCompact. Otherwise we never process any weak references in full-gc.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-1.b14
changelog:
  - updated to u92
  - removed upstreamed patches 8132051-aarch64.patch, 8143855.patch, criticalShenandoahFix.patch, rhbz1206656_fix_current_stack_pointer.patch
  - 8132051-zero.patch, remove_aarch64_template_for_gcc6.patch
  - jdwpCrash.abrt.patch renamed to 8044762-pr2960.patch
  - httpsFix1329342.patch renamed to pr2934-sunec_provider_throwing_keyexception_withine.separator_current_nss_thus_initialise_the_random_number_generator_and_feed_the_seed_to_it.patch
  - added known regresisonos fixes for u92 scheduled for next u (519-525)


author: jvanek <jvanek@redhat.com> - 1:1.8.0.101-1.b14
changelog:
  - updated to aarch64-jdk8u101-b14 (from aarch64-port/jdk8u)
  - updated to aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-aarch64-jdk8u101-b14.tar.xz as new sources
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25.tar.xz as new sources for hotspot
  - priority lowered for ine zero digit, tip moved to 999
  - added jdk6260348-pr3066-gtk_laf_jtextcomponent_not_respecting_desktop_caret_blink_rate.patch, pr3083-rh1346460-for_ssl_debug_return_null_instead_of_exception_when_theres_no_ecc_provider.patch, 8159244-pr3074.patch, corba_typo_fix.patch
  renamed: jdk8-archivedJavadoc.patch -> jdk8154313-generated_javadoc_scattered_all_over_the_place.patch, pr2991-rh1341258.patch -> 8158260-pr2991-rh1341258.patch
  - not added 8147771-additional_hunk.patch, already in b14


author: jvanek <jvanek@redhat.com> - 1:1.8.0.101-2.b14
changelog:
  - added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation
  - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b14
changelog:
  - Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch.
  - Resolves: rhbz#1358661
  - Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1360863


author: jvanek <jvanek@redhat.com> - 1:1.8.0.102-1.b14
changelog:
  - updated to aarch64-jdk8u102-b14 (from aarch64-port/jdk8u)
  - updated to aarch64-shenandoah-jdk8u102-b14 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-aarch64-jdk8u102-b14.tar.xz as new sources
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u102-b14.tar.xz as new sources for hotspot
  - removed upstreamed patches 519, 520 and 605
  - updated to systemtap 3, removed related patches 300 and 301
  - jjs provides moved to headless


author: jvanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005)


author: jvanek <jvanek@redhat.com> - 1:1.8.0.111-1.b16
changelog:
  - updated to aarch64-jdk8u111-b16 (from aarch64-port/jdk8u)
  - updated to aarch64-shenandoah-jdk8u111-b16 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-aarch64-jdk8u111-b16.tar.xz as new sources
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u111-b16.tar.xz as new sources for hotspot
  - adapted patches


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.111-2.b16
changelog:
  - added dont-add-unnecessary-debug-links.patch
  - added hotspot-assembler-debuginfo.patch
  - returned accidentally removed  hotspot-remove-debuglink.patch
  - eu-readelfs on libraries improved, added gdb call


author: jvanek <jvanek@redhat.com - 1:1.8.0.111-3.b16
changelog:
  - added patch207 - PR3183.patch
  - java SSL/TLS implementation: should follow the policies of system-wide crypto policy


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-1.b14
changelog:
  - updated to aarch64-jdk8u121-b14 (from openjdk8-forests/latest-aarch64)
  - updated to aarch64-shenandoah-jdk8u121-b14 (from openjdk8-forests/latest-shenandoah) of hotspot
  - used openjdk8-forests-latest-aarch64-aarch64-jdk8u121-b14.tar.xz as new sources
  - used openjdk8-forests-latest-shenandoah-aarch64-shenandoah-jdk8u121-b14.tar.xz as new sources for hotspot
  - deleted:    8044762-pr2960.patch 8049226-pr2960.patch 8154210.patch 8158260-pr2991-rh1341258.patch 8159244-pr3074.patch
  - adapted java-1.8.0-openjdk-size_t.patch pr1834-rh1022017-reduce_ellipticcurvesextension_to_provide_only_three_nss_supported_nist_curves_23_24_25.patch rh1163501-increase_2048_bit_dh_upper_bound_fedora_infrastructure_in_dhparametergenerator.patch
  - updated from internal (rhel) repo  OPENJDK_URL_DEFAULT=ssh://t...redhat.com//...ty/
  - with custom PR2126=/.../pr2126.patch (removed newly added brainpool curves)
  - withspecial values of PROJECT_NAME="openjdk8-forests", REPO_NAME="latest-aarch64"
  - with correct tag VERSION="aarch64-jdk8u121-b14"
  - and for shenandoah hotspot used custom repo REPO_NAME=latest-shenandoah
  - with correct tag VERSION="aarch64-shenandoah-jdk8u121-b14"
  - complete changes to  generate_source_tarball.sh  update_package.sh NOT commited (willbe regenerated from official repos soon)


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-2.b14
changelog:
  - revertrd patch535, excludeECDHE-1415137.patch and related changes
  - issue casued by nss, see rhbz#1415137 c#35


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-5.b14
changelog:
  - patch 536 reordered to 537
  - added patch 536 - Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments"
  - added patch 538 - 1423421: Javadoc crashes when method name ends with "Property"
  - rhbz#1423751 - added -fno-split-loops worakround sigsew when building with GCC7 (probably bug in jdk's JIT )


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14
changelog:
  - fixed the config(noreplace) issue with various left files lke java.security (rhbz#1183793)
  - by calling new c-j-c hooks
  - removed self-tail-bitting check check_sum_presented_in_spec
  - release 6+7 to verify update path


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-9.b14
changelog:
  - updated to latest stable shenandoah hotspot
  - updated to properly tagged upstream forest (no update, just rename)
  - fixed update package to verify PR2126 patch and work with sha512


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-11.b14
changelog:
  - sync from rhel, reordered patches, enabled shenanoah on aarch64
  - Patch OpenJDK to check the system cacerts database directly
  - Remove unneeded symlink to the system cacerts database
  - Drop outdated openssl dependency from when the RPM built the cacerts database
  - udpated to latest stable shenandoah hotspot


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-1.b12
changelog:
  - updated to aarch64-jdk8u131-b12 (from aarch64-port/jdk8u)
  - updated to aarch64-shenandoah-jdk8u131-b12-shenandoah-merge-2017-04-20 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-aarch64-jdk8u131-b12.tar.xz as new sources
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u131-b12-shenandoah-merge-2017-04-20.tar.xz as new sources for hotspot


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-3.b12
changelog:
  - source999 moved to source1
  - added two pathces 8181055-pr3394-rh1448880.patch and 8175813/PR3394/RH1448880
  - enabled (commented out) system NSS via patch1000, rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-1.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
  - get rid of bin/* and lib/*, fixed rhbz1480777
  - adapted to rpm 4.14: all expanding macros changed to define, all %1 and %1 replaced by %{?1}, all expandable macros parameter preffixed by --
  - get rid of generated filelists all except javafx and demos


author: jvanek <jvanek@redhat.com> - 1:1.8.0.144-7.b01
changelog:
  - updated to aarch64-shenandoah-jdk8u144-b02-shenandoah-merge-2017-10-02 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u144-b02-shenandoah-merge-2017-10-02.tar.xz as new sources for hotspot


author: jvanek <jvanek@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - updated to aarch64-jdk8u151-b12 (from aarch64-port/jdk8u)
  - updated to aarch64-shenandoah-jdk8u151-b12 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-aarch64-jdk8u151-b12.tar.xz as new sources
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u151-b12.tar.xz as new sources for hotspot
  - tapset updated to 3.6pre02
  - policies adapted to new limited/unlimited schmea
  - above acomapnied by c-j-c 3.3
  - alligned patches and added PPC ones (thanx to gnu_andrew)
  - added patch209: 8035496-hotspot.patch
  - added patch210: suse_linuxfilestore.patch


author: jvanek <jvanek@redhat.com> - 1:1.8.0.161-0.b14
changelog:
  - updated to u161, rmeoved upstreamed patches
  - removed patch555 8164293-pr3412-rh1459641.patch
  - removed patch550 8175813-pr3394-rh1448880.patch
  - removed patch547 8173941-pr3326.patch
  - removed patch532 8162384-pr3122-rh1358661.patch
  - removed patch535 8153711-pr3313-rh1284948.patch
  - removed patch561 8075484-pr3473-rh1490713.patch
  - removed patch554 8175887-pr3415.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-1.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550) (gnu_andrew)
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones (gnu_andrew)


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-6.b10
changelog:
  - aligning with java-openjdk in fedora:
  - removed fx binding
  - config files to etc
  - slowdebug instead simply debug subpackage
  - purged provides
  - many macros renamed
  - typos correction
  - bumped jstack (may be wrong)


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.1.10-7
changelog:
  - quoted sed expressions, changed possibly confussing # by @
  - added vendor(origin) into icons
  - removed last trace of relative symlinks
  - added BuildRequires of javapackages-tools to fix build failure after Requires change to javapackages-filesystem


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.172-1.b11
changelog:
  - updated to u172-b11
  - removed patches:
  - patch207 8200556-pr3566.patch
  - patch104 pr3458-rh1540242.patch
  - patch209 8035496-hotspot.patch
  - patch700 pr3573-fix_TCK_crash_with_shenandoah_in_shenandoahsupport_cpp_in_case_of_dead_brnach_in_is_independent.patch
  - fixed issue with atkwrapper wrongly palced broken symlink
  - fixed libjvm path for system tap
  - returned patch104 pr3458-rh1540242.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Sync with IcedTea 3.8.0.
  - Label architecture-specific fixes with architecture concerned
  - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround)
  - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
  - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode
  - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds
  - 8185723, PR3553: Zero: segfaults on Power PC 32-bit
  - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe
  - PR3559: Use ldrexd for atomic reads on ARMv7.
  - 8187577, PR3578: JVM crash during gc doing concurrent marking
  - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong
  - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile
  - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code
  - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Update Shenandoah tarball to include 2018-05-15 merge.
  - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds.
  - Drop PR3573 patch applied upstream.
  - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags.
  - Add missing changelog credits


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-11.b11
changelog:
  - Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651
  - Backport 8064786 (PR3601) to fix -Wreturn-type failure on debug builds.
  - Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64.
  - Sync with IcedTea 3.8.0 patches to use -Wreturn-type.
  - Add backports of 8141570, 8143245, 8197981 & 8062808.
  - Drop pr3458-rh1540242-zero.patch which is covered by 8143245.


author: Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-16.b11
changelog:
  - added Recommends gtk2 for main package
  - added Suggests lksctp-tools, pcsc-lite-devel, cups for headless package
  - see RHBZ1598152


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04
changelog:
  - Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage"


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b13-8
changelog:
  - Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk8.patch, so as to filter
    -Wl,--as-needed. Resolves RHBZ#1622186.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b13-9
changelog:
  - Adjust system jpeg patch, jdk8043805-allow_using_system_installed_libjpeg.patch, so as to filter
    -Wl,--as-needed. Resolves RHBZ#1622186.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.181.b15-1
changelog:
  - fixed unexpanded arch in policy tool desktop file
  - fixed versions (8->1.8.0) of images used in desktop files
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-2
changelog:
  - Update(s) from upstreamed patches:
    - 8036003-dont-add-unnecessary-debug-links.patch =>
      jdk8036003-add_with_native_debug_symbols_configure_flag.patch
    - rh1176206-jdk.patch =>
      jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch =>
      Deleted rh1176206-root.patch as thats no longer needed with
      upstream 8150954.
    - Refreshed jdk8165852-pr3468-mount_point_not_found_for_a_file_which_is_present_in_overlayfs.patch from upstream.
    - Refreshed jdk8201495-zero_reduce_limits_of_max_heap_size_for_boot_JDK_on_s390.patch from upstream.
    - 8207057-pr3613-hotspot-assembler-debuginfo.patch =>
      jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and
      jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u
      review.
  - Renamed pr2842-02.patch => jdk8148351-pr2842-02-only_display_resolved_symlink_for_compiler_do_not_change_path.patch.
  - Renamed spec-only patch:
    pr3183.patch => pr3183-rh1340845-support_fedora_rhel_system_crypto_policy.patch
  - Renamed java-1.8.0-openjdk-size_t.patch =>
    jdk8201495-zero_reduce_limits_of_max_heap_size_for_boot_JDK_on_s390.patch
  - Moved SunEC provider via system NSS to RPM specific patches section.
  - Moved upstream 8u patches to appropriate sections (8u192/8u202).
  - Removed rh1214835.patch since it's invalid. See:
    https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3
  - Use --with-native-debug-symbols=internal which JDK-8036003 adds.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-3
changelog:
  - Renamed more patches for clarity:
    include-all-srcs.patch => jdk8044235-src_zip_should_include_all_sources.patch
    java-1.8.0-openjdk-rh1191652-hotspot-aarch64.patch => jdk8073139-pr2236-rh1191652--use_ppc64le_as_the_arch_directory_on_that_platform_and_report_it_in_os_arch_aarch64_forest.patch
    java-1.8.0-openjdk-rh1191652-jdk.patch => jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch
    java-1.8.0-openjdk-rh1191652-root.patch => jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_root.patch
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-4
changelog:
  - Add fixes for optimization gaps (annocheck issues):
    - 8210761: libjsig is being compiled without optimization
    - 8210647: libsaproc is being compiled without optimization
    - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation
    - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization
               8u upstream and aarch64/jdk8u upstream versions.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-5
changelog:
  - Add explicit requirement for libXcomposite which is used when performing
    screenshots from Java.
  - Add explicit BR unzip required for building OpenJDK.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-6
changelog:
  - Refreshed upstreamed patches (from 8u202):
    - jdk8044235-src_zip_should_include_all_sources.patch: src.zip should include all sources.
    - jdk8073139-pr2236-rh1191652--use_ppc64le_as_the_arch_directory_on_that_platform_and_report_it_in_os_arch_aarch64_forest.patch,
      jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch,
      jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_root.patch: PPC64LE JVM reporting issues.
  - Moved both patch series to 8u202 sections.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.181.b15-7
changelog:
  - Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch:
    - Annother fix for optimization gaps (annocheck issues)
    - Zero 8u version fix was missing. Hence, only shows up on Zero arches.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-1
changelog:
  - updated to aarch64-shenandoah-jdk8u191-b12
  - deleted 8146115-pr3508-rh1463098.patch, pr3619.patch, pr3620.patch - should be upstreamed
  - create pr3634-fix_shenandoah_for_size_t_on_s390.patch to fix build failure on s390
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8
changelog:
  - added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch
  - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Fix patch organisation in the spec file:
  -   * Move ECC patches back to upstreamable section
  -   * Move system cacerts & crypto policy patches to upstreamable section
  -   * Merge "Local fixes" and "RPM fixes" which amount to the same thing
  -   * Move system libpng & lcms patches back to 8u upstreamable section
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Note why PR1834/RH1022017 is not suitable to go upstream in its current form.
  - Resolves: rhbz#1661577


