# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
changelog:
  - Bump version to 1.4.0.20-1
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t
  - Resolves: Bug 1653165 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1653469 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1654101 - dscreate related issues
  - Resolves: Bug 1654116 - dsctl related issues
  - Resolves: Bug 1654134 - 389 web UI gives error when try to do backup management
  - Resolves: Bug 1654281 - RHDS webui console is not loading other instances apart
  - Resolves: Bug 1654451 - dscreate permissions and SELinux labels "too relaxed/open", "incorrect" 
  - Resolves: Bug 1654518 - While creating instance getting error "ERR - createprlistensockets - PR_Bind() on All Interfaces port 392 failed: Netscape Portable Runtime error -5966
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'
  - Resolves: Bug 1654577 - Cockpit create backup should perform backup name check
  - Resolves: Bug 1654581 - dsidm: User creation failing with error AttributeError: module 'sys' has no attribute 'ext' 
  - Resolves: Bug 1654693 - dsconfig doesn't have option to pass password as an argument
  - Resolves: Bug 1658613 - Bind password change for replica agreement breaks replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-2
changelog:
  - Bump version to 1.4.0.20-2
  - Resolves: Bug 1648937 - python3-lib389 pulls dependencies required only by tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-3
changelog:
  - Bump version to 1.4.0.20-3 
  - Resolves: Bug 1654105 - RHDS 11: dsconf related issues
  - Resolves: Bug 1623634 - Add backend functionality to UI's Plugin Tab
  - Resolves: Bug 1648971 - ssca needs to be removed after dirsrv instance is removed
  - Resolves: Bug 1654430 - cockpit does not validate Directory Manager password change operation
  - Resolves: Bug 1654241 - Add backend functionality to UI's Server Tab No. 2 (CLI and UI)
  - Resolves: Bug 1658622 - Information disclosure while using WebUI


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-5
changelog:
  - Bump version to 1.4.0.20-5
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-6
changelog:
  - Bump version to 1.4.0.20-6
  - Resolves: Bug 1654101 - dscreate - suffix create root node option
  - Resolves: Bug 1671505 - ns-slapd crashes with k5_mutex_lock: Assertion `r == 0' failed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-7
changelog:
  - Bump version to 1.4.0.20-7
  - Resolves: Bug 1671735 - dscreate interactive fails when the suffix contains spaces 
  - Resolves: Bug 1654101 - Fix cherry-pick error in setup.py


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-8
changelog:
  - Bump version to 1.4.0.20-8
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (entry cache corruption)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-9
changelog:
  - Bump version to 1.4.0.20-9
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (missing commit from last release)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-10
changelog:
  - Bump version to 1.4.0.20-10
  - Resolves: Bug 1690024 - rebase lib389 to pull in all the dscreate fixes


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
changelog:
  - Bump version to 1.4.0.19-1
  - Resolves: Bug 1648924 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-2
changelog:
  - Bump version to 1.4.0.19-2
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-1
changelog:
  - Bump version to 1.4.1.3-1
  - Resolves: Bug 1633718 - 389-ds module: Switched Requires from "python3" to "platform-python"
  - Resolves: Bug 1654059 - 389-ds-base: dscreate and dsconf print DM's password in verbose mode
  - Resolves: Bug 1712467 - Rebase 389-ds-base on RHEL 8.1


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-2
changelog:
  - Bump version to 1.4.1.3-2
  - Resolves: Bug 1544973 - [RFE] IPA replica stuck at last update status: Error (18) Replication error acquiring replica: Incremental update transient error.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-3
changelog:
  - Bump verison to 1.4.1.3-3
  - Resolves: Bug 1654056 - /usr/lib/systemd/system/dirsrv@.service:40: .include directives are deprecated
  - Resolves: Bug 1706224 - Protocol setting is inconsistent in FIPS mode
  - Resolves: Bug 1715675 - Fix potential ipv6 issues
  - Resolves: Bug 1717540 - Address covscan warnings


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-4
changelog:
  - Bump verison to 1.4.1.3-4
  - Resolves: Bug 1712467 - Fix schema OID issue that came over from rebase


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-5
changelog:
  - Bump verison to 1.4.1.3-5
  - Resolves: Bug 1720331 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1725815 - consistency in the replication error codes while setting nsds5replicaid=65535
  - Resolves: Bug 1592228 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default
  - Resolves: Bug 1699043 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections 
  - Resolves: Bug 1444876 - Add new keyword to access logging when buffer capacity is exceeded


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-7
changelog:
  - Bump version to 1.4.1.3-7
  - Resolves: Bug 1748201 - EMBARGOED CVE-2019-14824 389-ds:1.4/389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-3
changelog:
  - Bump version to 1.4.2.4-3
  - Issue 50712 - Version comparison doesn't work correctly on git builds (relates to #1748994)


author: Mark Reynolkds <mreynolds@redhat.com> - 1.4.2.4-5
changelog:
  - Bump version to 1.4.2.4-5
  - Resolves: Bug 1676699 - dsconf allows to set an empty password for Directory Manager
  - Resolves: Bug 1714688 - dscontainer executable should be placed under /usr/libexec/dirsrv/
  - Resolves: Bug 1773115 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1790979 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1790981 - Entry cache contention during base search
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-6
changelog:
  - Resolves: Bug 1776227 - Error: 'PwPolicyManager' object has no attribute 'get_attr_list'
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10(fix regression)
  - Resolves: Bug 1758473 - AddressSanitizer: heap-use-after-free in log_get_loglist
  - Resolves: Bug 1790259 - Change the default behavior of 'nsslapd-verify-filter-schema'
  - Resolves: Bug 1773114 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-7
changelog:
  - Bump version to 1.4.2.4-7
  - Resolves: Bug 1744662 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1779216 - dsctl doesn't work with 'slapd-' in the instance name
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1793060 - dsctl healthcheck issues error : type object 'datetime.date' has no attribute 'fromisoformat'
  - Resolves: Bug 1758494 - LeakSanitizer: detected memory leaks in do_add 
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-8
changelog:
  - Bump version to 1.4.2.4-8
  - Resolves: Bug 1807971 - dsctl healthcheck fails at checking replica when conflict entries are present


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-9
changelog:
  - Bump version to 1.4.2.4-9
  - Resolves: Bug 1867097 - Memory leak in ACI using IP subject
  - Resolves: Bug 1862170 - python3-lib389 pulls unnecessary bash-completion package
  - Resolves: Bug 1867988 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-4
changelog:
  - Bump version to 1.4.3.16-4
  - Resolves: Bug 1843517 - Using ldifgen with --start-idx option fails with unsupported operand
  - Resolves: Bug 1801086 - [RFE] Generate dsrc file using dsconf
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-5
changelog:
  - Bump version to 1.4.3.16-5
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV
  - Resolves: Bug 1887449 - Sync repl: missing update because operation are erroneously stated as nested
  - Resolves: Bug 1887415 - Sync repl - if a series of updates target the same entry then the cookie get wrong changenumber
  - Resolves: Bug 1851978 - SyncRepl plugin provides a wrong cookie


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-6
changelog:
  - Bump version to 1.4.3.16-6
  - Resolves: Bug 1879386 - cli dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) State (green) Reason (error (0)
  - Resolves: Bug 1904991 - Unexpected info returned to ldap request
  - Resolves: Bug 1843838 - heap-use-after-free in slapi_be_getsuffix
  - Resolves: Bug 1903133 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-7
changelog:
  - Bump version to 1.4.3.16-7
  - Resolves: Bug 1890118 - SIGFPE crash in rhds disk monitoring routine
  - Resolves: Bug 1904991 - 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1627645 - ldif2db does not change exit code when there are skipped entries


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-8
changelog:
  - Bump version to 1.4.3.16-8
  - Resolves: Bug 1903539 - cn=monitor is throwing err=32 with scope: -s one
  - Resolves: Bug 1893870 - PR_WaitCondVar() issue causes replication delay when clock jumps backwards


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-9
changelog:
  - Bump version to 1.4.3.16-9
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation
  - Resolves: Bug 1916677 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912822 - sync_repl: when completing an operation in the pending list, it can select the wrong operation


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-10
changelog:
  - Bump version to 1.4.3.16-10
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-11
changelog:
  - Bump version to 1.4.3.16-11
  - Resolves: Bug 1924130 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation(remove patch as it breaks DogTag, will add this patch back after DogTag is fixed)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-12
changelog:
  - Bump version to 1.4.3.16-12
  - Resolves: Bug 1929067 - PKI instance creation failed with new 389-ds-base build


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.16-13
changelog:
  - Bump version to 1.4.3.16-13
  - Resolves: Bug 1930188 - crash in sync_repl when a MODRDN create a cenotaph


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-14
changelog:
  - Bump version to 1.4.3.16-14
  - Resolves: Bug 1968588 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1960720 - sync_repl NULL pointer dereference in sync_create_state_control()


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-15
changelog:
  - Bump version to 1.4.3.16-15
  - Resolves: Bug 1970791 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-16
changelog:
  - Bump version to 1.4.3.16-16
  - Resolves: Bug 1972738 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1972721 - Large updates can reset the CLcache to the beginning of the changelog


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-17
changelog:
  - Bump version to 1.4.3.16-17
  - Resolve: Bug 1983095 - Internal unindexed searches in syncrepl
  - Resolve: Bug 1980063 - IPA installation fails on s390x with 389-ds-base-1.4.3.8-4.module+el8.3.0+7193+dfd1e8ad.s390x


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-18
changelog:
  - Bump version to 1.4.3.16-18
  - Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.16-19
changelog:
  - Bump version to 1.4.3.16-19
  - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-1
changelog:
  - Bump version to 1.4.3.23-1
  - Resolves: Bug 1947044 - Rebase 389 DS with 389-ds-base-1.4.3.23 for RHEL 8.5
  - Resolves: Bug 1850664 - RFE - Add an option for the Retro Changelog to ignore some attributes
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)
  - Resolves: Bug 1898541 - Changelog cache can upload updates from a wrong starting point (CSN)
  - Resolves: Bug 1889562 - client psearch with multiple threads hangs if nsslapd-maxthreadsperconn is under sized
  - Resolves: Bug 1924848 - Negative wtime on ldapcompare
  - Resolves: Bug 1895460 - RFE - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  - Resolves: Bug 1897614 - Performance search rate: change entry cache monitor to recursive pthread mutex
  - Resolves: Bug 1939607 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 1626633 - [RFE] DS - Update the password policy to support a Temporary Password with expiration
  - Resolves: Bug 1952804 - CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-2
changelog:
  - Bump version to 1.4.3.23-2
  - Resolves: Bug 1812286 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  - Resolves: Bug 1748441 - RFE - Schedule execution of "compactdb" at specific date/time
  - Resolves: Bug 1938239 - RFE - Extend DNA plugin to support intervals sizes for subuids


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-3
changelog:
  - Bump version to 1.4.3.23-3
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute
  - Resolves: Bug 1967839 - ACIs are being evaluated against the Replication Manager account in a replication context
  - Resolves: Bug 1970259 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
  - Resolves: Bug 1972590 - Large updates can reset the CLcache to the beginning of the changelog
  - Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-4
changelog:
  - Bump version to 1.4.3.23-4
  - Resolves: Bug 1976906 - Instance crash at restart after changelog configuration
  - Resolves: Bug 1480323 - ns-slapd crash at startup - Segmentation fault in strcmpi_fast() when the Referential Integrity log is manually edited
  - Resolves: Bug 1967596 - Temporary password - add CLI and fix compiler errors


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-5
changelog:
  - Bump version to 1.4.3.23-5
  - Resolves: Bug 1951020 - Internal unindexed searches in syncrepl
  - Resolves: Bug 1978279 - ds-replcheck state output message has 'Master' instead of 'Supplier'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-6
changelog:
  - Bump version to 1.4.3.23-6
  - Resolves: Bug 1982787 - CRYPT password hash with asterisk allows any bind attempt to succeed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-7
changelog:
  - Bump version to 1.4.3.23-7
  - Resolves: Bug 1983921 - persistent search returns entries even when an error is returned by content-sync-plugin


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-8
changelog:
  - Bump version to 1.4.3.23-8
  - Resolves: Bug 1947044 - add missing patch for import result code
  - Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-9
changelog:
  - Bump version to 1.4.3.23-9
  - Resolves: Bug 1947044 - remove unsupported GOST password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-10
changelog:
  - Bump version to 1.4.3.23-10
  - Resolves: Bug 1997138 - LDAP server crashes when dnaInterval attribute is set to 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-11
changelog:
  - Bump version to 1.4.3.23-11
  - Resolves: Bug 2022005 - ipa user-add fails with "gecos: invalid per syntax: Invalid syntax"
  - Resolves: Bug 2021998 - IPA server is very slow in execution of some searches


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.23-12
changelog:
  - Bump version to 1.4.3.23-12
  - Resolves: Bug 2024697 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-13
changelog:
  - Bump version to 1.4.3.23-13
  - Resolves: Bug 2056488 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2047166 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2056481 - double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.23-14
changelog:
  - Bump version to 1.4.3.23-14
  - Resolves: Bug 2059893 - Paged search lookthroughlimit counter doesnt take read ahead into account
  - Resolves: Bug 2060106 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing
  - Resolves: Bug 2060110 - double-free of the virtual attribute context in persistent search


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-1
changelog:
  - Bump version to 1.4.3.28-1
  - Resolves: Bug 2016014 - rebase RHEL 8.6 with 389-ds-base-1.4.3
  - Resolves: Bug 1990002 - monitor displays wrong date for connection
  - Resolves: Bug 1950335 - upgrade password hash on bind also causes passwordExpirationtime to be updated
  - Resolves: Bug 1916292 - Indexing a single backend actually processes all configured backends
  - Resolves: Bug 1780842 - [RFE] set db home directory to /dev/shm by default
  - Resolves: Bug 2000975 - Retro Changelog does not trim changes


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-2
changelog:
  - Bump version to 1.4.3.28-2
  - Resolves: Bug 2024695 - DB corruption "_entryrdn_insert_key - Same DN (dn: nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff,<SUFFIX>) is already in the entryrdn file"
  - Resolves: Bug 1859210 - systemd-tmpfiles warnings
  - Resolves: Bug 1913199 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)
  - Resolves: Bug 1974236 - automatique disable of virtual attribute checking
  - Resolves: Bug 1976882 - logconv.pl -j: Use of uninitialized value $first in numeric gt (>)
  - Resolves: Bug 1981281 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 2015998 - Log the Auto Member invalid regex rules in the LDAP errors log


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-3
changelog:
  - Bump version to 1.4.3.28-3
  - Resolves: Bug 2030367 - EMBARGOED CVE-2021-4091 389-ds:1.4/389-ds-base: double-free of the virtual attribute context in persistent search
  - Resolves: Bug 2033398 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-4
changelog:
  - Bump version to 1.4.3.28-4
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-5
changelog:
  - Bump version to 1.4.3.28-5
  - Resolves: Bug 2045223 - ipa-restore command is failing when restore after uninstalling the server (aprt 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.28-6
changelog:
  - Bump version to 1.4.3.28-6
  - Resolves: Bug 2047171 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.28-7
changelog:
  - Bump version to 1.4.3.28-7
  - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
  - Resolves: Bug 2081014 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.20-5
changelog:
  - Bump version to 1.4.3.30-5
  - Resolves: Bug 2113002 - ipa-replica-manage --connect --winsync fails with traceback


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.20-6
changelog:
  - Bump version to 1.4.3.30-6
  - Resolves: Bug 2113002 - ipa-replica-manage --connect --winsync fails with traceback
  - Resolves: Bug 2118763 - SIGSEGV in sync_repl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-1
changelog:
  - Bump version to 1.4.3.32-1
  - Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
  - Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
  - Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs 
  - Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-2
changelog:
  - Bump version to 1.4.3.32-2
  - Resolves: Bug 2149956 - ipa-server-install displays mdd failure Server is unwilling to perform


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.32-3
changelog:
  - Bump version to 1.4.3.32-3
  - Resolves: Bug 2149956 - change default password storage scheme to be backwards compatible with RHEL 7


author: Mark Reynolds <mreynolds@rehdat.com> - 1.4.3.34-1
changelog:
  - Bump version to 1.4.3.34-1
  - Resolves: Bug 2177234 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.36-2
changelog:
  - Bump version to 1.4.3.36-2
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump versionto 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.37-1
changelog:
  - Bump version to 1.4.3.37-1
  - Resolves: rhbz#2224505 - Paged search impacts performance
  - Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
  - Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
  - Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG


author: James Chapman <jachapma@redhat.com> - 1.4.3.37-2
changelog:
  - Bump version to 1.4.3.37-2
  - Resolves: RHEL-12710 bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16822 ns-slapd crash in slapi_attr_basetype


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-1
changelog:
  - Bump version to 1.4.3.39-1
  - Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
  - Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
  - Resolves: RHEL-5143  - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
  - Resolves: RHEL-5107  - bdb_start - Detected Disorderly Shutdown directory server is not starting
  - Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
  - Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.


author: Thierry Bordaz <tbordaz@redhat.com> - 1.4.3.39-2
changelog:
  - Bump version to 1.4.3.39-2
  - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
  - Resolves: RHEL-5390  - schema-compat-plugin expensive with automember rebuild
  - Resolves: RHEL-5135  - crash in sync_update_persist_op() of content sync plugin


author: Simon Pichugin <spichugi@redhat.com> - 1.4.3.39-3
changelog:
  - Bump version to 1.4.3.39-3
  - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: James Chapman <jachapma@redhat.com> - 1.4.3.39-4
changelog:
  - Bump version to 1.4.3.39-4
  - Resolves: RHEL-34818 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34824 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-5
changelog:
  - Bump version to 1.4.3.39-5
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-6
changelog:
  - Bump version to 1.4.3.39-6
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-7
changelog:
  - Bump version to 1.4.3.39-7
  - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-8
changelog:
  - Bump version to 1.4.3.39-8
  - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z]
  - Resolves: RHEL-58069 - perf search result investigation for many large static groups and members [rhel-8.10.0.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-10
changelog:
  - Resolves: RHEL-69822 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-8.10.z]
  - Resolves: RHEL-71215 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-11
changelog:
  - Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-12
changelog:
  - Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
  - Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
  - Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
  - Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
  - Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
  - Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
  - Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-13
changelog:
  - Resolves: RHEL-89749 - Nested group does not receive memberOf attribute [rhel-8.10.z]
  - Resolves: RHEL-89758 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-8.10.z]
  - Resolves: RHEL-89765 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-8.10.z]
  - Resolves: RHEL-89778 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-8.10.z]


author: Viktor Ashirov <vashirov@redhat.com> - 1.4.3.39-14
changelog:
  - Reverts: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
  - Resolves: RHEL-95442 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-8.10.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.4-1
changelog:
  - Bump version to 1.4.3.4
  - Issue 50954 - Port buildnum.pl to python(part 2)
  - Issue 50955 - Fix memory leaks in chaining plugin
  - Issue 50954 - Port buildnum.pl to python
  - Issue 50947 - change 00core.ldif objectClasses for openldap migration
  - Issue 50755 - setting nsslapd-db-home-directory is overriding db_directory
  - Issue 50937 - Update CLI for new backend split configuration
  - Issue 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  - Issue 50945 - givenname alias of gn from openldap
  - Issue 50935 - systemd override in lib389 for dscontainer
  - Issue 50499 - Fix npm audit issues
  - Issue 49761 - Fix CI test suite issues
  - Issue 50618 - clean compiler warning and log level
  - Issue 50889 - fix compiler issues
  - Issue 50884 - Health check tool DSEldif check fails
  - Issue 50926 - Remove dual spinner and other UI fixes
  - Issue 50928 - Unable to create a suffix with countryName
  - Issue 50758 - Only Recommend bash-completion, not Require
  - Issue 50923 - Fix a test regression
  - Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  - Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  - Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  - Issue 50919 - Backend delete fails using dsconf
  - Issue 50872 - dsconf can't create GSSAPI replication agreements
  - Issue 50912 - RFE - add password policy attribute pwdReset
  - Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
  - Issue 50889 - Extract pem files into a private namespace
  - Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  - Issue 50686 - Port fractional replication test cases from TET to python3 final
  - Issue 49845 - Remove pkgconfig check for libasan
  - Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  - Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  - Issue 50786 - connection table freelist
  - Issue 50618 - support cgroupv2
  - Issue 50900 - Fix cargo offline build
  - Issue 50898 - ldclt core dumped when run with -e genldif option


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.5-1
changelog:
  - Bump version to 1.4.3.5
  - Issue 50994 - Fix latest UI bugs found by QE
  - Issue 50933 - rfc2307compat.ldif
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 49731 - dscreate fails in silent mode because of db_home_dir
  - Issue 50975 - Revise UI branding with new minimized build
  - Issue 49437 - Fix memory leak with indirect COS
  - Issue 49731 - Do not add db_home_dir to template-dse.ldif
  - Issue 49731 - set and use db_home_directory by default
  - Issue 50971 - fix BSD_SOURCE
  - Issue 50744 - -n option of dbverify does not work
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50976 - Clean up Web UI source directory from unused files
  - Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  - Issue 50966 - UI - Database indexes not using typeAhead correctly
  - Issue 50974 - UI - wrong title in "Delete Suffix" popup
  - Issue 50972 - Fix cockpit plugin build
  - Issue 49761 - Fix CI test suite issues
  - Issue 50971 - Support building on FreeBSD.
  - Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  - Issue 50963 - We should bundle *.min.js files of Console
  - Issue 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  - Issue 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  - Issue 50954 - buildnum.py - fix date formatting issue


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
changelog:
  - Bump version to 1.4.3.6
  - Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  - Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  - Issue 51008 - dbhome in containers
  - Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  - Issue 51014 - slapi_pal.c possible static buffer overflow
  - Issue 50545 - remove dbmon "incr" option from arg parser
  - Issue 50545 - Port dbmon.sh to dsconf
  - Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  - Issue 49731 - Fix additional issues with setting db home directory by default
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50905 - intermittent SSL hang with rhds
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
changelog:
  - Bump version to 1.4.3.7
  - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51031 - UI - transition between two instances needs improvement


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-0
changelog:
  - Bump version to 1.4.3.8-0
  - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  - Issue 51054 - Revise ACI target syntax checking
  - Issue 51068 - deadlock when updating the schema
  - Issue 51060 - unable to set sslVersionMin to TLS1.0
  - Issue 51064 - Unable to install server where IPv6 is disabled
  - Issue 51051 - CLI fix consistency issues with confirmations
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Issue 51047 - React deprecating ComponentWillMount
  - Issue 50499 - fix npm audit issues
  - Issue 50545 - Port dbgen.pl to dsctl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
changelog:
  - Bump version to 1.4.3.8-1
  - Resolves: Bug 1833350 - Rebase 389-ds-base for RHEL 8.3
  - Resolves: Bug 1728943 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Resolves: Bug 1775285 - [RFE] Implement the Password Policy attribute "pwdReset"
  - Resolves: Bug 1638875 - [RFE] extract key/certs pem file into a private namespace
  - Resolves: Bug 1758478 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Resolves: Bug 1795943 - Port dbmon.sh from legacy tools package
  - Resolves: Bug 1798394 - Port dbgen from legacy tools package
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1807419 - Unable to create a suffix with countryName either via dscreate or the admin console
  - Resolves: Bug 1816848 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Resolves: Bug 1816854 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  - Resolves: Bug 1816857 - Searches on cn=config takes values with spaces and makes multiple attributes out of them
  - Resolves: Bug 1816859 - lib389 - Replace exec() with setattr()
  - Resolves: Bug 1816862 - Memory leak in indirect COS
  - Resolves: Bug 1829071 - Installation of RHDS 11 fails on RHEL8 server with IPv6 disabled
  - Resolves: Bug 1833515 - set 'nsslapd-enable-upgrade-hash: off' as this raises warnings in IPA
  - Resolves: Bug 1790986 - cenotaph errors on modrdn operations
  - Resolves: Bug 1769734 - Heavy StartTLS connection load can randomly fail with err=1
  - Resolves: Bug 1758501 - LeakSanitizer: detected memory leaks in changelog5_init and perfctrs_init


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-2
changelog:
  - Bump version to 1.4.3.8-2
  - Resolves: Bug 1833350 - Remove cockpit dependancies that are breaking builds


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-3
changelog:
  - Bump version to 1.4.3.8-3
  - Resolves: Bug 1835619 - Healthcheck with --json option reports "Object of type 'bytes' is not JSON serializable" when mapping tree is deleted 
  - Resolves: Bug 1836428 - Directory Server ds-replcheck RFE to add a timeout command-line arg/value to wait longer when connecting to a replica server
  - Resolves: Bug 1843090 - abort when a empty valueset is freed
  - Resolves: Bug 1843156 - Prevent unnecessarily duplication of the target entry
  - Resolves: Bug 1843157 - Check for clock errors and time skew
  - Resolves: Bug 1843159 - RFE AD filter rewriter for ObjectCategory
  - Resolves: Bug 1843162 - Creating Replication Manager fails if uid=repman is used
  - Resolves: Bug 1816851 - Add option to healthcheck to list all the lint reports
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1748244 - dscreate doesn't sanitize instance name