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12
changelog:
  - Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Introduce sa_arches for architectures with sa-jdi.jar and include aarch64
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Add 8160748 for AArch64 which is missing from upstream 8u version.
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1
changelog:
  - Add backport of JDK-8145096 (PR3693) to fix undefined behaviour issues on newer GCCs
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
    - JDK-8029661/PR3642/RH1477159
    - JDK-8145096/PR3693
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-2
changelog:
  - Add JDK-8223219 to avoid -fstack-protector overriding -fstack-protector-strong
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-3
changelog:
  - Remove additions to EXTRA_CFLAGS and EXTRA_CPP_FLAGS which are now made by upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-4
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b04-shenandoah-merge-2019-04-30.
  - Update version logic to handle -shenandoah* tag suffix.
  - Drop PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Update 8214206 to use log2_long rather than casting to intptr_t, which may be smaller than size_t.
  - Resolves: rhbz#1688365
  - Resolves: rhbz#1688382


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-5
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1724452


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.212.b04-5
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-5
changelog:
  - Obsolete javadoc-debug and javadoc-debug-zip packages via javadoc and javadoc-zip respectively.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000 & 8197546 as applied upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Drop unnecessary build requirement on gtk2-devel, as OpenJDK searches for Gtk+ at runtime.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Add missing build requirements for libXext-devel and libXrender-devel, previously masked by Gtk2+ dependency.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - fontconfig build requirement should be fontconfig-devel, previously masked by Gtk2+ dependency
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - nss.fips.cfg needs to be moved to %{etcjavadir} and symlinked into the JDK, like nss.cfg
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-3
changelog:
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - Resolves: rhbz#1750752


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Drop JDK-8223219 as now upstream.
  - JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do likewise.
  - Add alternatives support for these two new SDK binaries.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1750419


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1750419


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-6
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746879


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-2
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  - Resolves: rhbz#1737112


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-2
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Resolves: rhbz#1737112


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-3
changelog:
  - Add JDK-8165996/PR3506 & JDK-8195607/PR3776 to support NSS SQLite databases.
  - Resolves: rhbz#1760437


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-4
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Resolves: rhbz#1737112


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b01.
  - Switch to EA mode.
  - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-5
changelog:
  - Add support for fastdebug builds on x86_64 only.
  - Drop redundant slowdebug/debug sed invocation on the docs zip filename as it is only now built for non-debug.
  - Resolves: rhbz#1836067


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-7
changelog:
  - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b01.
  - Switch to EA mode.
  - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR
  - Adjust RH1648644 following context changes due to introduction of JFR packages
  - Add jfr binary to devel package and alternatives set
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea
changelog:
  - Enable JFR in our builds, ahead of upstream default.
  - Only enable JFR for JIT builds, as it is not supported with Zero.
  - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea
changelog:
  - Introduce jfr_arches for architectures which support JFR.
  - Fix path to jfr.jar.
  - Use sa_arches for libsaproc.so inclusion.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea
changelog:
  - Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
  - Resolves: rhbz#1582504


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.1.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b10-3
changelog:
  - ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs
  - Resolves: rhbz#1831665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860453


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-2
changelog:
  - Add backport of JDK-8223482 so PKCS#11 FIPS provider does not offer unsupported ciphers.
  - Resolves: rhbz#1860965


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-3
changelog:
  - Add backport of JDK-8251117 to allow key length to be retrieved from PKCS#11 FIPS keys
  - Resolves: rhbz#1860993


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b01.
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b02.
  - Remove JDK-8154313 backport now applied upstream.
  - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b04.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05.
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.3.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Remove JDK-8165996/PR3506/RH1760437 & JDK-8251117/RH1860990 as now applied upstream.
  - Replace JDK-8223482/RH1860965 with RH1860986 (disable TLSv1.3 when using the NSS-FIPS provider)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.2.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.2.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-2
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-4
changelog:
  - Bump release number to build on RHEL 8.4.0 branch.
  - Resolves: rhbz#1876665
  - Resolves: rhbz#1889414


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-6
changelog:
  - Add backport of JDK-8223940: "Private key not supported by chosen signature algorithm" to handle lack of provider RSAPSS support
  - Resolves: rhbz#1892216


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-2
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Remove JDK-8223940/RH1892216 backport now included in upstream 8u275.
  - Remove JDK-8236512/RH1889414 backport now included in upstream 8u275.
  - Resolves: rhbz#1895060


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.275.b01-3
changelog:
  - added patch600, rh1750419-redhat_alt_java.patch
  - Replaced alt-java palceholder by real pathced alt-java
  - remove patch529 rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - remove patch531 rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - both suprassed by new patch
  - Resolves: rhbz#1750419


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b01 (EA)
  - Update release notes for 8u282-b01.
  - Switch to EA mode.
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Remove PR3601, covered upstream by JDK-8062808.
  - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727.
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.2.ea
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1906862


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - Resolves: rhbz#1908967


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-2
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1913868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b01 (EA)
  - Update release notes for 8u292-b01.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b02 (EA)
  - Update release notes for 8u292-b02.
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b03 (EA)
  - Update release notes for 8u292-b03.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.3.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Require tzdata 2021a due to JDK-8260356
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b01 (EA)
  - Update release notes for 8u302-b01.
  - Switch to EA mode.
  - Resolves: rhbz#1967812


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.302.b01-0.1.ea
changelog:
  - adapted to newst cjc to fix issue with rpm 4.17
  - Disable copy-jdk-configs for Flatpak builds
  - removed cjc backward comaptiblity, to fix when both rpm 4.16 and 4.17 are in transaction
  - Resolves: rhbz#1953923


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.2.ea
changelog:
  - Cleanup architecture handling in preparation for extending set of fastdebug architectures
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1969254


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b02 (EA)
  - Update release notes for 8u302-b02.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03 (EA)
  - Update release notes for 8u302-b03.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
  - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.3.ea
changelog:
  - Introduced nm based check to verify alt-java on x86_64 is patched, and no other alt-java or java is patched
  - Patch600, rh1750419-redhat_alt_java.patch, amended to die, if it is used wrongly
  - Introduced ssbd_arches with currently only valid arch of x86_64 to separate real alt-java architectures
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b04 (EA)
  - Update release notes for 8u302-b04.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.2.ea
changelog:
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Resolves: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#1994659


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Related: rhbz#1999937


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-3
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2012339


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.312.b07-4
changelog:
  - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
    secmod.db file as part of nss
  - Resolves: rhbz#2023532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-5
changelog:
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b01 (EA)
  - Update release notes for 8u322-b01.
  - Switch to EA mode.
  - Related: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b02 (EA)
  - Update release notes for 8u322-b02.
  - Related: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b03 (EA)
  - Update release notes for 8u322-b03.
  - Related: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Related: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b05 (EA)
  - Update release notes for 8u322-b05.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021263


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Pass compiler flags to the ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Sync minor placement differences with Fedora & RHEL 9
  - Resolves: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-5
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052828


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-8
changelog:
  - alternatives creation moved to posttrans
  - Thus fixing the old reisntall issue:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1200302
  - https://bugzilla.redhat.com/show_bug.cgi?id=1976053
  - Resolves: rhbz#2008192


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-11
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Remove JDK-8279077 patch now upstream.
  - Related: rhbz#2047536


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047536


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.2.ea
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Djava.security.disableSystemCACerts=true
  - Resolves: rhbz#2055274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2074646


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-4
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102431


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-5
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Rebase PR2888/RH2055274 cacerts patch so it applies after the current FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2097152
  - Resolves: rhbz#2100675


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083265


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106507


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112403


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102733


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Sync system cacerts support with RHEL 9, disabling using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Related: rhbz#2055274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2048542


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Drop JDK-8255559/RH2124390 patch which is now upstream
  - Resolves: rhbz#2150193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162715


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150203


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-2
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Drop JDK-8275535/RH2053256 patch which is now upstream
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - Drop hack for difference in local and portable build version
  - Replace local copies of JDK portable binaries with build dependencies
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Retain portable_build-arches with x86-32 added for reference
  - Remove NEWS.
  - Related: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-4
changelog:
  - Include the java-1.8.0-openjdk-portable.spec file with instructions on how to rebuild.
  - Remove duplicate use of README.md inside the *-src package (it is no longer about sources)
  - Related: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Add version of bundled zlib (bumped from 1.2.11 to 1.2.13 with this update)
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Sync the copy of the portable specfile with the latest update
  - Related: rhbz#2217710


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - Remove obsolete file generate_singlerepo_source_tarball.sh
  - Remove obsolete file get_sources.sh
  - Remove obsolete file update_main_sources.sh
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Sync patch set with portable build
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-2
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u422-b01 (EA)
  - Update release notes for shenandoah-8u422-b01.
  - Switch to EA mode.
  - Sync the copy of the portable specfile with the latest update
  - Restore NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
  - Document policy repacking script and rename to correct spelling and style
  - Limit Java only tests to one architecture using jdk_test_arch
  - Related: RHEL-46866
  - Resolves: RHEL-47067
  - Resolves: RHEL-47087


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b05-1.1
changelog:
  - Update to shenandoah-jdk8u422-b05 (GA)
  - Update release notes for shenandoah-8u422-b05.
  - Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Actually require tzdata 2024a now it is available in the buildroot
  - Add missing build dependencies on zlib-devel and tar
  - Update LCMS version to match JDK-8245400
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-46866
  - Resolves: RHEL-47001


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.432.b06-1
changelog:
  - Update to shenandoah-jdk8u432-b06 (GA)
  - Update release notes for shenandoah-8u432-b06.
  - Drop JDK-828109{6,7,8}/PR3836 patch following integration of upstream version
  - Regenerate JDK-8199936/PR3533 patch following JDK-828109{6,7,8} integration
  - Bump version of bundled zlib to 1.3.1 following JDK-8324632
  - Include backport of JDK-8328999 to update giflib to 5.2.2
  - Bump version of bundled giflib to 5.2.2 following JDK-8328999
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58791
  - Resolves: RHEL-62278
  - Resolves: RHEL-61285
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74303


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73542
  - Related: RHEL-74303


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-1
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86973
  - Resolves: RHEL-86616


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-1
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101654
  - Resolves: RHEL-102307
  - Resolves: RHEL-102907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217713
  - Resolves: rhbz#2196318
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224411


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236589


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12222
  - Resolves: RHEL-13546
  - Resolves: RHEL-13553
  - Resolves: RHEL-13559
  - Resolves: RHEL-13566
  - Resolves: RHEL-13572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20981


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.0.46-8
changelog:
  - removed accessibility sub-packages
  - kept applied patch and properties files
  - debug sub-packages renamed to slowdebug


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.1.10-1
changelog:
  - updated to security update 1
  - jexec unlinked from path
  - used java-openjdk as boot jdk
  - aligned provides/requires
  - renamed zip javadoc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:10.0.1.10-2
changelog:
  - Removed unneeded patches:
    PStack-808293.patch
    multiple-pkcs11-library-init.patch
    ppc_stack_overflow_fix.patch
  - Added patches for s390 Zero builds:
    JDK-8201495-s390-java-opts.patch
    JDK-8201509-s390-atomic_store.patch
  - Renamed patches for clarity:
    aarch64BuildFailure.patch => JDK-8200556-aarch64-slowdebug-crash.patch
    systemCryptoPolicyPR3183.patch => pr3183-rh1340845-support_fedora_rhel_system_crypto_policy.patch
    bootcycle_jobs.patch => JDK-8201788-bootcycle-images-jobs.patch
    system-nss-ec-rh1565658.patch => pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:10.0.1.10-3
changelog:
  - Inject build flags properly. See RHBZ#1571359
  - Added patch JDK-8202262-libjsig.so-extra-link-flags.patch
    since libjsig.so doesn't get linker flags injected properly.


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.1.10-7
changelog:
  - quoted sed expressions, changed possibly confusing # by @
  - added vendor(origin) into icons
  - removed last trace of relative symlinks
  - added BuildRequires of javapackages-tools to fix build failure after Requires change to javapackages-filesystem


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.16-1
changelog:
  - Initial version of JDK 11 ea based on tag jdk-11+16.
  - Removed patches no longer needed or upstream:
    sorted-diff.patch (see JDK-8198844)
    JDK-8201788-bootcycle-images-jobs.patch
    JDK-8201509-s390-atomic_store.patch
    JDK-8202262-libjsig.so-extra-link-flags.patch (never was an issue on 11)
    JDK-8193802-npe-jar-getVersionMap.patch
  - Updated and renamed patches:
    java-openjdk-s390-size_t.patch => JDK-8203030-s390-size_t.patch
  - Updated patches for JDK 11:
    pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.16-2
changelog:
  - Disable Aarch64 slowdebug build (see JDK-8204331).
  - s390x doesn't have the SA even though it's a JIT arch.