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-4
changelog:
  - Bump version to 1.4.3.8-4
  - Resolves: Bug 1806978 - ns-slapd crashes during db2ldif
  - Resolves: Bug 1450863 - Log warning when tuning of nsslapd-threadnumber above or below the optimal value
  - Resolves: Bug 1647017 - A distinguished value of a single valued attribute can be missing in an entry
  - Resolves: Bug 1806573 - Dsctl healthcheck doesn't work when using instance name with 'slapd-'
  - Resolves: Bug 1807773 - dsctl healthcheck : typo in DSREPLLE0002 Lint error suggested resolution commands
  - Resolves: Bug 1843567 - Healthcheck to find notes=F
  - Resolves: Bug 1845094 - User/Directory Manager can modify Password Policy attribute "pwdReset"
  - Resolves: Bug 1850275 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1442386 - Recreating an index while changing case will create an indexfile with the old name (different case) and after restart the indexfile is abandoned
  - Resolves: Bug 1672574 - nsIndexIDListScanLimit accepts any value
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-5
changelog:
  - Bump version to 1.4.3.8-5
  - Resolves: Bug 1841086 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1849418 - python3-lib389 pulls unnecessary bash-completion package


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1851973 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1888863 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1859228 - do not add referrals for masters with different data generation
  - Resolves: Bug 1859227 - create keep alive entry after on line init
  - Resolves: Bug 1896850 - NULL dereference in revert_cache()
  - Resolves: Bug 1861504 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1898850 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1904348 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1904349 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1904350 - do not add referrals for masters with different data generation
  - Resolves: Bug 1904351 - create keep alive entry after on line init
  - Resolves: Bug 1904352 - NULL dereference in revert_cache()
  - Resolves: Bug 1904353 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1904347 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-7
changelog:
  - Bump version to 1.4.3.8-7
  - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.1.9-6
changelog:
  - Add explicit requirement on javapackages-tools for script which
    uses java-functions. See RHBZ#1600426.


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Thomas Haller <thaller@redhat.com> - 1:1.22.0-0.2
changelog:
  - Update to 1.22-rc1 (1.21.90)
  - large internal rework of libnm's NMClient
  - dhcp: switch implementation of "internal" DHCP to nettools' n-dhcp4
  - add support for carrier state of devices on D-Bus/libnm (rh #1722024)
  - cloud-setup: add initial and experimental tool for configuring in cloud (rh #1642461)
  - dhcp: support configuring FQDN hostname flags (rh #1649368)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.2-1
changelog:
  - Update to 1.22.2
  - core,libnm: expose capability for OVS support (rh #1785147)
  - dhcp: various bugfixes for nettools n-dhcp4 plugin


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.4-1
changelog:
  - Update to 1.22.4
  - dhcp: fix behavior of internal DHCP client when the server sends a NAK (rh #1787219)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.6-1
changelog:
  - Update to 1.22.6
  - nm-device: add new pending action to keep the device busy when in between states (rh #1759956)
  - cloud-setup: avoid unsupported settings in systemd service unit (rh #1791758)
  - do not create virtual device if master is not present (rh #1795919)
  - allow IPv6 RA timeout to be set to a value higher than 120 seconds (rh #1795957)
  - fix behaviour when 'ipv4.dhcp-timeout' option is set to 'infinity' (rh #1791378)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.8-1
changelog:
  - Update to 1.22.8
  - Added configuration option to customize IPv6 RA timeout (rh #1801158)
  - Removed length limitation for OVS Bridge, Patches and Interfaces (only Patch types) names (rh #1788432)
  - Reworked asynchronous deactivation of OVS interfaces (rh #1787989, rh #1782701)
  - Fixed failure when creating team interfaces (rh #1798947)
  - ifcfg-rh: fix clearing ovs slave type from ifcfg-rh file (rh #1804167)
  - Fixed bug causing virtual devices to not be available after AddConnection()/Update() (rh #1804350)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.8-3
changelog:
  - dhcp: keep trying after a send failure (rh #1806516)
  - ovs: fail port enslavement when the bridge is not found (rh #1797696)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-4
changelog:
  - core: fix leaking device state files in /run (rh #1810153)
  - dhcp: fix crash in nettools client when leaking GSource (rh #1810188)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-5
changelog:
  - dhcp: fix handling IO error in nettools DHCPv4 client (rh #1843357)
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1843360, CVE-2020-10754)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-3
changelog:
  - core: fix managing devices after resuming from sleep (rh #1855563)
  - dhcp: fix BPF filter for internal client on big endian arch (rh #1861488)
  - core: support warning log setting IPv6 MTU with IPv6 disabled (rh #1840989)
  - wifi: fix crash parsing incomplete BSS info (rh #1866395)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-4
changelog:
  - bond: fix Reapply does not update bond options (rh #1847814)
  - dhcp: support DHCPv6 fqdn_fqdn option for hostname (rh #1858344)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-7
changelog:
  - dhcp: add dhcp-vendor-class-identifier option (rh #1871042)
  - initrd: parse 'rd.net.dhcp.vendor-class' kernel cmdline arg (rh #1872299)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-8
changelog:
  - initrd: accept mac address as interface specifier (rh #1879795)
  - initrd: fix parsing IPv6 prefix length (rh #1879795)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-11
changelog:
  - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903698)
  - initrd: fix parsing of ip= argument with dotted interface name (rh #1903695)
  - initrd: fix parsing with empty token (rh #1902791)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2
changelog:
  - update to 1.26-rc2 (1.25.91)
  - initrd: set ipv6.method=auto when using IPv4 static configuration (rh #1848943)
  - cloud-setup: add support for Google Cloud load-balancing routes (rh #1821787)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2.1
changelog:
  - device: restart DHCP only for devices that are active or activating (rh #1852612)
  - initrd: fix generating default BOOTIF= connection (rh #1853277)
  - ovs: fix race condition when setting MAC address for ovs interfaces (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - device: reset SR-IOV parameters on activation failure (rh #1819587)
  - initrd: enable ipv6.method=auto with ip=dhcp6 (rh #1854323)
  - core: add "nm-shared" zone for firewalld for shared mode (rh #1834907)
  - ppp: fix taking control of link (rh #1849386)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-2
changelog:
  - core: fix generation of local routes for VRF devices (rh #1857133)
  - team: fix crash on failure to connect to teamd (rh #1856723)
  - core: fix detecting failure of master active-connection (rh #1845018)
  - core: fix warning about setting active_slave of bond when activating master (rh #1858326)
  - import translations (rh #1820552)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-3
changelog:
  - Increase LimitNOFILE to allow more than 1024 file descriptors (rh #1926599).
    This requires a suitable libndp version that can handle many file descriptors (rh #1933041).


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-6
changelog:
  - core: fix handling local routes generated by kernel (rh #1907661)
  - initrd: fix crash with rd.znet= argument (rh #1941106)
  - core: fix crash handling path match (rh #1942741)


author: Wen Liang <wenliang@redhat.com> - 1:1.30.0-8
changelog:
  - core: fix finding active connection for controller (rh #1965337)
  - bond: support 'tlb_dynamic_lb' in 'balance-alb' mode (rh #1965948)
  - manager: delete default connection when veth removed (rh #1965336)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-11
changelog:
  - platform: preserve IPv6 multicast route added by kernel (rh #2007264)
  - cloud-setup: don't interfere with other subnets (rh #2007341)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.30.0-12
changelog:
  - initrd: set an IPv4 required-timeout of 20 seconds, to prefer IPv4
    over IPv6 for default connections (rh #1961666)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.8
changelog:
  - Update to 1.29.10 (development)
  - bond: introduce new 'vlan+srcmac' xmit_hash_policy option (rh #1915457)
  - ovs: clean up interfaces from ovsdb at startup (rh #1861296)


author: Antonio Cardace <acardace@redhat.com> - 1:1.30.0-0.9
changelog:
  - Update to 1.29.11 (development)
  - bond: fix changing mode when the device is created externally (rh #1870691)
  - ovs: fix firewalld configuration for ovs-ports (rh #1921107)
  - ovs: avoid race condition when system interface is removed from ovsdb (rh #1923248)
  - doc: mention NETMASK as alternative to PREFIX for addresses in `man nm-settings-ifcfg-rh` (rh #1925123)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.10
changelog:
  - Update to 1.30-rc1 (1.29.90-dev) (development)
  - cloud-setup: fix removing IPv4 address (rh #1920838)


author: Thomas Haller <thaller@redhat.com> - 1:1.32.0-0.5
changelog:
  - update to 1.32-rc1 (1.31.90) (release candidate)
  - core: allow to preserved external TFilter and QDisc settings (rh #1928078)
  - bond: support "tlb_dynamic_lb" in "balance-alb" mode (rh #1959934)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.32.10-3
changelog:
  - preserve the IPv6 multicast route added by kernel (rh #2004212)
  - cloud-setup: better handle other route configuration (rh #1977984)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.3
changelog:
  - Upgrade to 1.35.3 release (development)
  - device: fix update of the ip-iface property (rh #2027490)
  - platform: add bpf filter to ignore routes from routing daemons (rh #1861527)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - ipv4ll: fix assert on external LL address removal (rh #2028404)
  - openvswitch: add DPDK n_rxq configuration option (rh #2001563)
  - device: ignore ndisc signal if device has no ifindex (rh #2013266)
  - bluetooth: fix invalid assertion in NMBluezManager:dispose() (rh #2028427)
  - supplicant: enable SAE-H2E (rh #2019396)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983747)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - revert: generate docs during build instead of using pre-generated (rh #1995915)
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2035519)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #1935026)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.36.0-8
changelog:
  - dhcp: fix "selecting lease failed" problem after receiving a NAK (rh #2105088)
  - core: fix memory leak when removing devices (rh #2105974)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.5-1
changelog:
  - Update to 1.39.5 release (development)
  - device: commit l3cfg on link change only when the device is activating (rh #2079054)
  - l3cfg: during reapply, also clear IPv6 temporary addresses (rh #2082230)
  - dhcp: support overlong DHCP host names (rh #2033643)
  - cloud-setup: reorder addresses to honor "primary_ip_address" (rh #2082000)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.6-1
changelog:
  - Update to 1.39.6 release (development)
  - Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
  - dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
  - libnm: support wait-activation-delay property (rh #2008337)
  - veth: fix veth activation on booting (rh #2105956)
  - support a ipv6.addr-gen-mode knob in the global config (rh #208268)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
  - ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - bridge: fix reapply of non-bridge properties (rh #2092762)
  - bridge: fix wired.mtu reapply (rh #2076131)


author: Fernando Fernandez Mancera <ferferna@redhat.com> 1:1.40.0-5
changelog:
  - ovs: wait that links disappear during initial cleanup (rh #2153429)
  - core: wait for carrier before resolving hostname via DNS (rh #2152891)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.2-1
changelog:
  - Update to 1.40.2 release
  - core: fix persisting Infiniband partition connections (rh #2122703)
  - core: wait for carrier before resolving hostname via DNS (rh #2118817)
  - core: fix handling of autoconnect-retries with multiconnect (rh #2039734)
  - nmcli: allow removing a port connection from a bond (rh #2126262)
  - initrd: decrease autoconnect priority for initrd connections (rh #2089707)
  - dhcp: wait DAD completion for DHCPv6 addresses (send decline) (rh #2096386, rh #2099794)
  - ovs: wait that links disappear during initial cleanup (rh #2060031)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.10-1
changelog:
  - Update to 1.40.10 release
  - cloud-setup: preserve addresses added externally (rh #2132754)
  - veth: fix detection of existing interface and peer (rh #2129829)
  - dns: ensure dnsmasq is stopped after disabling it and a restart (rh #2120763)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.40.12-1
changelog:
  - Update to 1.40.12 release
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.40.16-5
changelog:
  - support bond port prio property (rh #1920398)
  - team: don't try to connect to teamd in update_connection() (rh #2182029)


author: Wen Liang <wenliang@redhat.com> - 1:1.40.16-18
changelog:
  - vpn: fix routing rules support in vpn conenctions (RHEL-73052)
  - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051)


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-23
changelog:
  - Enable setting gamma by programing palette as supported by xorg-server
    1.19.0 again (bug #891973)