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.19-1
changelog:
  - updated sources to jdk-11+19
  - added patch6 systemLcmsAndJpgFixFor-f0aeede1b855.patch to fix regression of system libraries after f0aeede1b855 commit
  - adapted pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch to accommodate changes after f0aeede1b855 commit


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.20-1
changelog:
  - removed patch6 JDK-8205616-systemLcmsAndJpgFixFor-rev_f0aeede1b855.patch
  - improved a bit generate_source_tarball.sh to serve also for systemtap
  - thus deleted generate_tapsets.sh
  - simplified and cleared update_package.sh
  - moved to single source jdk - from shenandoah/jdk11
  - bumped to latest jdk11+20
  - adapted PR2126 to jdk11+20
  - adapted handling of systemtap sources to new style
  - (no (misleading) version inside (full version is in name), thus different sed on tapsets and different directory)
  - shortened summaries and descriptions to around 80 chars
  - Hunspell spell checked
  - license fixed to correct jdk11 (sgehwolf)
  - more correct handling of internal libraries (sgehwolf)
  - added lib/security/public_suffix_list.dat as +20 have added it (JDK-8201815)
  - added test for shenandaoh GC presence where expected
  - Removed workaround for broken aarch64 slowdebug build
  - Removed all defattrs
  - Removed no longer necessary cleanup of diz and  debuginfo files


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-1
changelog:
  - added Recommends gtk3 for main package
  - changed BuildRequires from gtk2-devel to gtk3-devel (it can be more likely dropped)
  - added Suggests lksctp-tools, pcsc-lite-devel, cups for headless package
  - see RHBZ1598152
  - added trick to catch hs_err files (sgehwolf)
  - updated to shenandaoh-jdk-11+22


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-6
changelog:
  - Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - No longer filter -O flags from C flags coming from
    redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libjsig.
  - Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.1.13-3
changelog:
  - Use upstream's version of Aarch64 intrinsics disable patch:
    - Removed:
      RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
      RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    - Superceded by:
      jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.1.13-6
changelog:
  - fixed tck failures of arraycopy and process exec with shenandoah on
  - added patch585 rh1648995-shenandoah_array_copy_broken_by_not_always_copy_forward_for_disjoint_arrays.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.1.13-9
changelog:
  - for non debug supackages, ghosted all masters and slaves (rhbz1649776)
  - for tech-preview packages, if-outed versionless provides. Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Removed all slowdebug provides (rhbz1655938); for tech-preview packages also removed all internal provides


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-11
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Remove RH1648995; fixed upstream
  - Resolves: rhbz#1659143


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-0
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1666532
  - Resolves: rhbz#1659143


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-1
changelog:
  - Add PR3695 to allow the system crypto policy to be turned off.
  - Correct original system crypto policy patch to refer to OpenJDK 11 bug (PR3694)
  - Resolves: rhbz#1666532


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.2.7-2
changelog:
  - Add explicit requirement for libXcomposite which is used when performing
    screenshots from Java.
  - Add explicit BR unzip required for building OpenJDK.
  - Resolves: rhbz#1666532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Add cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-2
changelog:
  - Don't package lib/client and lib/client/classes.jsa which don't exist (see RH1643469)
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-3
changelog:
  - Fix requires/provides for the non-system JDK case. JDK 11 is not a system JDK at this point.
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-4
changelog:
  - Don't build the test images needlessly.
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.7-5
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Make use of Recommends and Suggests dependent on RHEL 8+ environment.
  - Drop unnecessary build requirement on gtk3-devel, as OpenJDK searches for Gtk+ at runtime.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Add missing build requirement for libXrender-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Add missing build requirement for libXrandr-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - fontconfig build requirement should be fontconfig-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-1
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-4
changelog:
  - Backport JDK-8230923 so arguments are passed to security providers.
  - Update RH1655466 patch with changes in OpenJDK 8 version.
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
  - Resolves: rhbz#1751845


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Drop JDK-8223482 which is included upstream in 11.0.5+1.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-1
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-4
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1784116


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-5
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1784116


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-6
changelog:
  - Update generate_source_tarball.sh script to use the PR3751 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Drop JDK-8230923 now applied upstream.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-1
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Add JDK-8236039 backport to resolve OpenShift blocker
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-2
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  - Resolves: rhbz#1737115


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-4
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Resolves: rhbz#1737115


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.7+1 (EA)
  - Switch to EA mode for 11.0.7 pre-release builds.
  - Drop JDK-8236039 backport now applied upstream.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-1
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+1 (EA)
  - Switch to EA mode for 11.0.8 pre-release builds.
  - Drop JDK-8237396 & JDK-8228407 backports now applied upstream.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.2-0.2.ea
changelog:
  - Build static-libs-image and add resulting files via -static-libs
    sub-package.
  - Resolves: rhbz#1839084


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.3.ea
changelog:
  - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
  - Resolves: rhbz#1725961


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1839084


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.8.6-0.3.ea
changelog:
  - Symlink hunk moved behind the main copy logic, to be more user-friendly with multiple installs
  - Resolves: rhbz#1820172


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.2.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.3.ea
changelog:
  - Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
  - Resolves: rhbz#1842572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-1
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-2
changelog:
  - Backport JDK-8251117 to allow key length to be retrieved from PKCS#11 FIPS keys
  - Resolves: rhbz#1860990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-3
changelog:
  - Add JDK-8252258 to return default vendor to the original value of 'Oracle Corporation'
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#1868406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-4
changelog:
  - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use.
  - Resolves: rhbz#1860986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-5
changelog:
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Resolves: rhbz#1868406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-6
changelog:
  - Add patch to cancel PKCS#11 operations on failure (RH1868754)
  - Add patch to allow the PKCS11 provider access to the SunJCE provider (RH1868740)
  - Resolves: rhbz#1868740
  - Resolves: rhbz#1868754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.9+1 (EA)
  - Switch to EA mode for 11.0.9 pre-release builds.
  - JDK-8245832 increases the set of static libraries, so try and include them all with a wildcard.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.1-0.1.ea
changelog:
  - Cleanup architecture and JVM feature handling in preparation for using upstreamed Shenandoah.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.2-0.1.ea
changelog:
  - Update to jdk-11.0.9+2 (EA)
  - With Shenandoah now upstream in OpenJDK 11, we can use jdk-updates/jdk11 directly
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.2-0.2.ea
changelog:
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.3-0.1.ea
changelog:
  - Update to jdk-11.0.9+3 (EA)
  - Remove JDK-8251117/RH1860990 as now applied upstream.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.1.ea
changelog:
  - Update to jdk-11.0.9+6 (EA)
  - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.1.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.2.ea
changelog:
  - Add patch to allow the PKCS11 provider access to the SunJCE provider with the security manager enabled
  - Resolves: rhbz#1883849


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.3.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-3
changelog:
  - Bump release number to build on RHEL 8.4.0 branch.
  - Resolves: rhbz#1876665
  - Resolves: rhbz#1889497
  - Resolves: rhbz#1883849


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-4
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1889481


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-5
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895274


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-7
changelog:
  - removed patch6, rh1566890-CVE_2018_3639-speculative_store_bypass.patch, surpassed by new patch
  - added patch600, rh1750419-redhat_alt_java.patch, suprassing removed patch
  - no longer copying of java->alt-java as it is created by  patch600
  - Resolves: rhbz#1784116


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-9
changelog:
  - Redefined linux -> __linux__ and __x86_64 -> __x86_64__ in RH1750419 patch
  - Resolves: rhbz#1784116


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-9
changelog:
  - Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  - Resolves: rhbz#1784116


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with RHEL version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286, JDK-8236512 & JDK-8254177 as applied upstream
  - Use system harfbuzz now this is supported.
  - Use system tzdata2020b now it's available.
  - Adjust RH1842572 patch due to context change from JDK-8213400
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8.
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-2
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1894083


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.10.0.9-3
changelog:
  - Removed lib-style provides for fastdebug_suffix_unquoted
  - Fixed missing condition for fastdebug packages being counted as debug ones
  - Fix typo in variable
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-3
changelog:
  - Fix debug and fastdebug descriptions to emphasise the difference is optimisation or no optimisation.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-4
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1915071


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-7
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Resolves: rhbz#1814915


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-8
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930513


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.10.0.9-10
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.11.0+1
  - Update release notes to 11.0.11.0+1
  - Switch to EA mode for 11.0.11 pre-release builds.
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-3
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Martin Balao <mbalao@redhat.com> - 1:11.0.11.0.9-4
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1929465


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-4
changelog:
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1929465


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+1
  - Update release notes to 11.0.12.0+1
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.3.ea
changelog:
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-1
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - Resolves: rhbz#1972395


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2
changelog:
  - Add patch in order to fix java.library.path issue on aarch64 (JDK-8269668)
  - Resolves: rhbz#1994104


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4
changelog:
  - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
  - Resolves: rhbz#1997357


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-7
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#1991003


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-8
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Related: rhbz#1999938


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+1
  - Update release notes to 11.0.13.0+1
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove "-clean" suffix as no 11.0.13 builds are unclean.
  - Drop JDK-8269668 patch which is now applied upstream.
  - Related: rhbz#1999938


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-3
changelog:
  - Update to jdk-11.0.13.0+8
  - Update release notes to 11.0.13.0+8
  - Switch to GA mode for final release.
  - Resolves: rhbz#2012335


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.13.0.8-4
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2022821


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-5
changelog:
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022821


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+1
  - Update release notes to 11.0.14.0+1
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
  - Related: rhbz#2022821


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-2
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039366


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.14.0.9-3
changelog:
  - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
    secmod.db file as part of nss
  - Resolves: rhbz#2023534


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-4
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021559


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-5
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Sync gdb test with java-1.8.0-openjdk.
  - Improve architecture restrictions for the gdb test.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2052809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052816


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052809
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052827


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2048549


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2048549


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2073593


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-5
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102430


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-6
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099838
  - Resolves: rhbz#2090378


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106515


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119527


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121266


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150194


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150194


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150204
  - Resolves: rhbz#2108712


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Reintroduce generate_source_tarball.sh from RHEL 9
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2189327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Related: rhbz#2189327


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30917


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Switch to GA mode for release
  - Fix Provides to reflect up to date component versions
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Resolves: RHEL-45209
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.6-0.2.ea
changelog:
  - Update to jdk-11.0.25+6 (EA)
  - Switch to EA mode
  - Update release notes to 11.0.25+6
  - Related: RHEL-58772


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.7-0.3.ea
changelog:
  - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
  - RHJDKBP-874 - Remove 
  - Related: RHEL-58772


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-2
changelog:
  - Update to jdk-11.0.25+9 (GA)
  - Update release notes to 11.0.25+9
  - Switch to GA mode for release
  - Related: RHEL-58772
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: David Walluck <david@anti-microsoft.org> 1:0.10-0.k.1jpp
changelog:
  - fix version/release (bump epoch)
  - change License tag from Free to BSD-style
  - add Distribution tag
  - really update for JPackage 1.5


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 1:0.11a-2
changelog:
  - Rebuilt in non-bootstrap mode (removed all prebuilt jars).
  - Added BR: jflex and java_cup >= 1:0.11a for non-bootstrap mode
  - Remove unnecessary R(post,postun): coreutils


author: Lubomir Rintel <lkundrak@v3.sk> 1:0.11a-5
changelog:
  - Require appropriate packages for depmap maintenance in scriptlets
  - Remove classpath from jar manifest


author: Mat Booth <fedora@matbooth.co.uk> - 1:0.11a-14
changelog:
  - Patch so that generated action methods do not exceed the 65535 byte JVM
    method size limit. Supplied by eclipse-pdt project.
  - Drop rpm bug workaround scriptlet.


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: Matthew Wringe <mwringe at redhat.com> - 0:4.0-3jpp_1fc
changelog:
  - Merged with upstream version
  - Changed directory locations to rpm macros
  - Added conditional native compiling


author: Jerry James <loganjerry@gmail.com> - 0:4.1-0.1
changelog:
  - Update to 4.1
  - Also ship the jjrun script
  - Own the appropriate gcj directory
  - Minor spec file changes to comply with latest Fedora guidelines
  - Include the top-level index.html file in the manual


author: Matt Wringe <mwringe@redhat.com> - 0:4.1-0.2
changelog:
  - Update to remove packaged jars in source tar
  - Build with bootstrap jar so that required java source 
    files get generated


author: Jaromir Capik <jcapik@redhat.com> 0:5.0-6
changelog:
  - Fixing #835786 - javacc: Invalid upstream URL
  - Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4.3-5
changelog:
  - Fix pom filenames (#655806)
  - Versionless jars/javadocs (new guidelines)
  - Migrate to tomcat6 (#652004)
  - Other cleanups


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Ralph Apel <r.apel@r-apel.de> 0:1.0-3jpp
changelog:
  - build against dom4j-1.4-1jpp
  - introduce manual and demo subpackages
  - patch org.jaxen.dom4j.DocumentNavigatorTest
  - include LICENSE in main package
  - run tests during build


author: Ralph Apel <r.apel@r-apel.de> 0:1.1-0.b7.1jpp
changelog:
  - Upgrade to 1.1-beta-7
  - Now mavenized
  - Requiring dom4j >= 1.6.1
  - rpmbuild option to inhibit build of manual (needs newer maven)


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Bump to 1.1 final
  - Make release Xjpp.Y%{?dist}
  - Remove Distribution, Vendor
  - Fix Group
  - Remove cleaning of buildroot from beginning of %prep
  - Add cleaning of buildroot to beginning of %install
  - Remove %section free
  - Use Fedora buildroot


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Add explicit version-release on Provides and Obsoletes
  - Untabify
  - Remove %ghost on versioned javadoc dir
  - Just include %{_javadocdir}/* for javadoc package


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Michal Srb <msrb@redhat.com> - 0:1.1.6-1
changelog:
  - Update to upstream version 1.1.6
  - Build with Maven
  - Update description
  - Adapt to current guidelines


author: Matt Wringe <mwringe at redhat.com> - 0:2.6-6jpp.1
changelog:
  - Merge with upstream version
   - Add missing javadoc post and postun
   - Add missing javadoc requires


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.6-3
changelog:
  - Add license to javadoc subpackage
  - Change jakarta-commons-io for apache-commons-io
  - Add BR to maven


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.7-1
changelog:
  - Update to 0.7
  - Fix BR to not require maven2
  - Fix BR for new package name
  - Adjust spec to new guidelines


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.1mdk
changelog:
  - Requires and BuildRequires xalan-j2
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - added demo package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.6jpp
changelog:
  - versioned dir for javadoc
  - requires xalan-j2 >= 2.2.0
  - no dependencies for javadoc package
  - stricter dependency for demo package
  - section macro


author: Deepak Bhole <dbhole@redhat.com> - 0:1.0-4jpp.1
changelog:
  - Added missing requirements.
  - Remove jaxen requirement, since we don't have it in fc yet.
  - Merge with fc spec.


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.1-1
changelog:
  - Update to 1.1.1 bug#316380
  - Add maven dependency information
  - Make javadoc and demo subpackages noarch


author: Michael Simacek <msimacek@redhat.com> - 2.0.6-12
changelog:
  - Repack tarball without bundled jars
  - The repacked jar contains slightly different source (force push by upstream?)
  - Correct license tag


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.1
changelog:
  - Remove javadoc post and postun sections due to new jpp standard 
  - Update makefile patch to compress jar
  - Fix rpmlint issues


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.2
changelog:
  - Add patches jflex-CharSet_java.patch and jflex-StateSet_java.patch
    to allow building with the new gcj


author: Tomas Halman <thalman@redhat.com> - 1.6-11
changelog:
  - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
  - Resolves: RHEL-92987


author: Jan Staněk <jstanek@redhat.com> - 2.8.29-2
changelog:
  - Remove unneeded legacy conditionals around %{nodejs_arches} and %{_jsdir}
    Resolves: rhbz#1737038
  - BuildRequire nodejs for test runs
  - Remove reference to non-applied patch
  - Use %bcond_without for conditional compilation


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Jerry James <loganjerry@gmail.com> - 0-0.1.20080613svn
changelog:
  - Update to 13 Jun 2008 snapshot
  - Fix broken URLs
  - Include instructions on regenerating the tarball
  - Conditionalize the gcj bits


author: Jerry James <loganjerry@gmail.com> - 0-0.4.20090319svn
changelog:
  - Update to 19 Mar 2009 snapshot
  - Compress with xz instead of bzip2
  - BR tomcat5, a horrible workaround to solve bz 538868


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0-0.5.20090319svn
changelog:
  - Fix pom filename (Resolves rhbz#655811)
  - Remove tomcat5 BR (not needed anymore)
  - Use new maven plugin names
  - Remove gcj support
  - Few tweaks according to new guidelines
  - Make jars and javadocs versionless


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Ville Skyttä <ville.skytta at iki.fi> 1:1.0-0.20000804r7dev.1jpp
changelog:
  - Change version to 1.0, put revision to release, add Epoch.
  - Don't use included DOM and SAX, require jaxp_parser_impl.
  - Add non-versioned jar symlink.
  - Add shell script.
  - Vendor, Distribution tags.


author: Ville Skyttä <ville.skytta at iki.fi> - 1:1.0-0.20000804r7dev.2jpp
changelog:
  - Rebuild for JPackage 1.5.
  - Fix Group tags.
  - Include non-versioned javadoc symlink.
  - Scripts subpackage.


author: David Walluck <david@jpackage.org> 1:1.0-0.20000804r7dev.5jpp
changelog:
  - add ant conf
  - own non-versioned javadoc symlink
  - Requires: xml-commons-apis
  - use build-classpath
  - macros


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.5.r938
changelog:
  - Dropped gcj_support
  - Updated to latest upstream version
  - Moved shell script to main package and obsoleted script subpackage
  - Updated description
  - Removed xml-commons-apis and jaxp_parser_impl from requires and build requires
  - Removed xml-commons-apis from ant config file


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.8.20100930svn1125
changelog:
  - Updated to latest upstream svn revision
  - Installed pom.xml
  - Added 'net.sf.jtidy:jtidy' to maven depmap
  - Added 'jtidy:jtidy' to maven depmap


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.11-9
changelog:
  - Update to current packaging guidelines
  - Drop old Obsoletes/Provides for junit4 rename
  - Disable test which fails with Java 8


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.3.3-6
changelog:
  - Resolves: CVE-2025-5914
  - Skip compression-level=1 size check on s390x.
  - Related to https://github.com/libarchive/libarchive/issues/1515


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jaroslav Rohel <jrohel@redhat.com> - 0.63.0-18
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Daniel Mach <dmach@redhat.com> - 0.16.1-1
changelog:
  - [module] Implement 'module_hotfixes' conf option to skip filtering RPMs from hotfix repos.
  - [goal] Fix distupgrade filter, allow downgrades.
  - [context] Allow to set module platform in context.
  - [module] Introduce proper modular dependency solving.
  - [module] Platform pseudo-module based on /etc/os-release.
  - [goal] Add Goal::listSuggested().
  - [l10n] Support for translations, add gettext build dependency.


author: Daniel Mach <dmach@redhat.com> - 0.17.0-1
changelog:
  - [conf] Add module_platform_id option.
  - [module] Add ModulePackageContainer class.
  - [module] Add ModulePersistor class.
  - [sack] Module filtering made available in python API
  - [sack] Module auto-enabling according to installed packages


author: Daniel Mach <dmach@redhat.com> - 0.17.1-1
changelog:
  - [module] Solve a problem in python constructor of NSVCAP if no version.
  - [translations] Update translations from zanata.
  - [transaction] Fix crash after using dnf.comps.CompsQuery and forking the process in Anaconda.
  - [module] Support for resetting module state.
  - [output] Introduce wrapper for smartcols.


author: Daniel Mach <dmach@redhat.com> - 0.17.2-2
changelog:
  - [module] Create /etc/dnf/modules.d if it doesn't exist.
  - [module] Forward C++ exceptions to bindings.


author: Daniel Mach <dmach@redhat.com> - 0.18.0-1
changelog:
  - [repo] Implement GPG key import
  - [repo] Introduce Repo class replacing dnf.repo.Repo
  - [context] Fix memory corruption in dnf_context
  - [rhsm] Fix: RHSM don't write .repo file with same content (RhBug:1600452)
  - [module] Create /etc/dnf/modules.d if it doesn't exist.
  - [module] Forward C++ exceptions to bindings.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.19.0-1
changelog:
  - [query] Reldeps can contain a space char (RhBug:1612462)
  - [transaction] Avoid adding duplicates via Transaction::addItem()
  - Fix compilation errors on gcc-4.8.5
  - [module] Make available ModuleProfile using SWIG
  - [module] Redesign module disable and reset


author: Jaroslav Mracek <jmracek@redhat.com> - 0.19.1-1
changelog:
  - Fix compilation errors on gcc-4.8.5
  - [module] Allow module queries on disabled modules (RhBug:1627081)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.20.0-1
changelog:
  - [module] Report module solver errors
  - [module] Enhance module commands and errors
  - [transaction] Fixed several problems with SWDB
  - Remove unneeded regex URL tests (RhBug:1598336)
  - Allow quoted values in ini files (RhBug:1624056)
  - Filter out not unique set of solver problems (RhBug:1564369)
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - bug 1605274 - DNF crashes on * in installation repository URL
  - Resolves: rhbz#1623383 - dnf.exceptions.ConfigError: Error parsing ...


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-1
changelog:
  - Fix segfault in repo_internalize_trigger (RhBug:1375895)
  - Change sorting of installonly packages (RhBug:1627685)
  - [swdb] Fixed pattern searching in history db (RhBug:1635542)
  - Check correctly gpg for repomd when refresh is used (RhBug:1636743)
  - [conf] Provide additional VectorString methods for compatibility with Python list.
  - [plugins] add plugin loading and hooks into libdnf


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-2
changelog:
  - Add patch Modify-solver_describe_decision-to-report-cleaned-RhBug1486749
  - Add patch swdb-create-persistent-WAL-files-RhBug1640235
  - Add patch Relocate-ModuleContainer-save-hook-RhBug1632518
  - Add patch Test-if-sack-is-present-and-run-save-module-persistor-RhBug1632518


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.3-1
changelog:
  - Permanently disable Python2 build for Fedora 30+
  - Update to 0.22.3
  - Modify solver_describe_decision to report cleaned (RhBug:1486749)
  - [swdb] create persistent WAL files (RhBug:1640235)
  - Relocate ModuleContainer save hook (RhBug:1632518)
  - [transaction] Fix transaction item lookup for obsoleted packages (RhBug: 1642796)
  - Fix memory leaks and memory allocations
  - [repo] Possibility to extend downloaded repository metadata


author: Daniel Mach <dmach@redhat.com> - 0.22.4-1
changelog:
  - Enhance LIBDNF plugins support
  - [repo] Check whether metadata cache is expired (RhBug:1539620,1648274)
  - [sack] Implement dnf_sack_get_rpmdb_version()


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.33.0-1
changelog:
  - Update to 0.33.0
  - Enhance sorting for module list (RhBug:1590358)
  - [DnfRepo] Add methods for alternative repository metadata type and download (RhBug:1656314)
  - Remove installed profile on module enable or disable (RhBug:1653623)
  - Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  - Add support of wild cards for modules (RhBug:1644588)
  - Exclude module pkgs that have conflict
  - Enhance config parser to preserve order of data, and keep comments and format
  - Improve ARM detection
  - Add support for SHA-384
  - Return empty query if incorrect reldep (RhBug:1687135)
  - ConfigParser: Improve compatibility with Python ConfigParser and dnf-plugin-spacewalk (RhBug:1692044)
  - ConfigParser: Unify default set of string represenation of boolean values
  - Fix segfault when interrupting dnf process (RhBug:1610456)
  - Installroot now requires absolute path
  - Support "_none_" value for repo option "proxy" (RhBug:1680272)
  - Add support for Module advisories
  - Add support for xml:base attribute from primary.xml (RhBug:1691315)
  - Improve detection of Platform ID (RhBug:1688462)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Skip invalid key files in "/etc/pki/rpm-gpg" with warning (RhBug:1644040)
  - Enable timestamp preserving for downloaded data (RhBug:1688537)
  - Fix 'database is locked' error (RhBug:1631533)
  - Replace the 'Failed to synchronize cache' message (RhBug:1712055)
  - Fix 'no such table: main.trans_cmdline' error (RhBug:1596540)
  - Fix: skip_if_unavailable=true for local repositories (RhBug:1716313)
  - Add support of modular FailSafe (RhBug:1623128)
  - Add support of DNF main config file in context; used by PackageKit and
    microdnf (RhBug:1689331)
  - Exit gpg-agent after repokey import (RhBug:1650266)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-4
changelog:
  - Fix typo in error message (RhBug:1726661)
  - Update localizations from zanata (RhBug:1689991)
  - Don't disable nonexistent but required repositories (RhBug:1689331)
  - Ignore trailing blank lines of multiline value (RhBug:1722493)
  - Re-size includes map before re-computation (RhBug:1725213)


author: Ales Matej <amatej@redhat.com> - 0.35.5-1
changelog:
  - Update to 0.35.5
  - Make libdnf own its plugin directory (RhBug:1714265)
  - Set priority of dnf.conf.d drop-ins
  - Fix toString() to not insert [] (RhBug:1584442)
  - Fix handling large number of filenames on input (RhBug:1690915)
  - Detect armv7 with crypto extension only on arm version >= 8
  - A new standardized User-Agent field consisting of the libdnf and OS version
    (including the variant) (RhBug:1156007)
  - Add basic countme support (RhBug:1647454)
  - Fix crash in PackageKit (RhBug:1636803)
  - Do not create @System.solv files (RhBug:1707995)
  - Set LRO_CACHEDIR so zchunk works again (RhBug:1739867)
  - Improve detection of extras packages by comparing (name, arch) pair instead
    of full NEVRA (RhBuh:1684517)
  - Improve handling multilib packages in the history command (RhBug:1728637)
  - Repo download: use full error description into the exception text (RhBug:1741442)
  - Properly close hawkey.log (RhBug:1594016)
  - Fix dnf updateinfo --update to not list advisories for packages updatable
    only from non-enabled modules
  - Apply modular filtering by package name (RhBug:1702729)


author: Ales Matej <amatej@redhat.com> - 0.38.1-1
changelog:
  - Update to 0.38.1
  - Change the best option default to false
  - Use more descriptive message when failed to retrieve GPG key (RhBug:1605117)
  - Add removeMetadataTypeFromDownload function to the API
  - Context part of libdnf can now read vars (urlvars) from dirs and environment
  - Throw exception immediately if file cannot be opened
  - Add test when there is no primary metadata in compatible format (RhBug:1744960)
  - Various improvements to countme features
  - Don't abort on rpmdb checksum calculation failure
  - Enable module dependency trees when using set_modules_enabled_by_pkgset() (RhBug:1762314)
  - Resolve problem with --best and search in provides (RhBug:1737469)
  - New method "Query::filterSubject()", replaces Solution::getBestSolution()
  - The Solution class was removed
  - Add query argument into get_best_query and get_best_solution
  - Add module reset function into dnf_context
  - Add method to get all repository metadata locations
  - Catch NoModuleException in case of not existent value was used in persistor (RhBug:1761773)


author: Ales Matej <amatej@redhat.com> - 0.39.1-1
changelog:
  - Update to 0.39.1
  - Report reason how package was excluded (RhBug:1649754)
  - Additional Arm detection improvements (RhBug:1691430)
  - Set skip_if_unavailable for media repos to skip their update (RhBug:1716067)
  - Add support of xml:base for remote and local url in context (RhBug:1734350,1717865)


author: Ales Matej <amatej@redhat.com> - 0.39.1-3
changelog:
  - Add two new query filters: obsoletes_by_priority, upgrades_by_priority (RhBug:1769466)
  - [context] Add wildcard support in dnf_context_repo_set_data (RhBug:1781420)
  - Remove killGpgAgent function (RhBug:1781601)


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Allow excluding packages with "excludepkgs" and globs
  - Make parsing of reldeps more strict (RhBug:1788107)
  - Add expanding solvable provides for dependency matching (RhBug:1534123)
  - DnfRepo: fix module_hotfixes keyfile priority level
  - Add custom exceptions to libdnf interface
  - Port to libmodulemd-2 API (RhBug:1693683)
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug:1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add setter for running kernel protection setting
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Config options: only first empty value clears existing (RhBug:1788154)
  - [conf] Set useful default colors when color is enabled
  - [context] Use installonly_limit from global config (RhBug:1256108)
  - [context] Add API to get/set "install_weak_deps"
  - [context] Adds support for includepkgs in repository configuration.
  - [context] Adds support for excludepkgs, exclude, includepkgs, and disable_excludes in main configuration.
  - [context] Added function dnf_transaction_set_dont_solve_goal
  - [context] Added functions dnf_context_get/set_config_file_path
  - [context] Respect "plugins" global conf value
  - [context] Add API to disable/enable plugins
  - [context] Create new repo instead of reusing old one (RhBug:1795004)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path
  - [context] Support repositories defined in main configuration file


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.48.0-3
changelog:
  - Add log file level main config option (RhBug:1802074)
  - Accept '==' as an operator in reldeps (RhBug:1847946)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Attila Lakatos <alakatos@redhat.com> - 0.1.10-3
changelog:
  - Rebuild due to the following message: libestr-0.1.10-2.el8 has already been built
    resolves: rhbz#2056293


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040450


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Richard Hughes <richard@hughsie.com> - 1.0-1
changelog:
  - New upstream release
  - This fixes the security bug known as CVE-2018-5345
  - Add new API for fwupd
  - Do not encode timezone in generated files
  - Fix countless memory leaks when parsing corrupt files
  - Fix the calculation of the checksum on big endian machines
  - Switch to the Meson buildsystem


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Richard W.M. Jones <rjones@redhat.com> - 8.6-1
changelog:
  - Rebase to ntfs-3g 2021.8.22
  - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
    CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
    CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
    resolves: rhbz#2004490


author: Richard W.M. Jones <rjones@redhat.com> - 8.8-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves: rhbz#2127240 rhbz#2127248
    (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove percent-clean section


author: Neal Gompa <ngompa13@gmail.com> - 1.15.0-1
changelog:
  - Rebased to version 1.15.0
  - Removed patch 20 as it has been upstreamed
  - Disabled patch 12 as need for revised one is in question
  - Updated patch 13 to current tree
  - New tool iscsi-perf


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Christine Caulfield <ccaulfie@redhat.com> - 1.25-1
changelog:
  Rebase to 1.25 for PMTUd fixes
    Resolves: rhbz#2161172

    * Wed Jul 27 2022 Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
    Don't run nozzle_up_down tests, as they don't work in RH CI
    Resolves: rhbz#2024095


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-8
changelog:
  - Suppress documentation in Flatpak builds
    Resolves: rhbz#1896257
  - build gir with non-parallel to avoid strange behavior.