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.14-1.el7
changelog:
  - Rebase to 2.2.14 [bz#1451172]
  - wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
  - Resolves: bz#1451172
    ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
  - Resolves: bz#1467553
    ([WALA] Remove FIPS from default config in WALA-2.2.14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-1.el7
changelog:
  - Rebase to 2.2.18 [bz#1491873]
  - Resolves: bz#1491873
    ([WALA]Request to package WALA 2.2.18 into RHEL 7 Repo)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-2.el7
changelog:
  - wa-Add-show-configuration-option.patch [bz#1508340]
  - Resolves: bz#1508340
    ([WALA] WALA usage prompt lack of " waagent -show-configuration")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-4.el8
changelog:
  - Fix unit file location [bz#1637545]
  - Resolves: bz#1637545
    (Wrong macro used for systemd unit file location)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-5.el8
changelog:
  - wala-Switch-to-platform-python-in-systemd-unit-file.patch [bz#1639775]
  - Resolves: bz#1639775
    (WALinuxAgent: Systemd unit file will fail to execute)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.26-6.el8
changelog:
  - wala-Use-sys.executable-to-find-system-python.patch [bz#1639775]
  - Resolves: bz#1639775
    (WALinuxAgent: Systemd unit file will fail to execute)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-1.el8
changelog:
  - Rebase to 2.2.32 [bz#1639498]
  - Resolves: bz#1639498]
    (walinuxagent 2.2.32 packaging request for RHEL 8)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-1.el8_0.1
changelog:
  - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1711338]
  - Resolves: bz#1711338
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.2.32-2.el8
changelog:
  - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1684181 bz#1688276]
  - Resolves: bz#1684181
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions)
  - Resolves: bz#1688276
    (CVE-2019-0804 WALinuxAgent: swapfile created with weak permissions [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.32-3.el8
changelog:
  - wla-Switch-from-platform-python-to-python36.patch [bz#1720373]
  - wla-Stop-packaging-legacy-waagent2.0.patch [bz#1720373]
  - Resolves: bz#1720373
    ([RHEL 8.1] [Azure] Change WALinuxAgent spec to depend on Python3.6 package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-1
changelog:
  - Rebase to 2.2.38 [bz#1722848]
  - Resolves: bz#1722848
    ([Azure]walinuxagent 2.2.38 rebase [8.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1.el8.4
changelog:
  - Rebase to 2.2.46 [bz#1806685]
  - Resolves: bz#1806685
    (Rebase WALinuxAgent to 2.2.46 for RHEL 8.2.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1.el8.5
changelog:
  - wla-Update-Provisioning-options-1853.patch [bz#1827792]
  - Resolves: bz#1827792
    ([Azure][RHEL-8.2.1]Some parameter changes are not in waagent.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-5.el8
changelog:
  - Rebase to 2.2.46 [bz#1791069]
  - Resolves: bz#1791069
    ([Azure][RHEL-8.3]Ask to increase the WALA version available for RHEL 8.0 to 2.2.46)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-6.el8
changelog:
  - wala-Update-Provisioning-options-1853.patch [bz#1827792]
  - Resolves: bz#1822882
    ([Azure][RHEL-8]Some parameter changes are not in waagent.conf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-7.el8
changelog:
  - wla-Mark-logrotate-configs-with-config-noreplace.patch [bz#1838254]
  - Resolves: bz#1838254
    ([Azure]WALinuxAgent RPM update clobbers waagent.logrotate log rotation changes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-8.el8
changelog:
  - wla-Fix-handling-of-gen2-disks-with-udev-rules-1954.patch [bz#1859037]
  - Resolves: bz#1859037
    ([Azure][WALA]Cannot create /dev/disk/azure/resource softlinks in Gen2 VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-2.el8
changelog:
  - wla-Fixed-faulty-check-for-run_command-2093.patch [bz#1903074]
  - Resolves: bz#1903074
    ([Azure][WALA] Miss report "hostnamectl set-hostname --static] failed, attempting fallback")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-3.el8
changelog:
  - wla-Provide-udev-rules-as-a-separate-subpackage.patch [bz#1913074]
  - Resolves: bz#1913074
    ([Azure][RFE] please provide the WALinuxAgent-udev subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972102]
  - Resolves: bz#1972102
    ([Azure][RHEL-8]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2.el8_6.1
changelog:
  - wla-Fix-if-hangs-2283.patch [bz#2092753]
  - wla-Implement-restart_if-for-RedHat-OS.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Camilla Conte <cconte@redhat.com> - 2.3.0.2-2.el8_6.2
changelog:
  - wla-redhat-Implement-restart_if-correctly-to-eliminate-w.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.3.0.2-2.el8_6.3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2133446]
  - Resolves: bz#2133446
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0 [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6 [bz#2083465]
  - Adding restart_if implementation for RHEL [bz#2085578]
  - Resolves: bz#2083465
    ([Azure][RHEL-8][8.7] Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2085578
    ([Azure][WALA][8.6] WALA provisions VM failed because of no "ifdown")


author: Camilla Conte <cconte@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2080826]
  - Resolves: bz#2080826
    ([Azure][WALA][RHEL-8] [8.7] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2092002]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2114824]
  - Resolves: bz#2092002
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2114824
    ([Azure][WALA][RHEL-8.7] The description of "Logs.Collect" is incorrect)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114742]
  - Resolves: bz#2114742
    ([Azure][WALA][RHEL-8] When remove package some files left)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-7.el8_8
changelog:
  - wla-redhat-Fix-frh.py-to-not-skip-valid-patches-to-init-.patch [bz#2170104]
  - wla-Use-platform-python-in-waagent.service.patch [bz#2170104]
  - Resolves: bz#2170104
    ([Azure][WALA][RHEL-8] systemd service should not use python3)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-21
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-22
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy
  - bump release tag by 3 for easier cherry-picking from rhel8 stream
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1-36
changelog:
  - fix podman container got global IPv6 address unexpectedly even when macvlan
    network is created for pure IPv4 network
  - Resolves: #2133391


author: Jindrich Novy <jnovy@redhat.com> - 2:1.1.0-5
changelog:
  - fix "Two aardvark-dns instances trying to use the same port
    on the same interface"
  - Resolves: #2130234


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.10.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0
  - Related: Jira:RHEL-2110


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.9-1
changelog:
  - build: conditionalize the Python2 and Python3
  - cli-ng,hooks,python-problem: Allow python to be optional at build time
  - spec: fix ambiguous Python 2 dependency declarations
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python3-dmidecode
  - hooks: use container-exception-logger tool
  - spec: container python hooks require cel
  - hooks: do not write any additional logs
  - a-a-s-package-data: add python3.7 to known Interpreters
  - autogen: ignore abrt's python packages
  - correctly parse buildrequires from spec file


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-9
changelog:
  - spec: turn on --enable-native-unwinder aarch64
  - spec: enable addon-vmcore on aarch64
  - daemon: Fix double closed fd race condition
  - dbus: Add configuration for Python3
  - Add autogen.sh
  - Resolves: #1646569, #1651676, #1650619, #1650622, #1652676


author: Martin Kutlak <mkutlak@redhat.com> - 2.10.9-10
changelog:
  - spec: Add-explicit-package-version-requirement-of-abrt-libs
  - cli: get list of possible workflows for problem_data_t
  - cli: mark the suggestion text for translation
  - cli list: show a hint about creating a case in RHTS
  Resolves: #1649753


author: Michal Židek <mzidek@redhat.com> - 2.10.9-13
changelog:
  - Resolves: rhbz#1658685
  - shellcheck: Use command instead of type
  - shellcheck: Check exit code directly with if mycmd
  - shellcheck: Suppress shellcheck warning SC1090
  - shellcheck: Use $(...) instead of legacy backticked
  - cli: Add a shebang


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Radovan Sroka <rsroka@redhat.com> - 0.16-6
changelog:
  - ported syslog format from rhel7
    resolves: rhbz#1584136
  - fixed crypto problem with libgcrypt
    resolves: rhbz#1584120


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Radovan Sroka <rsroka@redhat.com> - 0.16-1
changelog:
  - rebase to stable v0.16
  - specfile cleanup
  - make doc readable 
    resolves: #1421355
  - make aide binary runable for any user
    resolves: #1421351


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.6-3
changelog:
  - Sync with the RHEL 7
  - Add Dell WD15/WD19 Dock to USB-Audio.conf and create UCM configs
  - Resolves: rhbz#1664247


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.33-1
changelog:
  - Relabel X11/xorg.conf.d directory (jkonecny)
    Resolves: rhbz#1660436
  - Reorder items in selinux relabeling post script (jkonecny)
    Related: rhbz#1660436


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.34-1
changelog:
  - Restore RHEL-specific stylesheet data (vponcova)
    Resolves: rhbz#1638383
  - Do not crash on missing multipath device wwn. (rvykydal)
    Resolves: rhbz#1666242


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.36-1
changelog:
  - Pass nosmt boot option to installed system. (rvykydal)
    Resolves: rhbz#1677411
  - Use unformatted DASDs for the partitioning (vponcova)
    Resolves: rhbz#1676630


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.37-1
changelog:
  - Update the SMT warning message (rvykydal)
    Related: rhbz#1684056
  - Detect and warn if SMT is enabled (vponcova)
    Resolves: rhbz#1684056


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.39-1
changelog:
  - Make SMT warning message smaller (jkonecny)
    Related: rhbz#1684056
  - Remove blank line in the SMT warning (jkonecny)
    Related: rhbz#1684056


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.42-1
changelog:
  - Require blivet with flags.protect_cdrom support (rvykydal)
    Resolves: rhbz#1715344
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1715344
  - Be more strict when checking for mounted dvd source. (rvykydal)
    Resolves: rhbz#1715344
  - Protect cdroms during tree population for image installs. (rvykydal)
    Resolves: rhbz#1715344
  - Use rhel-8.0 zanata version. (rvykydal)
    Related: rhbz#1715344
  - Rename zanata rhel-devel version (rvykydal)
    Related: rhbz#1715344


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.4-1
changelog:
  - Set default entry to the BLS id instead of the entry index (javierm)
    Resolves: rhbz#1671047
  - Fix non-root dir of install tree HD installation (jkonecny)
    Resolves: rhbz#1689194


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.6-1
changelog:
  - Require blivet with flags.protect_cdrom support (rvykydal)
    Related: rhbz#1671713
  - Be more strict when checking for mounted dvd source. (rvykydal)
    Resolves: rhbz#1671713
  - Protect cdroms during tree population for image installs. (rvykydal)
    Resolves: rhbz#1671713


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.7-1
changelog:
  - Add support for disabling modules via module --disable (mkolman)
    Resolves: rhbz#1655523
    Related: rhbz#1719347


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.8-1
changelog:
  - Respect changesok password policy for root password (mkolman)
    Resolves: rhbz#1584145
  - Fix default value for pwpolicy emptyok (mkolman)
    Resolves: rhbz#1664704


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.9-1
changelog:
  - Adjust the exclude arguments for livepayloads (bcl)
    Related: rhbz#1684542
  - Recreate the BLS entries when using liveimg (bcl)
    Resolves: rhbz#1684542
  - Cache the liveimg tar kernel list (bcl)
    Related: rhbz#1684542
  - Add common function for creating rescue images (bcl)
    Related: rhbz#1684542
  - Re-generate BLS loader file snippets on live installs (awilliam)
    Related: rhbz#1684542


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.10-1
changelog:
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1733507


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.11-1
changelog:
  - Fix noverifyssl when downloading .treeinfo file (jkonecny)
    Resolves: rhbz#1726156
    Resolves: rhbz#1723811


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.1.12-1
changelog:
  - Add the install class for Red Hat Virtualization (vponcova)
    Resolves: rhbz#1753316
  - Extend support for custom storage checking (vponcova)
    Related: rhbz#1753316
  - Enable to define the autopart type in an install class (vponcova)
    Related: rhbz#1753316


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.8-1
changelog:
  - Fix output kickstart generation for subscription commands (mkolman)
    Resolves: rhbz#1788579
    Resolves: rhbz#1788513
  - Fix GTK access from subscription thread (mkolman)
    Resolves: rhbz#1787615


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.9-1
changelog:
  - Fix RHSM HTTP proxy configuration clearing (mkolman)
    Resolves: rhbz#1789814
  - Add scrolling for the registration tab (mkolman)
    Resolves: rhbz#1788422


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.10-1
changelog:
  - Log exceptions raised in subscription data fetching method (mkolman)
    Related: rhbz#1788036
  - Fix subscription status not being displayed in some cases (mkolman)
    Resolves: rhbz#1788036
  - Make sure syspurpose is set before registration in GUI (mkolman)
    Resolves: rhbz#1788207
    Related: rhbz#1788036
  - Update pep8speaks checker configuration for the branch (rvykydal)
    Related: rhbz#1788036


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.11-1
changelog:
  - Fix DBus error detection (mkolman)
    Related: rhbz#1794767
  - Make sure RHSM HTTP proxy port from kickstart is an integer (mkolman)
    Resolves: rhbz#1794025