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Karel Zak <kzak@redhat.com> 2.32.1-46
changelog:
  - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
  - fix RHEL-18451 - logger: initialize socket credentials control union
  - fix RHEL-16070 - util-linux: issues in libblkid
  - fix RHEL-6274 - lslogins incorrect account expiration field


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.1.alpha
changelog:
  - New upstream version 0.7alpha.
  - No tarball was uploaded so temporarily use tarball from github.
  - Fixes CVE-2018-14679 libmspack: off-by-one error in the CHM PMGI/PMGL
    chunk number validity checks


author: Richard W.M. Jones <rjones@redhat.com> - 0.7-0.2.alpha.4
changelog:
  - Fix for CVE-2019-1010305
  - Remove "fix" for CVE-2018-14680 as this fix is included in base tar ball.
    resolves: rhbz#1736745, rhbz#1736743


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.13-2
changelog:
  - Use https source URL
  - Drop obsolete spec elements
  - Use license macro
  - Update libusbx-devel build dependency
  - Drop ancient (F15) Obsoletes:
  - Tighten file list


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.1-1
changelog:
  - Fix license in man pages and examples.
  - Add nbdsh(1) man page.
  - Include the signature and keyring even if validation is disabled.
  - Update devel subpackage license.
  - Fix old FSF address in Python tests.
  - Filter Python provides.
  - Remove executable permission on the tar.gz.sig file.
  - Initial release.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.6-2
changelog:
  - Add all upstream patches since 0.9.6 was released.
  - Package the ocaml bindings into a subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-3
changelog:
  - Bump and rebuild to fix releng brokenness.
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-4
changelog:
  - Fix nbdkit dependencies so we're actually running the tests.
  - Add glib2-devel BR so we build the glib main loop example.
  - Add upstream patch to fix test error:
    nbd_connect_unix: getlogin: No such device or address
  - Fix test failure on 32 bit.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.3-1
changelog:
  - resolves: RHEL-16483 - Update to version 4.19.3
  - resolves: RHEL-11361
              - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-2228  - Logging Format Enhancement
  - resolves: RHEL-1965  - Fix smbget issues with DFS shares
  - resolves: RHEL-2108  - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-2
changelog:
  - Fix error in PREIN scriptlet in rpm package samba-common
  - related: RHEL-16483 - Update to version 4.19.4


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1010722 - Split out a samba-winbind-modules package.


author: Andreas Schneider <asn@redhat.com> - 4.1.0-2
changelog:
  - resolves: #1018856 - Fix installation of pam_winbind after upgrade.
  - related: #1010722 - Split out a samba-winbind-modules package.
  - related: #985609


author: Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: Andreas Schneider <asn@redhat.com> - 4.1.3-1
changelog:
  - Update to Samba 4.1.3.
  - resolves: #1039454 - CVE-2013-4408.
  - resolves: #1039500 - CVE-2012-6150.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-0.3.rc2
changelog:
  - resolves: #1174412 - Build VFS Ceph module.
  - resolves: #1169067 - Move libsamba-cluster-support.so to samba-libs package.
  - resolves: #1016122 - Move smbpasswd to samba-common package.


author: Michael Adam <madam@redhat.com> - 4.2.0-0.2.rc3
changelog:
  - Improve dependencies of vfs-glusterfs and vfs-cephfs.
  - Remove unused python_libdir.
  - Fix malformed changelog entries.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-2
changelog:
  - Fix the AD build.
  - Create samba-client-libs subpackage.
  - Fix multiarch issues by splitting the samba-common package.


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-5
changelog:
  - Require samba-common-tools in samba package
  - Require samba-common-tools in samba-client package
  - resolves: #1215631 - /usr/bin/net moved to samba-common-tools but the package is not required by samba


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-7
changelog:
  - Fix LSASD daemon
  - resolves: #1217346 - FreeIPA trusts to AD broken due to Samba 4.2 failure to run LSARPC pipe externally


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-8
changelog:
  - Fixes: #1219832: Samba 4.2 broke FreeIPA trusts to AD
  - Remove usage of deprecated API from gnutls


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1227911 - Enable tar support for smbclient
  - resolves: #1234908 - Own the /var/lib/samba directory
  - Enable hardened build


author: Guenther Deschner <gdeschner@redhat.com> - 4.3.3-0
changelog:
  - Update to Samba 4.3.3
  - resolves: #1292069
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1
                  memory allocation


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.0-0.7.rc4
changelog:
  - Update to Samba 4.4.0rc4
  - resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.2-1
changelog:
  - Update to Samba 4.4.2, fix badlock security bug
  - resolves: #1326453 - CVE-2015-5370
  - resolves: #1326453 - CVE-2016-2110
  - resolves: #1326453 - CVE-2016-2111
  - resolves: #1326453 - CVE-2016-2112
  - resolves: #1326453 - CVE-2016-2113
  - resolves: #1326453 - CVE-2016-2114
  - resolves: #1326453 - CVE-2016-2115
  - resolves: #1326453 - CVE-2016-2118


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-3
changelog:
  - auth/credentials: Always set the the realm if we set the principal from the ccache
  - resolves: #1430761 - credentials_crb5: use gss_acquire_cred for client-side GSSAPI use case


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-4
changelog:
  - Export arcfour_crypt_blob to Python as samba.crypto.arcfour_encrypt
  - Makes possible to run trust to AD in FreeIPA in FIPS mode


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.5.rc1
changelog:
  - Convert more rpc modules to python3
  - Explicitly specify Python artifacts in the spec to be able to catch unpackaged ones
  - Split 'make test' Python code into separate python2-samba-test/python3-samba-test sub-packages
  - Remove embedded python2-dns version, require python{2,3}-dns instead


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.6.rc1
changelog:
  - Use Python 2 explicitly for samba-tool and other Python-based tools
  - Install samba.service as it is required for the AD DC case


author: Guenther Deschner <gdeschner@redhat.com> - 4.7.0-12
changelog:
  - Update to Samba 4.7.0
  - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-13
changelog:
  - Move /usr/lib{64,}/samba/libdsdb-garbage-collect-tombstones-samba4.so to samba-dc-libs
  - Rebuild in rawhide against new krb5 1.16 and docbook-xml


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-18
changelog:
  - Force samba-dc to use the same libldb version as LDB modules compiled
  - resolves: #1507420 - LDB / Samba module version mismatch


author: Guenther Deschner <gdeschner@redhat.com> - 4.8.0-7
changelog:
  - resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057
  - resolves: #1555112 - Update to Samba 4.8.0


author: Petr Viktorin <pviktori@redhat.com> - 4.8.3-2
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Change unversioned python macros to python2
  - Disable gluster temporarily


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1754575 - Avoid overlinking with librt and libpthread
  - resolves: #1755440 - Fix forest trusts enumeration
  - resolves: #1755445 - Fix CUPS username/password authentication with smbspool


author: Andreas Schneider <asn@redhat.com> - 4.11.2-1
changelog:
  - resolves: #1754409 - Rebase to Samba version 4.11.2
  - resolves: #1776312 - Winbind is not restarted on upgrade
  - resolves: #1764469 - Fix CVE-2019-10218
  - resolves: #1746241 - Fix CVE-2019-10197
  - resolves: #1710980 - Add support for KCM ccache in pam_winbind


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Andreas Schneider <asn@redhat.com> - 4.12.3-0
changelog:
  - resolves: #1817557 - Rebase to version 4.12.3
  - resolves: #1813833 - Fix 'net ads join createupn='


author: Andreas Schneider <asn@redhat.com> - 4.12.3-1
changelog:
  - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
  - resolves: #1842844 - Fix GnuTLS priority list for TLS connections


author: Isaac Boukris <iboukris@redhat.com> - 4.12.3-4
changelog:
  - resolves: #1850980 - Add "additional dns hostname" to keytab
  - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option


author: Andreas Schneider <asn@redhat.com> - 4.12.3-5
changelog:
  - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
  - resolves: #1792553 - Fix 'net ads join createcomputer=OU'


author: Andreas Schneider <asn@redhat.com> - 4.12.3-7
changelog:
  - resolves: #1855711 - Fix 'require_membership_of' documentation in
                         pam_winbind manpage


author: Andreas Schneider <asn@redhat.com> - 4.12.3-9
changelog:
  - related: #1817557 - Move DECRPC mdssvc data files to correct package
  - resolves: #1856676 - Fix lookuprids in winbind


author: Andreas Schneider <asn@redhat.com> - 4.13.2-1
changelog:
  - resolves: #1878109 - Rebase Samba to version 4.13.2
  - resolves: #1872833 - Add samba-winexe subpackage
  - resolves: #1891688 - Fix CVE-2020-14323
  - resolves: #1892633 - Fix CVE-2020-14318
  - resolves: #1892639 - Fix CVE-2020-14383
  - resolves: #1879835 - Fix CVE-2020-1472
  - resolves: #1888990 - Update smb.conf manpages to describe how to apply
                         config changes.
  - resolves: #1869702 - Fix %U substitution for 'valid users' option
  - resolves: #1818038 - Improve FIPS compliance


author: Andreas Schneider <asn@redhat.com> - 4.13.2-2
changelog:
  - related: #1869702 - Fix spoolss crash
  - resolves: #1896736 - Fix name lookups of FreeIPA users
  - resolves: #1899113 - Fix DFS links


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-3
changelog:
  - resolves: rhbz#2019662 - Fix CVE-2016-2124
  - resolves: rhbz#2019668 - Fix CVE-2021-23192
  - resolves: rbhz#2019674 - Fix CVE-2020-25717


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.2-1
changelog:
  - resolves: rhbz#2013596 - Rebase to version 4.15.2
  - resolves: rhbz#1999294 - Remove noisy error message in winbindd
  - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                             with one-way trusts
  - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Steve Dickson <steved@redhat.com> 2.3.3-59
changelog:
  - Covscan Scan: Wrong Check of Return Value (bz 2151966)
  - Covscan Scan: Clang (experimental) (bz 2151971)


author: Scott Mayhew <smayhew@redhat.com> 2.3.3-61
changelog:
  - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422)
  - gssd: do not use krb5_cc_initialize (RHEL-62422)


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Phil Sutter <psutter@redhat.com> [1.1.5-5.el8]
changelog:
  - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754]
  - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478]
  - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478]


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.0.0-1
changelog:
  - Update to upstream 2.0.0
  - Fixes the following CVEs plus others
  - CVE-2017-6440 CVE-2017-6439 CVE-2017-6438 CVE-2017-6437 CVE-2017-6436
  - CVE-2017-6435 CVE-2017-5836 CVE-2017-5835 CVE-2017-5834 CVE-2017-5545
  - CVE-2017-5209


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: kwizart < kwizart at gmail.com > - 0.2.3-2
changelog:
  - Rename binding-python to python
  - Add Requires: gecko-libs >= %{gecko_version}
  - Fix some descriptions
  - Add plugin-webkit package


author: kwizart < kwizart at gmail.com > - 0.2.3-3
changelog:
  - Move proxy.h to libproxy/proxy.h
    This will prevent it to be included in the default include path
  - Split main to libs and util and use libproxy to install all


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Nicolas Chauvet <kwizart@fedoraproject.org> - 0.3.1-1
changelog:
  - Update to 0.3.1
  - Avoid dependecies on -python and -bin subpackages
  - Create -networkmanager sub-package.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 0.4.4-1
changelog:
  - Update to 0.4.4
  - Removed install workarounds (fixed upstream)
  - Removed patches (fixed upstream)
  - Moved -python to noarch
  - Downgrade cmake requirement (upstream change)
  - Disabled perl bindings
  - Run tests


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.5-2
changelog:
  - Update to 0.4.5
  - Disable mozjs on fedora >= 15
  - Disable webkit
  - Add libproxy bootstrap option to disable modules.