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.14-1
changelog:
  - Do not allow selecting ignored disk in GUI even if it is the only one
    (rvykydal)
    Resolves: rhbz#1786561


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.2.15-1
changelog:
  - Fix installation source switching to/from CDN (mkolman)
    Resolves: rhbz#1788487
    Resolves: rhbz#1790383
    Resolves: rhbz#1791376


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.9.1-1
changelog:
  - driver_updates: migrate driver_updates.py to pep8 format (jkonecny)
    Related: rhbz#2154904
  - driver_updates: adding tests for the new logging solution (jkonecny)
    Related: rhbz#2154904
  - driver_updates: add lot of debug logs for easier debugging (jkonecny)
    Related: rhbz#2154904
  - driver_updates: extend where we print log messages (jkonecny)
    Resolves: rhbz#2154904
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#1656662
  - Add DNS search and ignore options from kickstart (vslavik)
    Resolves: rhbz#1656662
  - Add missing documentation about OEMDRV (jkonecny)
    Related: rhbz#1770969
  - oemdrv: wait up to 5 seconds for disks to be handled (rmetrich)
    Resolves: rhbz#1770969


author: Vladimír Slávik <vslavik@redhat.com> - 33.16.9.2-1
changelog:
  - Stop infinite wait for CDROM when KS is processed (jkonecny)
    Resolves: rhbz#2209602
  - Apply --noverifyssl option for liveimg kickstart command (jstodola)
    Resolves: rhbz#1886985
  - Change driver_updates exit info messages to debug (jkonecny)
    Related: rhbz#2154904


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.3-1
changelog:
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#1855371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2211857


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.9.5-1
changelog:
  - [ja_JP] - Need to update string on anaconda screen for installation completed
    Resolves: rhbz#2216746


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.1-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: RHEL-13151
    Resolves: RHEL-4795
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: RHEL-11168


author: Martin Kolman <mkolman@redhat.com> - 33.16.10.2-1
changelog:
  - Propagate a lazy proxy of the storage model (vponcova)
    Resolves: RHEL-16276
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-4784


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.10.4-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23344
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23344


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.17-1
changelog:
  - Revert root password spoke to 8.2 behavior (vslavik)
    Resolves: rhbz#1851220
  - Remove the DBus method ConfigureNTPServiceEnablementWithTask (vponcova)
    Resolves: rhbz#1862492
  - Add the function is_service_installed (vponcova)
    Related: rhbz#1862492


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.18-1
changelog:
  - subscription: Only restart payload when needed (mkolman)
    Resolves: rhbz#1861351
  - Reset the state of the custom partitioning spoke (vponcova)
    Resolves: rhbz#1868330
  - network: fix parsing of hostname from ip= if mac is defined in dhcp
    (rvykydal)
    Resolves: rhbz#1852560


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.20-1
changelog:
  - network: do not try to activate connection that has not been found (rvykydal)
    Resolves: rhbz#1869323
  - network: add timeout for synchronous activation of a connection (rvykydal)
    Related: rhbz#1869323


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.21-1
changelog:
  - Fix traceback when removing additional repository (jkonecny)
    Resolves: rhbz#1871037
  - Do not mount as RW in Dracut (jkonecny)
    Resolves: rhbz#1871049
  - Clean up s390 partitioning check (vslavik)
    Resolves: rhbz#1855724


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.22-1
changelog:
  - network: fix inst.dhcpclass boot option (rvykydal)
    Resolves: rhbz#1870692
  - network: fix kickstart network --dhcpclass option (rvykydal)
    Resolves: rhbz#1869224


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.23-1
changelog:
  - subscription: Assure payload restart on DVD install after registration
    (mkolman)
    Resolves: rhbz#1873164
  - Document the restart_payload argument of subscription helper functions
    (mkolman)
    Related: rhbz#1873164


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.24-1
changelog:
  - network: do not add superfluous quotes to inst.dhcpclass identifier
    (rvykydal)
    Related: rhbz#1870692


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.25-1
changelog:
  - Root password is mandatory if there is *not* admin user. (rvykydal)
    Related: rhbz#1876727
  - Make locked root be completed only for kickstart (vslavik)
    Resolves: rhbz#1876727


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.3.26-2
changelog:
  - network: do not crash on infiniband devices activated in initramfs
    (rvykydal)
    Resolves: rhbz#1890261


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.6-1
changelog:
  - Initialize librepo logger (pkratoch)
    Resolves: rhbz#1908286
  - Add RPM tests support for owners on rhel-8 (jkonecny)
    Related: rhbz#1885635
  - Use latests RHEL-8 buildroot in containers (jkonecny)
    Related: rhbz#1885635
  - Implement rpm-tests execution in the container (jkonecny)
    Related: rhbz#1885635


author: Martin Kolman <mkolman@redhat.com> - 33.16.4.7-1
changelog:
  - Allow to disable the Security module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Services module (vponcova)
    Resolves: rhbz#1913689
  - Support should_run for standalone GUI spokes (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Localization module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Timezone module (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the network installation (vponcova)
    Resolves: rhbz#1913689
  - Allow to disable the Users module (vponcova)
    Resolves: rhbz#1913689
  - Always show pykickstart parse warnings (vslavik)
    Resolves: rhbz#1897663


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.9-1
changelog:
  - Change warning messages of missing prefix for RH products (jkonecny)
    Resolves: rhbz#1897657
  - Do not use cache for container build (jkonecny)
    Related: rhbz#1885635
  - Fix missing inst. prefixes for bootloader options in documentation (jkonecny)
    Related: rhbz#1897657
  - Fix show missing inst. prefix warning appropriately (jkonencny)
    Related: rhbz#1897657
  - Remove docs where we tell users that inst. prefix is not required (jkonecny)
    Related: rhbz#1897657
  - Print warning for boot options without inst. prefix (jkonecny)
    Related: rhbz#1897657
  - Add missing dracut commands as missing inst. prefix warning (jkonecny)
    Related: rhbz#1897657
  - Enable warning when inst. prefix is not used (jkonecny)
    Related: rhbz#1897657


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.10-1
changelog:
  - Mark the rhsm and syspurpose kickstart commands as useless (vponcova)
    Resolves: rhbz#1921787
  - Fix getting kernel version list for liveimg (rvykydal)
    Resolves: rhbz#1919463


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.11-1
changelog:
  - Take dnf substitutions from installer environment configuration (rvykydal)
    Resolves: rhbz#1920735
  - Fix exclude arguments of tar payload extracting. (rvykydal)
    Resolves: rhbz#1924118


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.14-1
changelog:
  - Fix crash in NTP servers GUI dialog on late network configuration (rvykydal)
    Resolves: rhbz#1938168


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.15-1
changelog:
  - network: clone connections from intramfs to persistent config (rvykydal)
    Resolves: rhbz#1910438
  - network: match also connections named by MAC created by NM in initramfs
    (rvykydal)
    Related: rhbz#1910438
  - network: do not reset ipv6.addr-gen-mode in tui network configuration
    (rvykydal)
    Related: rhbz#1873021
  - network: set addr-gen-mode of Anaconda default connections to eui64
    (rvykydal)
    Related: rhbz#1873021
  - network: default to addr-gen-mode eui64 (rvykydal)
    Resolves: rhbz#1873021


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.1-1
changelog:
  - subscription: allow dates in ISO 8601 format (ptoscano)
    Resolves: rhbz#1947445
  - Add RHEL-specific advice to X timeout message (vslavik)
    Related: rhbz#1918702
  - Fix AskVNCSpoke call (vslavik)
    Related: rhbz#1918702
  - Improve X startup error messages (vslavik)
    Related: rhbz#1918702
  - Terminate X server after timeout and restore crash test handler (vslavik)
    Related: rhbz#1918702
  - Reorganize control flow in startX (vslavik)
    Related: rhbz#1918702
  - Handle SIGUSR1 correctly after Xorg timeout (vslavik)
    Resolves: rhbz#1918702
  - Refactor minor details in startX (vslavik)
    Related: rhbz#1918702
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1946347
  - Avoid a race condition during Connect to Red Hat spoke initialization
    (mkolman)
    Resolves: rhbz#1950053


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.2-1
changelog:
  - Use modinfo to check ko before modprobe (t.feng94)
    Resolves: rhbz#1577544
  - network: do not crash on team without IP config (rvykydal)
    Resolves: rhbz#1929008
  - Add the "Encrypt my data" checkbox to the custom partitioning spoke
    (vponcova)
    Resolves: rhbz#1903786
  - Allow encryption of thin logical volumes (vponcova)
    Resolves: rhbz#1877777
  - Don't automatically execute the default partitioning (vponcova)
    Resolves: rhbz#1954408
  - Don't run the execute method in the kickstart installation in TUI by default
    (vponcova)
    Related: rhbz#1954408
  - Don't run the execute method in the kickstart installation in GUI by default
    (vponcova)
    Related: rhbz#1954408
  - Enable closest mirror in CentOS Stream config (carl)
    Resolves: rhbz#1953698
  - Add CentOS Stream config (riehecky)
    Resolves: rhbz#1953698


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.3-1
changelog:
  - Check source type directly, not via DBus (mkolman)
    Resolves: rhbz#1941578
  - Remove autostep functionality (vslavik)
    Resolves: rhbz#1976913
  - Make it possible to skip install time Insights errors (mkolman)
    Resolves: rhbz#1931069
  - Fix CDN button visibility (mkolman)
    Resolves: rhbz#1903178
  - network: do not bind virtual devices to mac (rvykydal)
    Resolves: rhbz#1963834
  - Add a log message for successful installation (vslavik)
    Resolves: rhbz#1949487


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.4-1
changelog:
  - Disable anaconda-core's requirement on subscription-manager on CentOS (carl)
    Resolves: rhbz#1984958
  - Show suggestions for an error caused by inconsistent sector sizes (vponcova)
    Resolves: rhbz#1935722
  - Use a custom stylesheet to define CentOS-specific stylesheet data (carl)
    Related: rhbz#1974149
  - Use RHEL help content for RHV/Ovirt (mkolman)
    Resolves: rhbz#1915910
  - Move post installation scripts to the end of queue (lveyde)
    Resolves: rhbz#1970879
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#1937208
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#1937208


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.5-1
changelog:
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2001913


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.1-1
changelog:
  - Payload should wait for all storage related threads to finish (mkolman)
    Resolves: rhbz#2007615
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2002722


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.2-1
changelog:
  - Make network spoke GUI more robust in cases of missing NM Client. (rvykydal)
    Resolves: rhbz#2003115
  - Do not crash on missing NM Client on --vnc installations (rvykydal)
    Related: rhbz#2003115
  - In installer environment set static, not transient hostname (rvykydal)
    Resolves: rhbz#1975349
  - Add product config for AlmaLinux (andrew.lukoshko)
    Resolves: rhbz#2003692
  - Fix creation of user account with empty password (mkolman)
    Resolves: rhbz#1687315


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.3-1
changelog:
  - Fix application of network --mtu kickstart option in Anaconda (rvykydal)
    Resolves: rhbz#2018301
  - Configure the multilib policy of the target system (vponcova)
    Resolves: rhbz#1571727
  - network: apply kickstart network --nodefroute also from stage2 (rvykydal)
    Resolves: rhbz#1990145


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.4-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#1824422


author: Martin Kolman <mkolman@redhat.com> - 33.16.6.5-1
changelog:
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#1981807
  - Fix the condition for entering the root configuration (vponcova)
    Related: rhbz#1981807
  - Fix the condition for completing the root configuration (vponcova)
    Resolves: rhbz#1981807


author: Vendula Poncova <vponcova@redhat.com> - 33.16.6.6-1
changelog:
  - Bump subscription-manager version (mkolman)
    Related: rhbz#1968574
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#1968574
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#1968574
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#1968574


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.3-1
changelog:
  - Cleanup unneeded NFS repo with rd.live.ram parameter (mmatsuya)
    Resolves: rhbz#1970726
  - Fix root password and LUKS passphrase visibility toggle (mkolman)
    Resolves: rhbz#1885879


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.5-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2000650
  - GUI: Show the dialog for a missing passphrase in an enlight box (vponcova)
    Related: rhbz#2029101
  - GUI: Ask for a missing passphrase during automated installations (vponcova)
    Resolves: rhbz#2029101
  - Create functions for a missing passphrase in pyanaconda.ui.lib (vponcova)
    Related: rhbz#2029101
  - Add missing period when concatenating password error strings (jkonecny)
    Resolves: rhbz#2075419


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.6-1
changelog:
  - dnf: apply the /etc/dnf/dnf.conf configuration file in the installer
    (rvykydal)
    Resolves: rhbz#1899494


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.7.7-1
changelog:
  - bootloader: do not consider non-ibft iscsi disk as usable for bootloader
    (rvykydal)
    Resolves: rhbz#2002629


author: Martin Kolman <mkolman@redhat.com> - 33.16.7.8-1
changelog:
  - Allow to omit WWPN and LUN for NPIV-enabled zFCP devices (jstodola)
    Resolves: rhbz#1497086
  - Reduce the width of the zFCP dialog (jstodola)
    Related: rhbz#1497086


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.7.9-1
changelog:
  - Add tooltip to the Insights checkbox (jkonecny)
    Resolves: rhbz#2069178
  - Increase the minimal suggested size for /boot (vslavik)
    Resolves: rhbz#1844423


author: Vladimir Slavik <vslavik@redhat.com> - 33.16.7.10-1
changelog:
  - Disable the Unregister button during unregistration (mkolman)
    Resolves: rhbz#2068195
  - Install rdma-core if infiniband network device is found (rvykydal)
    Resolves: rhbz#2050356


author: Martin Kolman <mkolman@redhat.com> - 33.16.8.2-1
changelog:
  - network: remove activate_connection_sync (rvykydal)
    Related: rhbz#2127057
  - network: use new NM client in ConsolidateInitramfsConnetionsTask (rvykydal)
    Related: rhbz#2127057
  - network: use new NM client instance in SetRealOnbootValuesTask (rvykydal)
    Related: rhbz#2127057
  - network: add tests for sync_call_glib (rvykydal)
    Related: rhbz#2127057
  - network: use separate main conext for NM client in threads (rvykydal)
    Related: rhbz#2127057
  - network: split add_and_activate_connection_sync function (rvykydal)
    Related: rhbz#2127057
  - network: add NM connections synchronously (rvykydal)
    Related: rhbz#2127057
  - infra: Use the Bugzilla API key in the `makebumpver` script (vponcova)
  - infra: Remove Jenkins from makebumpver (vslavik)


author: Martin Kolman <mkolman@redhat.com> - 33.16.8.3-1
changelog:
  - network: commit changes synchronously when dumping autoconnections (rvykydal)
    Related: rhbz#2127057
  - Initialize empty disks on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#2094977
  - infra: Set test vars from templates (vslavik)
  - infra: Port check for matching templates from master (vslavik)
  - infra: Port templating mechanism from master (vslavik)
  - dracut: read filename dhcp option from dhcpopts file (rvykydal)
    Related: rhbz#1991516


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.8.4-1
changelog:
  - Disable the concurrency check in the error dialog in TUI (vponcova)
    Resolves: rhbz#1807491
  - Support bond device activated in initramfs from kickstart (rvykydal)
    Resolves: rhbz#1940919


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.5-1
changelog:
  - Delegate auto-attach handling to RHSM (mkolman)
    Resolves: rhbz#2083318
  - Test the InstallerStorage.copy method (vponcova)
    Related: rhbz#1913035
  - Show multiple bootloader devices on the Manual Partitioning screen (vponcova)
    Resolves: rhbz#1913035
  - Implement the Root.copy method (vponcova)
    Related: rhbz#1913035
  - Redefine the Blivet.roots attribute (vponcova)
    Related: rhbz#1913035
  - Redefine the Blivet.copy method (vponcova)
    Related: rhbz#1913035
  - Use correct hint for VNC password boot option (jstodola)
    Resolves: rhbz#2125679


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.6-1
changelog:
  - payload: fix repo --includepkgs option (rvykydal)
    Resolves: rhbz#2014103
  - bootloader/zipl.py: update for zipl >= 2.25.0 (dan)
    Resolves: rhbz#2157917


author: Jiri Konecny <jkonecny@redhat.com> - 33.16.8.7-1
changelog:
  - Report registration errors from kickstart (mkolman)
    Resolves: rhbz#2127072
  - Make text in custom_storage_helper more accurate (ozobal)
    Resolves: rhbz#2063288


author: Martin Kolman <mkolman@redhat.com> - 8.0.2-1
changelog:
  - add initial RHEL8 help content
    Resolves: rhbz#1634756
  - adapt spec file to new help content
    Related: rhbz#1634756


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.20-1
changelog:
  - annocheck: Add more glibc function names.  (#2017039)
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.23-1
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.  (#2017363)
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)


author: Nick Clifton <nickc@redhat.com> - 10.27-1
changelog:
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)


author: Nick Clifton <nickc@redhat.com> - 10.28-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.  (#2026944)
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: Nick Clifton <nickc@redhat.com> - 10.58-1
changelog:
  - Rebase to 10.58.  (#2067148)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)
  - Spec File: Use a different method to disable the annobin plugin  (#2054571)
  - Annocheck: Accept static GO binaries.  (#2053606)
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
  - GCC Plugin: Do not fail if a section cannot be attached to a group.
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)
  - Annocheck: Add option to disable instrumentation test.
  - GCC Plugin: Fix building with gcc-12.
  - Spec file: Add requirement on cpio for annocheck.  (#2039747)
  - Annocheck: Add even more glibc function names. (#2037333)
  - Annocheck: ARM: Do not fail tests that rely upon annobin notes.
  - Annocheck: Extend list of known glibc functions.  (#2037333)
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)
  - Annocheck: Add special case for x86_64 RHEL-7 gaps.  (#2031133)
  - Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode.  (#2030298)
  - GCC Plugin: Do not record missing -mstackrealign in LTO mode.
  - Tests: Fix gaps and stat tests to use newly built annobin plugin.  (#2028063)
  - Annocheck: Ignore gaps in binaries at least partial built by golang.  (#2028583)
  - Annocheck: Allow spaces in gloang symbols.  (#2028583)
  - Annocheck: Initial deployment of libannocheck.  (#2028063)
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)
  - Annocheck: Skip missing fortify/warning notes for ARM32.


author: Nick Clifton <nickc@redhat.com> - 10.64-1
changelog:
  - Annocheck: Add more special cases for AArch64 glibc on RHEL-8.  (#2072082)
  - llvm-plugin: Fix a thinko in the sources.
  - gcc-plugin: Add remap of OPT_Wall.
  - configure: Fix typo in top level configure.ac.
  - Add support for building using meson+ninja.
  - Annocheck: Fix test for AArch64 property notes.  (#2068657)
  - gcc-plugin: Do not issue warning messages for autoconf generated source files.  (#2009958)


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Rebuild against LLVM 14.  (#2064521)
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
  - gcc-plugin: Add support for CLVC_INTEGER options.


author: Nick Clifton <nickc@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94.  (#2151312)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)
  - gcc-plugin: Fix typo in configure.ac.
  - Add support for RISC-V.
  - Annocheck: Add another special case for glibc rpms.  (#2083070)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)
  - Annocheck: Add more glibc exceptions + check PT_TLS segments.  (#2081131)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Rebase to 11.12.  Brings in:
  - GCC Plugin: Do not run if other plugins are active.  (#2162746)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate debuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not treat object files as if they did not contain any code.  (#2158182)
  - Annocheck: Add more special glibc filenames.
  - Annocheck: Improve handling of tool versions.
  - GCC plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Avoid using debug filename when parsing notes in a debuginfo file.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 8.73-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1657912)


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703500)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)    
  - Add tests of clang command line options recorded in the DW_AT_producer attribute.


author: Nick Clifton <nickc@redhat.com> - 8.76-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1720179)


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 8.89-1
changelog:
  - Update to version 8.89.  (#1766631)
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 8.89-1
changelog:
  - Update to version 8.89.  (#1766631)
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.  (#1743635)


author: Nick Clifton <nickc@redhat.com> - 9.19-1
changelog:
  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
  - Annobin: Fix access to the -flto and -fsanitize flags.
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
  - Fix clang plugin to use hidden symbols.
  - Add ability to build clang plugin (disabled by default).
  - Annocheck: Fix error printing out the version number.
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.  (#1803173, #1828797)
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
  - Annocheck: Detect Fortran compiled programs.  (#1824393)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.32-1
changelog:
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)


author: Nick Clifton <nickc@redhat.com> - 9.35-2
changelog:
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)


author: Nick Clifton <nickc@redhat.com> - 9.46-1
changelog:
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.49-1
changelog:
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)(#1904479)
  - gcc plugin: Add support for GCC 11's cl_vars array.


author: Nick Clifton <nickc@redhat.com> - 9.64-1
changelog:
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1960299)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-3
changelog:
  - Copy changes made to linux-system-roles in this PR:
    https://src.fedoraproject.org/rpms/linux-system-roles/pull-request/13#
  - Make spec file available for older versions of OSes.
  - Drop python3-six dependency which was used by lsr_role2collection.py.
  - Drop html files from rpm if the version has no markdown parser.
  - Drop unnecessary python scripts which include python3 only code, e.g.,
    f-strings.
    Resolves rhbz#1970165


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-1
changelog:
  - Update the version to be consistent with the Galaxy collection at
    https://galaxy.ansible.com/microsoft/sql


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-2
changelog:
  - Make the ansible_collection_files macro defined in Fedora automatically and
    in RHEL manually consistent - having slash at the end to clean double-slashes


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-1
changelog:
  - Add the meta-runtime option from the latest auto-maintenance
  - Use the latest mssql that ships fixes for issues #24,#25,#26,#27,#28,35


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-2
changelog:
  - Copy fix for RHEL 7 builds from rhel-system-roles
    Link to the original fix:
    https://src.fedoraproject.org/rpms/linux-system-roles/c/093981119f99ac51a6e06a2714b587e4e2fe287c


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2057651 (EL8)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057651 (EL8)
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2038256 (EL8)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2065206


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2065206
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2067175


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066338
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2039990
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-3
changelog:
  - Update mssql commit
    Resolves: rhbz#2066338
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120714
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066338
  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120713
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2066338
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2120713
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2129869
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2129872
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-2
changelog:
  - Simplify spec file
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2129106


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    Resolves: rhbz#2129106
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2144820
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2144821
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2144852
  - Support SQL Server version 2022
    Resolves: rhbz#2153427
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2129106
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-528


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-17080
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-19202
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19204
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19203


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.2-1
changelog:
  - Update role to version 2.2.2 to fix HA
    Resolves: RHEL-19202
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23456


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-17080
  - ExcludeArch: i686


author: Paul Belanger <pabelanger@redhat.com> - 2.11.2-1
changelog:
  - ansible-core 2.11.2 released.
  - Drop bundled version of resolvelib in favor of
    python38-resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.13.1-1
changelog:
  - ansible-core 2.13.1 release (rhbz#2103699)
  - add bundled version of jinja2, markupsafe and resolvelib
  - rebuild with python 3.9


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-2
changelog:
  - Updated RPM description for ansible-freeipa 0.1.8
    Related: RHBZ#1748986
  - ipahost: Fix choices of auth_ind parameter, allow to reset parameter
    Resolves: RHBZ#1783992
  - ipauser: Allow reset of userauthtype, do not depend on first,last for mod
    Resolves: RHBZ#1784474
  - ipahost: Enhanced failure msg for member params used without member action
    Resolves: RHBZ#1783948
  - Add missing attributes to ipasudorule
    Resolves: RHBZ#1788168
    Resolves: RHBZ#1788035
    Resolves: RHBZ#1788024
  - ipapwpolicy: Use global_policy if name is not set
    Resolves: RHBZ#1797532
  - ipahbacrule: Fix handing of members with action hbacrule
    Resolves: RHBZ#1787996
  - ansible_freeipa_module: Fix comparison of bool parameters in compare_args_isa
    Resolves: RHBZ#1784514
  - ipahost: Add support for several IP addresses and also to change them
    Resolves: RHBZ#1783979
    Resolves: RHBZ#1783976
  - ipahost: Fail on action member for new hosts, fix dnsrecord_add reverse flag
    Resolves: RHBZ#1803026


author: Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
changelog:
  - Update to version 0.1.10:
    - ipaclient: Not delete keytab when ipaclient_on_master is true
    - New module to manage dns forwarder zones in ipa
    - Enhancements of sudorule module tests
    - Gracefully handle RuntimeError raised during parameter validation in
      fail_jso
    - ipareplica_prepare: Fix module DOCUMENTATION
    - ipa[server,replica,client]: setup_logging wrapper for
      standard_logging_setup
    - Created FreeIPABaseModule class to facilitate creation of new modules
    - New IPADNSZone module
    - Add admin password to the ipadnsconfig module tests
    - Added alias module arguments in dnszone module
    - Fixed a bug in AnsibleFreeIPAParams
    - utils/build-galaxy-release: Do not add release tag to version for galaxy
    - ipaserver docs: Calm down module linter
    - galaxy.yml: Add system tag
    - ipareplica_setup_kra: Remove unused ccache parameter
    - ipareplica_setup_krb: krb is assigned to but never used
    - utils/galaxy: Make galaxy scripts more generic
    - galaxyfy-playbook.py: Fixed script name
    Related: RHBZ#1818768