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.6-3
changelog:
  - Fix mozjs/webkit obsoletion - rhbz#656849
  - Workaround unreliable Version field in pkg-config - rhbz#656484


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.7-0.1svn20110412
changelog:
  - Update to 0.4.7 svn20110412
  - Add support for webkitgtk3
  - Add support for xulrunner 2.0
  - fix #683015 - libproxy fails with autoconfiguration
  - fix #683018 - libproxy needs BR: NetworkManager-glib-devel  (f14)
  - Manually fix libproxy-1.0.pc version field - #664781 / #674854


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Dan Winship <danw@redhat.com> - 0.4.11-7
changelog:
  - Fix file descriptor leak (#911066)
  - Fix crash when pacrunner fails (probably because of EMFILE...) (#998232)


author: David King <amigadave@amigadave.com> - 0.4.12-1
changelog:
  - Update to 0.4.12
  - Simplify conditional macros
  - Use isa macro when requiring base package
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Use javascriptcoregtk-4.0
  - Apply an upstream patch to pair new[] with delete[]
  - Fix slowdown in KDE plugin
  - Make the pacrunner subpackage depend on pacrunner (#1171679)
  - Install man page from Debian


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Attila Lakatos <alakatos@redhat.com> - 1.6.1-1
changelog:
  - Rebase to 1.6.1
    resolves: RHEL-12892
  - Fix warnings reported by rpmlint
  - Enable support for zlib/zstd compression and GSSAPI


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2118928 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2118924 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2118920 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134702 CVE-2022-3140 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.4.7.2-15
changelog:
  - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210195 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208509 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 1:6.4.7.2-15.inferit
changelog:
  - Clean up vendor information in aboutdialog (Arkady L. Shane)
  - Translate desktop files (Arkady L. Shane)
  - Added one more location to look for Hamcrest jar
  - Changed vendor to MSVSphere
  - Removed upstream colors from palette
  - Rebuilt for MSVSphere 8.8


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.1-2
changelog:
  - Related: rhbz#639945 pull in review changes
    + redland build-fix
    + replace awk script
    + validate .destop files


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.2-1
changelog:
  - next LibreOffice milestone
  - drop integrated openoffice.org-2.3.0.ooo76649.httpencoding.patch
  - drop integrated workspace.dtardon03.patch
  - drop integrated openoffice.org-3.1.0.ooo61927.sw.ww6.unicodefontencoding.patch
  - drop integrated workspace.impress195.patch
  - drop integrated workspace.srb1.patch
  - drop integrated openoffice.org-3.2.0.ooo106502.svx.fixspelltimer.patch
  - drop integrated openoffice.org-3.3.0.ooo108246.svx.hide-sql-group-when-inactive.patch
  - drop integrated openoffice.org-3.2.0.ooo95369.sw.sortedobjs.patch
  - drop integrated openoffice.org-3.2.0.ooo110142.svx.safercolornames.patch
  - drop integrated openoffice.org-3.3.0.ooo111758.sd.xerror.patch
  - drop integrated openoffice.org-3.2.0.ooo111741.extras.malformed-xml-file.patch
  - drop integrated openoffice.org-3.3.0.ooo112059.sw.avoid-null-ptr-deref.patch
  - drop integrated openoffice.org-3.3.0.ooo100686.wizards.types.not.mediatypes.patch
  - drop integrated workspace.vcl113.patch
  - drop integrated openoffice.org-3.3.0.ooo112384.sw.export.doc.styledoesntexist.patch
  - drop integrated workspace.cmcfixes77.patch
  - drop integrated workspace.vcl114.patch
  - drop integrated openoffice.org-3.3.0.ooo106591.sal.tradcopy.patch
  - drop integrated workspace.vcl115.patch
  - drop integrated workspace.cmcfixes78.patch
  - drop integrated openoffice.org-3.3.0.ooo114012.sd.bada11ychain.patch
  - drop integrated workspace.cmcfixes79.patch
  - drop integrated openoffice.org-3.3.0.ooo114703.vcl.betterlocalize.font.patch
  - drop integrated openoffice.org-3.3.0.rh638185.editeng.cjkctlhtmlsizes.patch
  - drop integrated openoffice.org-3.3.0.rh637738.libgcrypt.addmutex.patch
  - drop integrated openoffice.org-3.2.0.rh632236.writerfilter.cleanup-cell-props.patch
  - drop workspace.gtk3.patch


author: Caolán McNamara <caolanm@redhat.com 3.2.99.3-1
changelog:
  - next Libreoffice milestone
  - drop integrated openoffice.org-2.0.1.rhXXXXXX.extensions.defaulttoevo2.patch
  - drop integrated openoffice.org-2.2.1.ooo7065.sw.titlepagedialog.patch
  - drop integrated openoffice.org-3.2.0.ooo108846.sfx2.qstartfixes.patch
  - drop integrated openoffice.org-3.3.0.ooo107490.cppu.lifecycle.patch
  - drop integrated libreoffice-buildfix.patch
  - drop integrated libreoffice-xdg632229.gnomeshell.patch
  - drop integrated 0001-strcpy-cannot-be-used-with-overlapping-src-and-dest.patch
  - drop integrated 0001-abort-doesn-t-gain-us-anything-here.patch
  - drop integrated 0001-latest-libX11-changed-header-guards.patch


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.3-2
changelog:
  - Resolves: rhbz#610103 exit quickstarter when libs deleted
  - Resolves: rhbz#652695 release desktop in timeout
  - Resolves: rhbz#657541 don't crash during processing of auto. styles
    when joining paragraphs (dtardon)


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.1-1
changelog:
  - release candidate 1
  - drop integrated qstart.dont-forceenabled-on-post-reg-restart.patch
  - drop integrated exit.quickstarter.when.deleted.patch
  - drop integrated 0001-destroydesktop.in.timeout.patch
  - drop integrated openoffice.org-3.3.0.rhbz657541.join-paragraphs.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.2-2
changelog:
  - Resolves: rhbz#663724 fdo32572-sc-dont-double-paste.patch
  - Resolves: rhbz#660342 Undo/Redo crash with postits


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.3-1
changelog:
  - latest version
  - drop integrated 0001-Resoves-rhbz-663857-font-color-missing-C-FAQ-10.3-do.patch
  - drop integrated 0001-Avoid-double-paste-when-pasting-text-into-cell-comme.patch
  - drop integrated 0001-Resolves-rhbz-660342-Undo-Redo-crash-with-postits.patch
  - drop integrated 0001-Resolves-rhbz-666088-clean-up-search-cache-singleton.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  - Related: rhbz#610103 make this even more robust
  - Related: rhbz#672872 cancel gtk file dialog on terminate
  - Resolves: fdo#33509/ooo#62414 fix CTL spelling popup
  - Resolves: rhbz#673819 crash on changing position of header/footer object
  - Resolves: rhbz#670020 crash in slidesorting
  - Resolves: rhbz#676539 handle missing pWindows from xWindows
  - Resolves: rhbz#649310 don't crash deregistering diff. platform ext.
    (dtardon)
  - Resolves: rhbz#666440 don't pushback and process a corrupt extension


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.1-1
changelog:
  - 3.3.1 rc1
  - drop integrated 0001-don-t-pushback-and-process-a-corrupt-extension.patch
  - drop integrated libreoffice-fdo32561.comphelper.patch
  - drop integrated 0001-Related-rhbz-610103-more-woes-on-rpm-upgrade-vs-rpm-.patch
  - drop integrated 0001-Resolves-rhbz-673819-crash-on-changing-position-of-d.patch
  - drop integrated 0001-rhbz-666440-don-t-pushback-and-process-a-corrupt-extension.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-3
changelog:
  - Resolves: rhbz#681159 crash in writer
  - Resolves: rhbz#672818 crash in writer
  - Resolves: fdo#33701 ensure node outlives path
  - Resolves: rhbz#681738 crash on writing config post-main


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-8
changelog:
  - Related: rhbz#684477 make sure this is thread safe
  - Resolves: rhbz#684620 crash with NULL pTableBox


author: Caolán McNamara <caolanm@redhat.com> 3.3.2.2-1
changelog:
  - latest version
  - drop integrated 0001-Resolves-fdo-33701-ensure-node-outlives-path.patch
  - drop integrated 0001-valgrind-don-t-leave-an-evil-thread-running-after-ma.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-1
changelog:
  - 3.4 beta1
  - drop openoffice.org-1.9.123.ooo53397.prelinkoptimize.desktop.patch
    in favour of ooosplash
  - drop openoffice.org-2.2.0.gccXXXXX.solenv.javaregistration.patch
    because components are passively registered now
  - drop integrated openoffice.org-3.1.0.ooo102061.sc.cellanchoring.patch
  - drop integrated turn-script-providers-into-extensions.patch
  - drop integrated 0001-tidy-this-up-and-don-t-bail-out-on-mislength-records.patch
  - drop integrated 0001-free-ctxt-after-taking-lastError-details.patch
  - drop integrated 0001-Removed-suspect-hack.-Cursor-on-post-it-now-scrolls-.patch
  - drop integrated libreoffice-gcc4.6.0.patch
  - drop integrated 0001-fexceptions-fexceptions.patch
  - drop integrated 0001-Related-rhbz-672872-cancel-gtk-file-dialog-on-deskto.patch
  - drop vbahelper.visibility.patch
  - drop integrated 0001-Resolves-fdo-33509-i62414-out-by-one-breaks-CTL-spel.patch
  - drop integrated 0001-Resolves-rhbz-670020-crash-in-slidesorting.patch
  - drop integrated 0001-Resolves-rhbz-676539-handle-missing-pWindows-from-xW.patch
  - drop integrated 0001-Resolves-fdo-33750-i94623-use-optimal-border-width-w.patch
  - drop integrated 0001-rhbz-649310-don-t-crash-deregistering-diff.-platform.patch
  - drop integrated 0001-Resolves-rhbz-674330-dereference-of-NULL-mpBase.patch
  - drop integrated 0001-rhbz-678284-Get-correct-current-position-when-shift-page-up-and-.patch
  - drop integrated 0001-Resolves-rhbz-681159-bandaid-for-crash.patch
  - drop integrated 0001-Resolves-rhbz-672818-bandaid-for-crash-in-SwTxtNode-.patch
  - drop integrated 0001-install-high-resolution-icons.patch
  - drop integrated 0001-Resolves-rhbz-682716-pa-IN-isn-t-handled-by-fontconf.patch
  - drop integrated 0001-Related-rhbz-684477-make-sure-this-is-thread-safe.patch
  - drop integrated 0001-Resolves-rhbz-682621-better-resizing-of-overtall-gly.patch
  - drop integrated 0001-Resolves-rhbz-684620-crash-with-NULL-pTableBox.patch
  - drop integrated libreoffice-fdo33947.sd.print.crash.patch
  - drop integrated 0001-add-cairo_ft_font_face_create_for_pattern-wrapper.patch
  - drop integrated 0001-Related-rhbz-680460-reorganize-this-to-make-it-inher.patch
  - drop integrated 0001-Related-rhbz-680460-don-t-bother-with-an-interim-Fon.patch
  - drop integrated 0001-Resolves-rhbz-680460-honour-lcdfilter-subpixeling-et.patch
  - drop integrated 0001-Cut-Gordian-Knot-of-who-owns-the-font-options.patch
  - drop integrated 0001-beware-of-invalidated-iterator.patch
  - drop integrated rhbz680766.fix-mdds-crash.patch
  - drop integrated 0001-Resolves-rhbz-684580-X-and-strike-through-escapes-ra.patch
  - drop integrated 0001-set-mime-types-on-flat-xml-filters.patch
  - drop integrated 0001-add-flat-xml-types-to-.desktop-files-etc.patch
  - drop integrated libreoffice-fdo31271.icu.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-2
changelog:
  - Resolves: rhbz#695509 crash in RefreshDocumentLB
  - bubble down configure test findings on visibility


author: David Tardon <dtardon@redhat.com> 3.3.99.4-1
changelog:
  - 3.4 beta4
  - drop integrated 0001-Removed-duplicate-code-block-mis-merge-prolly.patch
  - drop integrated 7de0b88ce2dd932915894385b54be1897d5ee053.zip


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-4
changelog:
  - Resolves: rhbz#710556 't crash on missing graphics .pptx export
  - Resolves: rhbz#652604 better survive exceptions in autorecovery


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-5
changelog:
  - Resolves: rhbz#699909 crash in export of .doc in lcl_getField
  - Resolves: fdo#37584 Make a real copy of the text
  - Resolves: rhbz#709503/fdo#37668 bitwise operations on signed values


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-1
changelog:
  - 3.4.1 RC1
  - drop integrated 0001-Resolves-rhbz-707317-avoid-crash-in-getRowSpan.patch
  - drop integrated 0001-Resolves-rhbz-710004-band-aid-for-immediate-crash-in.patch
  - drop integrated 0001-Resolves-rhbz-710556-don-t-crash-on-missing-graphics.patch
  - drop integrated 0001-Resolves-rhbz-699909-crash-in-export-of-.doc-in-lcl_.patch
  - drop integrated 0001-fdo-37584-Make-a-real-copy-of-the-text-where-to-coun.patch
  - drop integrated 0001-Resolves-fdo-37668-bitwise-operations-on-signed-numb.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.1.1-4
changelog:
  - Related: rhbz#711087 band aid for crash in sc undo
  - Resolves: rhbz#714338 add a metapackage to install standard bits


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-5
changelog:
  - Resolves: rhbz#714781 add Persian langpack
  - Resolves: rhbz#667082 do not crash importing section containing just
    an empty paragraph


author: David Tardon <dtardon@redhat.com> - 3.4.2.1-1
changelog:
  - 3.4.2 rc1
  - drop 0001-bad-merge-fix-to-enable-extensions-to-build-again.patch
  - drop 0001-fix-regression-in-SvGlobalName-operator.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.2.1-2
changelog:
  - Rebuild (poppler-0.17.0), add libreoffice-poppler-0.17.0.patch
    seeing as the API changed for some reason or other


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-2
changelog:
  - Resolves: rhbz#733564 graphite2 now packaged into fedora
  - Related: fdo#37195 migrationoo3 not registered


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-11
changelog:
  - Resolves: rhbz#738133 fix bn discard string
  - Resolves: fdo#35513 avoid crash while processing incorrect print range


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-3
changelog:
  - Related: fdo#42534 0001-Related-i58612-don-t-crash-anyway.patch
  - Resolves: fdo#42749 KDE oxygen theme and scrollbars