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-2
changelog:
  - Fixes service disable when service has no certificates attached
    Resolves: RHBZ#1836294
  - Add suppport for changing password of symmetric vaults
    Resolves: RHBZ#1839197
  - Fix forwardzone issues
    Resolves: RHBZ#1843826
    Resolves: RHBZ#1843828
    Resolves: RHBZ#1843829
    Resolves: RHBZ#1843830
    Resolves: RHBZ#1843831
  - ipa[host]group: Fix membermanager unknow user issue
    Resolves: RHBZ#1848426
  - ipa[user,host]: Fail on duplucate names in the users and hosts lists
    Resolves: RHBZ#1822683


author: Thomas Woerner <twoerner@redhat.com> - 0.1.12-6
changelog:
  - Allow to manage multiple dnszone entries
    Resolves: RHBZ#1845058
  - Fixed error msgs on FreeIPABaseModule subclasses
    Resolves: RHBZ#1845051
  - Fix `allow_create_keytab_host` in service module
    Resolves: RHBZ#1868020
  - Modified return value for ipavault module
    Resolves: RHBZ#1867909
  - Add support for option `name_from_ip` in ipadnszone module
    Resolves: RHBZ#1845056
  - Fixe password behavior on Vault module
    Resolves: RHBZ#1839200


author: Thomas Woerner <twoerner@redhat.com> - 0.1.2-1
changelog:
  - update to version 0.1.2
    - Now a new Ansible Collection
    - Fix gssapi requirement for OTP: It is only needed if keytab is used with
      OTP now.
    - Fix wrong ansible argument types
    - Do not fail on textwrap for replica deployments with CA
    - Ansible lint and galaxy fixes
    - Disable automatic removal of replication agreements in uninstall
    - Enable freeipa-trust service if adtrust is enabled
    - Add support for hidden replica
    - New topology managament modules
    - Add support for pki_config_override
    - Fix host name setup in server deployment
    - Fix errors when ipaservers variable is not set
    - Fix ipaclient install role length typo
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.3-1
changelog:
  - update to version 0.1.3
    - ipaclient_test: Fix Python2 decode use with Python3
    - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
    - ipaclient_get_otp: Remove ansible_python_interpreter handling
    - ipaclient: Use omit (None) for password, keytab, no string length checks
    - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
    - ipaclient: Report error message if ipaclient_get_otp failed
    - Fixes #17 Improve how tasks manage package installation
    - ipareplica: The dm password is not needed for ipareplica_master_password
    - ipareplica: Use ipareplica_server if set
    - ipatopologysegment: Allow domain+ca suffix, new state: checked
    - Documentation updates
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.4-2
changelog:
  - ansible_ipa_client: Always set options.unattended (RHBZ#1726645)
  - ipaserver_prepare: Properly report error, do show trace back (RHBZ#1726668)
  - ipa[server,replica,client]: RHEL-8 specific vars files (RHBZ#1727095)
  - ipatopology modules: Use ipaadmin_ prefix for principal and password
    (RHBZ#1727101)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
changelog:
  - update to version 0.1.6
    - Lots of documentation updates in READMEs and modules
    - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
    - Flake8 and pylint reated fixes
    - Fixed wrong path to CheckedIPAddress class in ipareplica_test
    - Remove unused ipaserver/library/ipaserver.py
    - No not use wildcard imports for modules
    - ipareplica: Add support for pki_config_override
    - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
    - ipareplica_prepare: Properly initialize pin and cert_name variables
    - ipareplica: Fail with proper error messages
    - ipaserver: Properly set settings related to pkcs12 files
    - ipaclient: RawConfigParser is not always provided by six.moves.configparser
    - ipaclient_setup_nss: paths.GETENT is not available before
      freeipa-4.6.90.pre1
    - ipaserver_test: Initialize value from options.zonemgr
    - ipareplica_setup_custodia: create_replica only available in newer releases
    - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
    - ipa[server,replica]: Set _packages_adtrust for Ubuntu
    - New build script for galaxy release
    - New utils script to update module docs
  - Changes from ansible-freeipa-0.1.5
    - Support for IPA 4.8.0
    - New user management module
    - New group management module
    - ipaserver: Support external signed CA
    - RHEL-8 specific vars files to be able to install needed modules
      automatically
    - ipareplica: Fixes for certmonger and kra setup
    - New tests folder
    - OTP related updates to README files


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-3
changelog:
  - ipatopologysegment: Store suffix for commands in command list (RHBZ#1733547)
  - ipatopologysegment: Fail for missing entry with reinitialized (RHBZ#1733559)


author: Thomas Woerner <twoerner@redhat.com> - 0.1.7-1
changelog:
  - Update to version 0.1.7
    - Add debian support for ipaclient
    - Added support for predefining client OTP using ipaclient_otp
    - ipatopologysegment: Store suffix for commands in command list
    - ipatopologysegment: Fail for missing entry with reinitialized
    - Utils scripts: ansible-ipa-[server,replica,client]-install
    - ipaserver_test,ipareplica_prepare: Do not return _pkcs12_file settings
    - ansible_freeipa_module: Add support for GSSAPI
    - ansible_ipa_client: Drop import of configure_nsswitch_database
    - New host management module
    - New hostgroup management module
    - ipagroup: Remove unused member_[present,absent] states
    - external-ca tests: Fix typo in inventory files
    - tests/external-signed-ca tests: Fix external-ca.sh to use proper serials
    - ipagroup: Rework to use same mechanisms as ipahostgroup module
    - ansible_freeipa_module: api_command should not have extra try clause
    - ansible_freeipa_module: compare_args_ipa needs to compare lists orderless
    - ansible_freeipa_module: New function api_check_param
    - ansible_freeipa_module: New functions module_params_get and _afm_convert
    - ansible_freeipa_module: Add missing to_text import for _afm_convert
    - ansible_freeipa_module: Convert tuple to list in compare_args_ipa
    - ansible_freeipa_module: New function api_get_realm
    - ipauser: User module extension
    - New sudocmd management module
    - New sudocmdgroup management module
    - ansible_freeipa_module: Convert int to string in compare_args_ipa
    - New pwpolicy management module
    - New hbacsvc (HBAC Service) management module
    - New hbacsvcgroup (HBAC Service Group) management module
    - ipagroup: Properly support IPA versions 4.6 and RHEL-7
    - ipagroup: Fix changed flag, new test cases
    - ipauser: Add info about version limitation of passwordexpiration
    - New hbacrule (HBAC Rule) management module
    - ipahostgroup: Fix changed flag, support IPA 4.6 on RHEL-7, new test cases
    - New sudorule (Sudo Rule) management module
    - ipauser: Support 'sn' alias of 'last' for surname
    - Update galaxy.yml: Update description, drop empty dependencies
    - Update ipauser.py: Fix typo in users.name description
    - ipaclient: Fix misspelled sssd options
    - ipauser: Return generated random password
    - ipahost: Return generated random password
    - Added context configuration to api_connect
    - ansible_freeipa_module: Better support for KRB5CCNAME environment variable
    - ipa[server,replica,client]: Add support for CentOS-8
    - ipahost: Extension to be able handle several hosts and all settings
    - Flake8 fixes
    - Documentation updates
    - Cleanup
    Resolves: RHBZ#1748986


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
changelog:
  - Update to version 0.1.8 (bug fix release)
    - roles/ipaclient/README.md: Add information about ipaclient_otp
    - Install and enable firewalld if it is configured for ipaserver and
      ipareplica roles
    - ipaserver_test: Do not use zone_overlap_check for domain name validation
    - Allow execution of API commands that do not require a name
    - Update README-host: Drop options from allow_*keytab parameters docs
    - ipauser: Extend email addresses with default email domain if no domain is
      given
      Resolves: RHBZ#1747413
    Related: RHBZ#1748986


author: Thomas Woerner <twoerner@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.0
    With tests sub package
    Resolves: RHBZ#1891826
  - Support for firewalld zone in ipaserver and ipareplica roles 
    Resolves: RHBZ#1894488
  - ipagroup: Add support for the IPA CLI option `posix`
    Resolves: RHBZ#1894493
  - New ipabackup role for backup and restore
    Resolves: RHBZ#1894494
  - New management module ipadelegation
    Resolves: RHBZ#1894496
  - New management module ipalocation
    Resolves: RHBZ#1894497
  - New management module ipaprivilege
    Resolves: RHBZ#1894498
  - New management module ipapermission
    Resolves: RHBZ#1894499
  - New management module iparole
    Resolves: RHBZ#1894500
  - New management module ipaselfservice
    Resolves: RHBZ#1894501
  - New management module ipatrust
    Resolves: RHBZ#1894502
  - Fixed log of vault data return when retrieving to a file
    Resolves: RHBZ#1875378
  - ipadnszone: Fix modification o SOA serial with other attributes
    Resolves: RHBZ#1876896
  - Fix symmetric vault password change when using password_files
    Resolves: RHBZ#1879004
  - ipadnsrecord: fix record modification behavior
    Resolves: RHBZ#1880409
    Resolves: RHBZ#1881452
  - ipadnsrecord: fix record update when multiple records exist
    Resolves: RHBZ#1881436


author: Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
changelog:
  - Update to version 0.3.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
    Related: RHBZ#1891826
  - ipabackup: Fix undefined vars for conditions in shell tasks without else
    Related: RHBZ#1894494


author: Thomas Woerner <twoerner@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2
    Related: RHBZ#1891826
  - Not able to add additional privileges with existing privilege in role module
    Resolves: RHBZ#1893678
  - Required error message while adding non-existing members in role handling
    Resolves: RHBZ#1893679
  - Not able to add new members with existing members role handling
    Resolves: RHBZ#1893684
  - service members are removed while updating other members in role handling
    Resolves: RHBZ#1893685
  - after changing the vault type from standard to symmetric, Salt is missing
    Resolves: RHBZ#1880367
  - After changing the vault type from symmetric to asymmetric, Salt is present
    in the asymmetric vault
    Resolves: RHBZ#1880377
  - After changing the vault type from asymmetric to the standard vault, the
    Public key is present in the standard vault
    Resolves: RHBZ#1880378
  - Not able to replace public-key-file to the public-key in asymmetric vault
    type
    Resolves: RHBZ#1880862
  - ipauser module does not seem to support --check flag to ansible-playbook
    Resolves: RHBZ#1893675
  - Not able to add additional attributes with existing attributes in permission
    handling
    Resolves: RHBZ#1893687
  - Privilege variable is removed from permission handling
    Resolves: RHBZ#1893688


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1959875
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1936869
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1921654
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1922060
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1935123
  - New management module ipaserver
    Resolves: RHBZ#1966493
  - New management module ipaautomember
    Resolves: RHBZ#1966496


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Related: RRBZ#1969847


author: Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
changelog:
  - Update to version 0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    Related: RHBZ#1959875
  - automember: Fix action to be automember or member, not service
    Resolves: RRBZ#1976923
  - automember: Fix result["failed"] issues with conditions
    Resolves: RRBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1959875
  - automember: Verify condition keys
    Related: RHBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080321
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103928
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104842


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080321
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110491
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110526
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110539


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080321
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110491


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125591
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2121362
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2120415
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069174


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125591
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2015288
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127447
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127885
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127894
  - New netgroup management module
    Resolves: RHBZ#2127908
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127912
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2128460
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134530
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132729


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125591
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150332
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144724


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125591
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165951


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170371
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127901
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175762
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127904
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183820
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175766
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#1759785
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175755


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170371
  - Multiple service management
    Resolves: RHBZ#2175769
  - New ipacert module
    Resolves: RHBZ#2127906
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214295


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170371
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050158
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2168022
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215532
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215534
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215539
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215543
  - Update authtypes authind
    Resolves: RHBZ#2215540


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13746
  - New idoverridegroup management module.
    Resolves: RHEL-16935
  - New idoverrideuser management module.
    Resolves: RHEL-16941
  - New idview management module.
    Resolves: RHEL-16933
  - New idp management module.
    Resolves: RHEL-16938
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16682


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13746
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4963
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13759
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17955
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17958
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-4934
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19129
  - Idempotency fixes
    Resolves: RHEL-13755
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19133
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19135
  - ipa-server installation failing
    Resolves: RHEL-23633


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010621
  - Add ability to run modules remotely
    Resolves: RHBZ#1918025
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010639


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010621
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#1999912
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999913
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#1999915
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999916
  - Not able to update existing automember rule description
    Resolves: RHBZ#2021393