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-6
changelog:
  - Resolves: rhbz#761009 IFSD_Equal is asymmetrical
  - Resolves: rhbz#767708 write to mmap'ed file w/o disk space: SIGBUS


author: David Tardon <dtardon@redhat.com> - 3.4.99.1-1
changelog:
  - 3.5.0 beta1
  - drop integrated 0001-Related-fdo-37195-migrationoo3-not-registered.patch
  - drop integrated 0001-Related-i58612-don-t-crash-anyway.patch
  - drop integrated 0001-Related-rhbz-652604-better-survive-exceptions-thrown.patch
  - drop integrated 0001-Related-rhbz-702833-addEventListener-without-removeE.patch
  - drop integrated 0001-Related-rhbz-711087-band-aid.patch
  - drop integrated 0001-Related-rhbz-718976-crash-in-SwTxtSizeInfo-GetMultiC.patch
  - drop integrated 0001-Related-rhbz-730225-avoid-segv-in-ld-this-was-set-to.patch
  - drop integrated 0001-Related-rhbz-753201-fedora-ant-java-1.5.0-gcj-won-t-.patch
  - drop integrated 0001-Resolves-fdo-32665-handle-that-FreeSerif-lacks-some-.patch
  - drop integrated 0001-Resolves-rhbz-693265-fix-crash-from-unhandled-except.patch
  - drop integrated 0001-Resolves-rhbz-695509-crash-in-RefreshDocumentLB.patch
  - drop integrated 0001-Resolves-rhbz-713154-pdf-export-dialog-too-tall-to-f.patch
  - drop integrated 0001-Resolves-rhbz-715549-use-fontconfig-s-detected-forma.patch
  - drop integrated 0001-Resolves-rhbz-738255-avoid-crash-on-NULL-pointer.patch
  - drop integrated 0001-Resolves-rhbz-751290-KDE-black-on-dark-tooltips.patch
  - drop integrated 0001-add-Oracle-Java-1.7.0-recognition.patch
  - drop integrated 0001-avoid-using-com.sun.org-apis.patch
  - drop integrated 0001-bubble-down-configure-test-findings-on-visibility.patch
  - drop integrated 0001-fix-horizontal-scrollbars-with-KDE-oxygen-style-bnc-.patch
  - drop integrated 0001-gtk3-fix-cairo-canvas-crash-for-non-X-or-svp-backend.patch
  - drop integrated 0001-helgrind-Related-rhbz-655686-get-order-of-shutdown-c.patch
  - drop integrated 0001-rhbz-667082-do-not-crash-importing-section-containin.patch
  - drop integrated 0001-rhbz-702635-set-correct-page-number-when-exporting-s.patch
  - drop integrated Backport-reading-AES-encrypted-ODF-1.2-documents.patch
  - drop integrated gdb-pretty-printers.patch
  - drop integrated kde4configure.patch
  - drop integrated libreoffice-ppc64.patch
  - drop integrated openoffice.org-3.3.0.ooo108637.sfx2.uisavedir.patch
  - drop integrated openoffice.org-3.3.0.ooo113273.desktop.resolvelinks.patch
  - drop integrated vbahelper.visibility.patch
  - drop libreoffice-testtools subpackage, because testtool has been
    removed by upstream


author: David Tardon <dtardon@redhat.com> - 3.4.99.2-1
changelog:
  - 3.5.0 beta2
  - drop integrated 0001-Resolves-rhbz-761009-IFSD_Equal-is-asymmetrical.patch
  - drop integrated 0001-Resolves-rhbz-767708-avoid-SIGBUS-writing-to-overcom.patch
  - drop integrated 0001-force-gbuild-stage-for-CustomTargets.patch
  - drop integrated 0001-these-translations-do-already-exist-in-translations-.patch
  - drop integrated 0001-Fix-typo-and-clean-up.patch
  - use system mysql-connector-c++


author: David Tardon <dtardon@redhat.com> - 3.4.99.3-1
changelog:
  - 3.5.0 beta3
  - drop integrated 0001-fix-syntactic-error.patch
  - drop integrated 0001-gcc-trunk-fix-error-unable-to-find-string-literal-op.patch
  - drop integrated 0001-gcc-trunk-avoid-confusion.patch
  - drop integrated 0001-workaround-for-LO-namespace-pollution-breaking-KDE4-.patch
  - drop integrated 0001-smath-does-not-handle-accents-in-MathML.patch
  - Resolves: rhbz#533318 smath does not handle accents in MathML
  - Resolves: rhbz#771108 English menu in writer despite installation of
    libreoffice-langpack-de


author: David Tardon <dtardon@redhat.com> - 3.5.0.1-1
changelog:
  - 3.5.0 rc1
  - drop integrated 0001-workaround-internal-compiler-error-with-gcc-4.7.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-these-are-not-string-literal-op.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-this-is-not-string-literal-oper.patch
  - drop integrated 0001-Revert-fast_merge-fix-mis-merge-of-first-module-s-st.patch
  - drop integrated 0001-fix-writing-of-strings-from-the-first-module.patch
  - drop integrated 0001-refactor-slightly-to-avoid-link-problems-with-gcc-4..patch


author: David Tardon <dtardon@redhat.com> - 3.5.0.3-1
changelog:
  - 3.5.0 rc3
  - Resolves: rhbz#786328 add nlpsolver subpackage
  - split legacy binary filters into subpackage


author: Stephan Bergmann <sbergman@redhat.com> - 3.5.0.3-2
changelog:
  - junit4 -> junit
  - Resolves: rhbz#788042 skip splashscreen with quickstarter
  - with split binfilter we need fix for fdo#43644


author: Caolán McNamara <caolanm@redhat.com> - 3.5.0.3-4
changelog:
  - ensure gdb .py files have the same timstamps so that multilib
    .pyc's and .pyo's have the same content (timestamp in binary cache)


author: David Tardon <dtardon@redhat.com> - 3.5.1.1-1
changelog:
  - 3.5.1 rc1
  - drop 0001-Resolves-fdo-43644-survive-registered-but-unavailabl.patch
  - drop 0001-Resolves-rhbz-789622-Adapt-SDK-to-changed-paths-in-L.patch
  - drop 0001-Fix-fdo-45177-avoid-linked-undo-for-the-while.patch
  - drop 0001-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - drop binfilter-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - Resolves: fdo#45177 avoid linked undo crash
  - Fix some apparent misuses of RTL_CONSTASCII_USTRINGPARAM (cherry-picked from
    upstream libreoffice-3-5 branch)


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-2
changelog:
  - Resolves: rhbz#788045 swriter --help doesn't show help
  - Resolves: rhbz#798667 missing .desktop icons


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-3
changelog:
  - Resolves: rhbz#799628 crash with chewing IM with g3g
  - Resolves: rhbz#799525 put flat odf mimetypes into xsltfilter.desktop
  - Resolves: rhbz#800272 complain about unknown commandline options


author: David Tardon <dtardon@redhat.com> - 3.5.3.1-1
changelog:
  - 3.5.3 rc1
  - drop integrated 0001-Introduced-SystemShellExecuteFlags-URIS_ONLY.patch
  - drop integrated 0001-Simplify-code-and-use-proper-register-names-for-linu.patch
  - drop integrated 0001-resolved-rhbz-813280-the-current-document-is-not-alw.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.5.3.2-3
changelog:
  - Resolves: rhbz#805743 a11y crash in impress/draw
  - Resolves: rhbz#813202 opengl slide transitions still a bit
    problematic in Fedora 17


author: David Tardon <dtardon@redhat.com> - 3.5.3.2-4
changelog:
  - Resolves: rhbz#820439 KDE export dialog broken for most formats
  - Resolves: fdo#49365 Libreoffice fails to start on second screen with
    gtk vcl plugin
  - Resolves: rhbz#809019 Impress thinks a machine with 2 monitors in
    clone mode is multihead


author: David Tardon <dtardon@redhat.com> - 3.5.4.1-1
changelog:
  - 3.5.4 rc1
  - drop integrated 0001-do-not-prepend-n-twice-it-confuses-KFileDialog-rhbz-.patch
  - drop integrated 0001-incrementing-index-twice-in-one-run-seems-wrong.patch
  - drop integrated 0001-fdo-49365-correctly-map-monitor-index-back-to-screen.patch
  - drop integrated 0001-rhbz-809019-count-mirrored-monitors-as-one.patch


author: David Tardon <dtardon@redhat.com> - 3.5.5.1-1
changelog:
  - 3.5.5 rc1
  - drop integrated 0001-make-hsqldb-build-with-java-1.7.patch
  - drop integrated 0001-Related-rhbz-799628-crash-with-chewing-IM-with-g3g.patch
  - drop integrated 0001-silence-SolarMutex-not-locked-spew.patch
  - drop integrated 0001-gcc-trunk-fix-unable-to-find-string-literal-operator.patch
  - drop integrated 0001-ppc-yyinput-returns-a-int-truncating-to-unsigned-cha.patch
  - drop integrated 0001-Resolves-rhbz-826609-rhbz-820554-fix-smoketest-on-pp.patch


author: David Tardon <dtardon@redhat.com> - 3.6.0.0-1
changelog:
  - 3.6.0 beta2
  - drop integrated 0001-move-binfilter-mime-types-into-extra-.desktop-file.patch
  - drop integrated 0001-Resolves-rhbz-788042-skip-splashscreen-with-quicksta.patch
  - drop integrated libreoffice-ensure-non-broken-xml-tree.patch
  - drop integrated 0001-preserve-timestamps-for-.py-files.patch
  - drop integrated 0001-Resolves-rhbz-788045-swriter-help-etc-doesn-t-show-h.patch
  - drop integrated 0001-Resolves-rhbz-799525-put-flat-odf-mimetypes-in-xsltf.patch
  - drop integrated 0001-Resolves-rhbz-800272-complain-about-unknown-command-.patch
  - drop integrated 0001-Resolves-rhbz-806663-SlideshowImpl-can-outlive-SdMod.patch
  - drop integrated 0001-desktop-do-not-complain-about-soffice-command-line-o.patch
  - drop integrated 0001-Resolves-fdo-48096-torn-off-popups-trigger-keyboard-.patch
  - drop integrated 0001-fdo-38088-better-CSV-import-default-separators.patch
  - drop integrated 0001-save-register-arguments-first.patch
  - drop integrated 0001-do-not-let-gcc-use-registers-we-are-setting-ourselve.patch
  - drop integrated 0001-wrong-types-used-here-breaks-64bit-bigendian.patch
  - drop integrated 0001-Resolves-rhbz-805743-a11y-call-doShow-after-we-have-.patch
  - drop integrated 0001-Resolves-fdo-49849-implement-Unicode-6.1-hebrew-line.patch
  - drop integrated 0001-use-ure-instead-of-ure-link.patch
  - drop broken 0001-fix-setting-of-paper-tray-from-print-dialog-fdo-4393.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.1-2
changelog:
  - Resolves: rhbz#846775 Clipboard must be disposed before selection
  - Resolves: rhbz#842292 crash in scrolling multiselection in draw


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.2-2
changelog:
  - Related: rhbz#850709 hunspell en-US available standalone so
    make English langpack require hunspell-en and core just
    bare bones hunspell-en-US


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.3.1-1
changelog:
  - 3.6.3 rc1
  - drop integrated 0001-Resolves-rhbz-855972-crash-on-switching-to-outline-v.patch
  - drop integrated 0001-fdo-52022-Simple-LargeControlPoints-actually-can-hav.patch
  - drop integrated 0001-fdo-46071-Do-not-hide-windows-based-on-nil-Visible-p.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.0.3-5
changelog:
  - make evolution 3.6 work with address book
  - Resolves: rhbz#910176 cannot select directory with gtk folder picker
  - fixes for building against Boost 1.53.0


author: Eike Rathke <erack@redhat.com> - 1:4.0.0.3-8
changelog:
  - do not access vector elements beyond size, rhbz#847519 related
  - Resolves: rhbz#742780 let make OPT_FLAGS=... override SDK flags
  - Resolves: rhbz#907933 crash on removing second last para


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.1.2-2
changelog:
  - Related: rhbz#902884 check for NULL GetSelectedMasterPage
  - Resolves: fdo#61241 force area page to size itself
  - Resolves: fdo#61656 use order and orientation combobox
  - Resolves: fdo#56031 RSID attr changes drop content changes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.0.0-5.beta1
changelog:
  - Resolves: rhbz#968892 block entire grapheme together for glyph fallback
  - Related: rhbz#968892 discard impossible languages for glyph fallback


author: David Tardon <dtardon@redhat.com> - 1:4.1.0.0-9.beta2
changelog:
  - Resolves: rhbz#971321 failing tests on ppc and s390
  - Resolves: rhbz#974062 incorrect rendering of text in outline blocks in
    Impress


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: David Tardon <dtardon@redhat.com> - 1:4.1.1.2-1
changelog:
  - 4.1.1 rc2
  - Related: rhbz#895690 Always try to do a mount when opening a file via GIO
  - Resolves: rhbz#998136 wrong index to gWidgetData
  - Resolves: rhbz#998046 store last size/position of the base windows


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-2
changelog:
  - Resolves: rhbz#1013480 crash in EditLineList::operator[]
  - Resolves: rhbz#1014010 crash on start up
  - Resolves: rhbz#1013844 encrypted OOo 1.0 files don't reopen


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-3
changelog:
  - Resolves: rhbz#1015281 crash on clicking custom animation
  - Resolves: rhbz#996162 crash with no bullet font


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-4
changelog:
  - Resolves: rhbz#1001768: fix various a11y deadlocks and crashes
  - Resolves: rhbz#1016022 fix cut from impress and paste to writer
  - Resolves: rhbz#1003179 fix AUTOFMT related crashes in Writer Undo


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.3.1-2
changelog:
  - Resolves: rhbz#1020712 wrong default CTL font shown in editengine
  - Resolves: rhbz#919070 display -1 means span all screens


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-2
changelog:
  - Resolves: fdo#67725 unoidl::AggregatingCursor must wrap modules for aggregation
  - Resolves: rhbz#1021915 force menubar menus to be up/down only
  - Resolves: rhbz#1025201 Incorrect rendering of Devanagari short i


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-5
changelog:
  - Resolves: rhbz#1031989 Accept --pt in addition to deprecated -pt
  - Related: rhbz#1014990 valgrind reports uninitialized variables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.0.0-2.beta2
changelog:
  - update to 4.2.0 beta2
  - Related: rhbz#1032774 bodge around reported NULL
  - Resolves: rhbz#1035092 no shortcut key for Italian 'Tools' menu
  - Resolves: rhbz#912529 Kerkis SmallCaps shown instead of Kerkis Regular
  - Resolves: rhbz#1038189 refresh printer list when print dialog launched
  - openssl no longer required to build


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-2
changelog:
  - split LibreLogo into a separate subpackage
  - create a metapackage depending on all subpackages containing filters,
    for use of packages like unoconv


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-3
changelog:
  - Resolves: rhbz#1017379 libreoffice impress imports animated motion paths
    incorrectly from powerpoint
  - Resolves: fdo#33852 Custom animation (Motionpath Left) isn't being
    imported correctly from .ppt


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.2.1-5
changelog:
  - Related: rhbz#1065807 wizards should find the right wizards subdir
    of Template_internal, who knew this stuff was so fragile


author: Michael Stahl <mstahl@redhat.com> - 1:4.2.2.1-6
changelog:
  - Resolves: rhbz#988516: DOCX import: fix context stack when importing header
  - Resolves: rhbz#1072553: Fix deselection problems of template view
  - Resolves: rhbz#1072607: fix crash in SvxRuler::MouseMove()
  - Resolves: rhbz#1043551: sw: avoid division-by-0 in Text Grid painting code
  - RTF import: import field parameters
  - RTF import: fix spurious page breaks at doc end


author: David Tardon <dtardon@redhat.com> - 1:4.2.3.2-2
changelog:
  - Resolves: rhbz#1080196 mdds/multi_type_vector_itr.hpp update_node():
    soffice.bin killed by SIGSEGV


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.3.3-2
changelog:
  - Resolves: rhbz#1081176 don't jump to cursor pos when we don't want to
  - Related: rhbz#1085916 kde startup woes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-2
changelog:
  - every 2nd print job is incorrectly flagged as failed
  - Related: rhbz#1088625 PresenterPaintManager seen as NULL


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-3
changelog:
  - sometimes tables in impress don't resize when adding rows
  - Resolves: fdo#71423 crash while editing Impress tables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-6
changelog:
  - Resolves: fdo#37130 use 10pt Default style font for comments
  - Resolves: fdo#60040 crash after undoing master page
  - vertically center printout when including comments


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-6
changelog:
  - center current slide after changing zoom
  - add a status bar icon to fit slide to window
  - Related: fdo#50697 reset the cache timeout on GetGraphic


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-9
changelog:
  - Resolves: rhbz#1096486 avoid access to nonexisting parent
  - Resolves: rhbz#1096295 hard to distinguish slides in slide pane


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-14
changelog:
  - render smart-art with a vector format so it can be scaled nicely
  - fix leak on pasting metafiles into office
  - fix leak on pasting draw items into office
  - fix another leak on scaling metric items


author: David Tardon <dtardon@redhat.com> - 1:4.3.0.0-9.beta2
changelog:
  - Resolves: rhbz#1105376 FlatODF import/export does not work unless
    libreoffice-xsltfilter is installed


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.1.1-6
changelog:
  - Resolves: rhbz#1131425 move libjawt-using office bean into a subpackage
  - Resolves: rhbz#1125588 port LibreOffice to ppc64le


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.2.2-2
changelog:
  - make brochure printing of impress/draw work out of the box
  - Resolves: rhbz#1133863 fix looping layout


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.3.2-4
changelog:
  - Resolves: fdo#60712 Inherits cell styles in inserting rows/columns
  - implement toggling off removeable master elements with delete
  - Resolves: fdo#78151 change underlying style on toggling bullets on/off in master view


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.4.1-5
changelog:
  - Resolves: rhbz#1164551 we want to ensure that a libjvm.so is available
    but we have no firm interest in which one that is


author: David Tardon <dtardon@redhat.com> - 1:4.4.0.2-2
changelog:
  - Resolves: rhbz#1180114 writerfilter: don't crash on w:customXmlDelRangeStart
    etc.
  - Resolves: rhbz#1175027 fix life cycle of SwConnectionDisposedListener_Impl


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.4.2.2-3
changelog:
  - Resolves: rhbz#1197614 crash when updating extension
  - Resolves: rhbz#1134285 redundant user/password request for WebDAV access


author: Bastien Nocera <bnocera@redhat.com> 1:5.1.0.1-2
changelog:
  - Add GLSL files missing from the package
  - Split up inclusion of latin Serbian files to avoid duplicate listing


author: David Tardon <dtardon@redhat.com> - 1:5.1.0.3-1
changelog:
  - update to 5.1.0 rc3
  - Resolves: rhbz#1168757 Selecting multiple slides is not reflected in Print
    dialog


author: David Tardon <dtardon@redhat.com> - 1:5.1.2.1-1
changelog:
  - update to 5.1.2 rc1
  - split VCL plugins into subpackages
  - rename libreoffice-kde to libreoffice-kde4
  - only recommend fonts
  - remove hard dependency on English spell checker and auto-correction
    rules
  - disable quickstarter
  - move icons and other system-integration stuff to a noarch subpackage
  - disable browser plugin in preparation for its removal in 5.2


author: David Tardon <dtardon@redhat.com> - 1:5.2.0.1-1
changelog:
  - update to 5.1.0 rc1
  - Resolves: rhbz#1343752 wrong radiobutton and checkbutton behavior in
    "view" menu
  - Resolves: rhbz#1349261 do not pull in all variants of english dicts


author: David Tardon <dtardon@redhat.com> - 1:5.2.1.2-2
changelog:
  - Resolves: rhbz#1247399 install public jars according to packaging guidelines
  - Resolves: rhbz#1363874 install LibreOfficeKit headers


author: Caolán McNamara <caolanm@redhat.com> - 1:5.2.2.1-3
changelog:
  - Related: rhbz#1373933 do less on style-updated
  - Related: rhbz#1353069 don't clear XATTR_FILL from in use styles


author: David Tardon <dtardon@redhat.com> - 1:6.0.0.0-1.alpha1
changelog:
  - update to 6.0.0 alpha1
  - update location of appdata files
  - use weak dependencies
  - mark bundled packages


author: Michael Stahl <mstahl@fedoraproject.org> - 1:6.0.0.2-3
changelog:
  - add lots of .abignore files to restrict abipkgdiff to shared objects
    that actually have a stable ABI


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.0.3.2-4
changelog:
  - Resolves: rhbz#1568579 LibreOffice --headless zombie process
  - Related: rhbz#1569331 end should be in terms of unicode chars, not bytes


author: Tomas Orsava <torsava@redhat.com> - 1:6.0.6.1-8
changelog:
  - Resolves: rhbz#1619153 Require the Python interpreter directly instead of
    relying on the package name


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-11
changelog:
  - Resolves: rhbz#1649251 impress webpreview doesn't work without graphicfilter
  - Resolves: rhbz#1648949 fix docx missing date forms


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-20
changelog:
  - Resolves: rhbz#1743958 CVE-2019-9849, etc.
  - Resolves: rhbz#1648281 Junk character gets added when some emojis are inserted


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-6
changelog:
  - Resolves: rhbz#1980800 allow convert to csv to write each sheet to
    separate file
  - Resolves: rhbz#1992695 two style tags where there should be one


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-7
changelog:
  - Resolves: rhbz#2013858 CVE-2021-25633
  - Resolves: rhbz#2014215 CVE-2021-25634
  - Resolves: rhbz#2014209 CVE-2021-25635


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <lautrbach@redhat.com> - 2.9-10
changelog:
  - Close old selabel handle when setting a new one (RHEL-73348)
  - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252)


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use %{_prefix}/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-3
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-4
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Get rid of security_context_t and fix const declarations.
  	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
changelog:
  - Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
  - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts


author: Petr Lautrbach <plautrba@redhat.com> 2.3-8
changelog:
  - selinux.py - use os.walk() instead of os.path.walk() (#1195004)
  - is_selinux_enabled(): drop no-policy-loaded test (#1195074)
  - fix -Wformat errors and remove deprecated mudflap option


author: Petr Lautrbach <plautrba@redhat.com> 2.3-10
changelog:
  - is_selinux_enabled: Add /etc/selinux/config test (#1219045)
  - matchpathcon/selabel_file: Fix man pages (#1219718)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-4
changelog:
  - Flush the class/perm string mapping cache on policy reload (#1264051)
  - Fix restorecon when path has no context


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix location of selinuxfs mount point
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t input


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-9
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()


author: Petr Lautrbach <plautrba@redhat.com> 2.5-12
changelog:
  - Fix -Wsign-compare warnings
  - Drop unused stdio_ext.h header file
  - Kill logging check for selinux_enabled()
  - Drop usage of _D_ALLOC_NAMLEN
  - Add openrc_contexts functions
  - Fix redefinition of XATTR_NAME_SELINUX
  - Correct error path to always try text
  - Clean up process_file()
  - Handle NULL pcre study data
  - Fix in tree compilation of utils that depend on libsepol


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libselinux
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libselinux


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-12
changelog:
  - Correct manpages regarding removable_context
  - build: follow standard semantics for DESTDIR and PREFIX


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  - Merged dbase_file_flush patch from Dan Walsh.
  - This removes any mention of specific tools (e.g. semanage)
  - from the comment header of the auto-generated files,
  - since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
  - Merged optimizations from Stephen Smalley.
  -    do not set all booleans upon commit, only those whose values have changed
  -    only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Revert hard linking of files between tmp/active/previous.
  - Enable configuration of bzip behavior from Stephen Smalley.
  -   bzip-blocksize=0 to disable compression and decompression support.
  -   bzip-blocksize=1..9 to set the blocksize for compression.
  -   bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.44-1
changelog:
  - Update to upstream
  	* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
  	  glibc < 2.9 does not support binary mode ('b') for fmemopen'd
  	  streams.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Update to upstream
  	* Add enable/disable patch support from Dan Walsh.
  	* Add usepasswd flag to semanage.conf to disable genhomedircon using
  	  passwd from Dan Walsh.
  	* regenerate swig wrappers


author: David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
changelog:
  - big reworking of the support-multiple-python-builds patch to deal with
  PEP 3149: the latest Python 3.2 onwards uses include paths and library names
  that don't fit prior naming patterns, and so we must query python3-config for
  this information.  To complicate things further, python 2's python-config
  doesn't understand all of the options needed ("--extension-suffix").  I've
  thus added new Makefile variables as needed, to be supplied by the specfile by
  invoking the appropriate config tool (or by hardcoding the old value for
  "--extension-suffix" i.e. ".so")
  - rework python3 manifest for PEP 3149, and rebuild for newer python3


author: Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
changelog:
  - Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module 
  indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
  ship active modules in rpm.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-1
changelog:
  -Update to upstream
  2.1.2 2011-08-17
  	* print error debug info for buggy fc
  	* introduce semanage_set_root and friends
  	* throw exceptions in python rather than return
  	* python3 support.
  	* patch for MCS/MLS in user files

  2.1.1 2011-08-01
  	* Remove generated files, expand .gitignore
  	* Use -Werror and change a few prototypes to support it


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  	* Create a new preserve_tunables flag
  	* tree: default make target to all not
  	* fix semanage_store_access_check calling arguments


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Upgrade to upstream
  	* regenerate .pc on VERSION change
  	* maintain mode even if umask is tighter
  	* semanage.conf man page
  	* create man5dir if not exist


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* add ignoredirs config for genhomedircon
  	* Fallback_user_level can be NULL if you are not using MLS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* Alternate path for semanage.conf
  	* do not link against libpython, this is considered bad in Debian
  	* Allow to build for several ruby version
  	* fallback-user-level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* remove build warning when build swig c files
  	* additional makefile support for rubywrap
  	* ignore 80 column limit for readability
  	* semanage_store: fix snprintf length argument by using asprintf
  	* Use default semanage.conf as a fallback
  	* use after free in python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
changelog:
  - Attempt to allocate memory for selinux_binary_policy_path and free memory 
  - allocated by asprintf.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* do boolean name substitution
  	* Fix segfault for building standard policies.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
changelog:
  - Fix handling of missing semanage permissive -d foo, not failing correctly
  - Previous to this fix the first module beginning with foo would get deleted.


author: Dan Walsh <dwalsh@redhat.com> 2.1.9-3
changelog:
  - Update to latest patches from eparis/Upstream
  -    libsemanage: fixes from coverity
  -    libsemange: redo genhomedircon minuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Add sefcontext_compile to compile regex everytime policy is rebuilt
  	* Cleanup/fix enable/disable/remove module.
  	* redo genhomedircon minuid
  	* fixes from coverity
  	* semanage_store: do not leak memory in semanage_exec_prog
  	* genhomedircon: remove useless conditional in get_home_dirs
  	* genhomedircon: double free in get_home_dirs
  	* fcontext_record: do not leak on error in semanage_fcontext_key_create
  	* genhomedircon: do not leak on failure in write_gen_home_dir_context
  	* semanage_store: do not leak fd 
  	* genhomedircon: do not leak shells list
  	* semanage_store: do not leak on strdup failure 
  	* semanage_store: rewrite for readability


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-6
changelog:
  - Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #952237


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Avoid duplicate list entries from Dan Walsh.
  	* Add audit support to libsemanage from Dan Walsh.
  	* Remove policy.kern and replace with symlink from Dan Walsh.
  	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.


author: Petr Lautrbach <plautrba@redhat.com> 2.4-2
changelog:
  - semanage_migrate_store: use /usr/bin/python3
  - move semanage_migrate_store script to libsemanage-python3


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - Fixes bug preventing the installation of base modules
  - make distclean target work
  - Do not always print a module name warning
  - Use pp module name instead of filename when installing module
  - tests: Do not force using gcc
  - genhomedircon: remove hardcoded refpolicy strings
  - genhomedircon: add support for %group syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-1
changelog:
  - Update to upstream release 2017-08-04
  - Use 'sefcontext_compile -r' when it's run during SELinux policy build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libsemanage
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libsemanage


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-10
changelog:
  - properly check return value of iterate function
  - Use umask(0077) for fopen() write operations
  - Return commit number if save-previous false
  - Allow tmp files to be kept if a compile fails
  - build: follow standard semantics for DESTDIR and PREFIX
  - Improve warning for installing disabled module
  - silence clang static analyzer report
  - remove access() check to make setuid programs work


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-9
changelog:
  - allow spaces in user/group names (#2042408)
  - always write kernel policy when check_ext_changes is specified (#2089802)


author: Petr Lautrbach <lautrbach@redhat.com> - 2.9-11
changelog:
  - Set new restorecon handle before doing restorecon (RHEL-73348)
  - Mute error messages from selinux_restorecon


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.20-5
changelog:
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