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010621
  - Add module to manage automount maps
    Resolves: RHBZ#2040462
  - Add module to manage automount keys
    Resolves: RHBZ#2040464
  - Client deploy failing with ipaadmin keytab and OTP due to latest ansible
    version
    Resolves: RHBZ#2041753


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-2
changelog:
  - ipatrust: fix range_type and set valid choices for trust_type
    Resolves: RHBZ#2132967
  - ipaserver/ipareplica: Always generate SIDs
    Resolves: RHBZ#2132970
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132975
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2132989
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2132995


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080321
  - New idrange management module.
    Resolves: RHBZ#1921545
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2048552
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069170
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069172
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069173


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086993
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076554


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-2
changelog:
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132974
  - Replica Install Setup DNS fails
    Resolves: RHBZ#2132988
  - ipaconfig: Add support for SID related attributes
    Resolves: RHBZ#2132994
  - paconfig: Fix fail_json calls
    Resolves: RHBZ#2135753
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2135754
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2135775


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-2
changelog:
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2189235
  - ipaclient: Defer creating the final krb5.conf on clients
    Resolves: RHBZ#2189238


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0:1.10.5-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Omair Majid <omajid@redhat.com> - 3.1.100-0.4.preview3
changelog:
  - Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK 3.1.100-preview3-014645
  - Resolves: RHBZ#1711405


author: Omair Majid <omajid@redhat.com> - 3.1.101-1
changelog:
  - Update to .NET Core Runtime 3.1.1 and SDK 3.1.101
  - Resolves: RHBZ#1794437 - CVE-2020-0602
  - Resolves: RHBZ#1794435 - CVE-2020-0603


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core SDK 3.1.107 and Runtime 3.1.7
  - Resolves: RHBZ#1862590
  - Resolves: RHBZ#1861114


author: Omair Majid <omajid@redhat.com> - 3.1.108-1
changelog:
  - Update to .NET Core SDK 3.1.108 and Runtime 3.1.8
  - Resolves: RHBZ#1874503
  - Resolves: RHBZ#1873454


author: Andrew Slice <aslice@redhat.com> - 3.1.117-1
changelog:
  - Update to .NET SDK 3.1.117 and Runtime 3.1.17
  - Fix renaming of coreclr to dotnet-coreclr
  - Remade the core-setup-hardening patch to incorporate new defaults in the cmake file.
  - Resolves: RHBZ#1978407


author: Omair Majid <omajid@redhat.com> - 3.1.114-2
changelog:
  - Update to .NET SDK 3.1.114 and Runtime 3.1.14
  - Add dotnet-sdk-3.1-source-built-artifacts subpackage
  - Resolves: RHBZ#1946721


author: Omair Majid <omajid@redhat.com> - 3.1.416-4
changelog:
  - Update to .NET SDK 3.1.416 and Runtime 3.1.22
  - Resolves: RHBZ#2011820
  - Resolves: RHBZ#2003077
  - Resolves: RHBZ#2031428


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core Runtime 3.1.7 and SDK 3.1.107
  - Resolves: RHBZ#1862593
  - Resolves: RHBZ#1861113


author: Andrew Slice <andrew.slice@redhat.com> - 5.0.205-1
changelog:
  - Update to .NET SDK 5.0.205 and Runtime 5.0.8
  - Added a patch to remove references to the tests directory from other patches.
  - Resolves: RHBZ#1980412


author: Omair Majid <omajid@redhat.com> - 5.0.202-2
changelog:
  - Update to .NET SDK 5.0.202 and Runtime 5.0.5
  - Create -source-built-artifacts subpackage
  - Resolves: RHBZ#1947600


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


author: Omair Majid <omajid@redhat.com> - 5.0.104-2
changelog:
  - Mark files under /etc/ as config(noreplace)
  - Add an rpm-inspect configuration file
  - Add an rpmlintrc file
  - Enable gating for release branches and ELN too


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.3
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-2958


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080238)
  - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
  - backup-restore now works correctly (RHBZ #2066535)
  - add with-subid to sssd profile (RHBZ #2063750)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - Update translations (RHBZ #2139696)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2216755)
  - Update translations (RHBZ #2189557)
  - Do not prompt for password twice when changing password of local user (RHBZ #2179607)


author: Tomas Orsava <torsava@redhat.com> - 1:6.0.6.1-8
changelog:
  - Resolves: rhbz#1619153 Require the Python interpreter directly instead of
    relying on the package name


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-11
changelog:
  - Resolves: rhbz#1649251 impress webpreview doesn't work without graphicfilter
  - Resolves: rhbz#1648949 fix docx missing date forms


author: Caolán McNamara <caolanm@redhat.com> - 1:6.0.6.1-20
changelog:
  - Resolves: rhbz#1743958 CVE-2019-9849, etc.
  - Resolves: rhbz#1648281 Junk character gets added when some emojis are inserted


author: Caolán McNamara <caolanm@redhat.com> - 1:6.3.5.2-5
changelog:
  - rhbz#1796893 spreadsheetml2ooo.xsl was not well formed xml
  - rhbz#1796893 fix impress print dialog range


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-6
changelog:
  - Resolves: rhbz#1980800 allow convert to csv to write each sheet to
    separate file
  - Resolves: rhbz#1992695 two style tags where there should be one


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-7
changelog:
  - Resolves: rhbz#2013858 CVE-2021-25633
  - Resolves: rhbz#2014215 CVE-2021-25634
  - Resolves: rhbz#2014209 CVE-2021-25635


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-9
changelog:
  - Related: rhbz#2029810 set NoDisplay=true for .desktop on s390x/aarch64
  - Related: rhbz#2029810 don't Require any vclplug for s390x/aarch64


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2134751 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2134750 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134753 CVE-2022-3140 Macro URL arbitrary script execution


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.7.2-12
changelog:
  - Resolves: rhbz#2118928 CVE-2022-26305 Untrusted Macros
  - Resolves: rhbz#2118924 CVE-2022-26307 Weak Master Keys
  - Resolves: rhbz#2118920 CVE-2022-26306 Static Initialization Vector
  - Resolves: rhbz#2134702 CVE-2022-3140 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.4.7.2-15
changelog:
  - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210195 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208509 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Merlin Mathesius <mmathesi@redhat.com> - 1.15.1-3
changelog:
  - Bump release number in spec so package will build with commits made
    by Petr Písař <ppisar@redhat.com> on Thu Aug 31 2017:
    - Add build conditions for modularity
    - Specify all dependencies


author: Pavel Raiskup <praiskup@redhat.com> - 1.16.1-3
changelog:
  - update config.{guess,sub} to gnuconfig git HEAD
  - drop ppc64p7 hack in config.sub, it's not needed - per:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't BR python2-* packages; switching BRs to python3 would make no sense
    since the upstream testsuite is not yet python3 ready


author: Michal Sekletar <msekleta@redhat.com> - 0.7-21.1
changelog:
  - Fix CVE-2021-3468 (RHEL-18311)
  - Fix CVE-2023-38469 (RHEL-17783)
  - Fix CVE-2023-38470 (RHEL-17795)
  - Fix CVE-2023-38471 (RHEL-17789)
  - Fix CVE-2023-38472 (RHEL-17807)
  - Fix CVE-2023-38473 (RHEL-17801)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7-12
changelog:
  - use %make_build %ldconfig_scriptlets %license
  - %build: --enable-shared=yes --enable-static=no --disable-silent-rules


author: Michal Sekletár <msekleta@redhat.com> - 0.7-19
changelog:
  - make sure we get compiled with -fstack-protector-strong (#1624099)
  - fix issues reported by coverity (#1602449)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-5
changelog:
  - Remove dependency on an exotic testing package python-freezegun which we
    don't have capacity to ship in RHEL8
  - Run tests in pytest (as declared in BuildRequires) instead of unittest


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.10-3
changelog:
  - Add explicit javapackages-tools requirement for sub-packages using
    jpackage_script-based scripts. See RHBZ#1600426.


author: Mat Booth <mat.booth@redhat.com> - 1.11-1
changelog:
  - Update to latest upstream release
  - Drop ancient obsoletes
  - Drop eclipse-specific hacks that are no longer needed
  - Allow conditional building without scripting engines for smaller dep chain
  - Break out some low-level modules into separate sub-package for smaller install
    size


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase to bcc-0.10.0
  - Drop criticalstat
  - Fix regression on vfscount and runqslower
  - Rebuild on LLVM 9


author: Jerome Marchand <jmarchan@redhat.com> - 0.14.0-2
changelog:
  - Remove criticalstat manpage
  - Remove compactsnoop on non x86_64
  - Suggest to use --binary in deadlock
  - Remove non-existent argument from tcpconnect man page
  - Suggest to install the proper kernel-devel version
  - Fix dbstat and dbslower


author: Jerome Marchand <jmarchan@redhat.com> - 0.25.0-3
changelog:
  - Rebuild with llvm 16 (RHBZ#2192949)
  - Fix compactsnoop (RHBZ#2042238)
  - Fix bindsnoop (RHBZ#2155200)
  - Fix nfsslower (RHBZ#2155163)


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.0-6
changelog:
  - llcstat: print a nicer error message on virtual machine
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
changelog:
  - Add manual page for dnssec-importkey-pkcs11 (#1666785)
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-4
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-11.1
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.1
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Correct ANY queries to not have additional data appended


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.16.1
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Import tests for large DNS messages fix
  - Add downstream change complementing CVE-2023-50387


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Nick Clifton <nickc@redhat.com> - 2.30-100
changelog:
  - Do not strip the static BFD library.  (For real this time).  (#1924068)
  - Remove support for ARM v8.6 ISA.  (#1875912)


author: Nick Clifton <nickc@redhat.com> - 2.30-101
changelog:
  - Fix excessive memory consumption in the BFD librart when parsing corrupt DWARF information.  (#1947134)


author: Nick Clifton <nickc@redhat.com> - 2.30-119.1
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Nick Clifton <nickc@redhat.com> - 2.30-119.2
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (RHEL-12956)


author: Yara Ahmad <yahmad@redhat.com> - 2.30-121
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Nick Clifton <nickc@redhat.com> 2.30-58
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749084)


author: Nick Clifton <nickc@redhat.com> - 2.30-58.2
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1803825)


author: Nick Clifton <nickc@redhat.com> - 2.30-71
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779245)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.


author: Nick Clifton <nickc@redhat.com> - 2.30-72
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1801879)


author: Nick Clifton <nickc@redhat.com> - 2.30-74
changelog:
  - Stop the BFD library from issueing warning messages about allocated sections being found outside of loadable segments.  (#1630115)
  - Fix linker testsuite failures for the aarch64 and s390x targets.  (#1632775, #1809101)
  - Fix building the binutils with address sanitization enabled.  (#1678323)
  - Add support for the PT_GNU_PROPERTY segment.  (#1721606)
  - Fix an internal error in the GOLD linker.  (#1722715)
  - Fix the generation of corrupt .note.gnu.property notes.  (#1723533)
  - Stop objcopy's --set-section-flags option from setting the 'shared' flag on non-COFF binaries.  (#1807308)
  - Fix a bug in the secondary reloc processing code.  (#1809186)


author: David Lehman <dlehman@redhat.com> - 3.1.0-1
changelog:
  - Allow configuring default LUKS2 PBKDF arguments using luks_data (vtrefny)
    Related: rhbz#1561352
  - Fix the populate_kickstart method in LUKS (vtrefny)
    Related: rhbz#1561352
  - Allow specifying extra arguments for PBKDF when creating LUKS2 (vtrefny)
    Related: rhbz#1561352
  - Add support for LUKS2 to DeviceFactory (vtrefny)
    Resolves: rhbz#1561352
  - DeviceFactory: use min_luks_entropy from kwargs (vtrefny)
    Related: rhbz#1561352
  - Fix passing 'min_luks_entropy' when creating LUKS format (vtrefny)
    Related: rhbz#1561352
  - Use passphrase/key file when resizing LUKS2 format (vtrefny)
    Related: rhbz#1561352
  - Require libblockdev 2.17 (vtrefny)
    Related: rhbz#1561352
  - Add support for LUKS2 format (vtrefny)
    Related: rhbz#1561352
  - Add initial support for DM Integrity "format" (vtrefny)
    Related: rhbz#1561352
  - Do not try to add LUKSDevice in LUKSFormatPopulator (vtrefny)
    Related: rhbz#1561352
  - Add support for dm-integrity devices (vtrefny)
    Related: rhbz#1561352
  - Fixed various issues preventing successful build (japokorn)
    Related: rhbz#1561352


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Check device dependencies only for device actions
    Related: rhbz#1605213
  - Allow removing btrfs volumes without btrfs support
    Resolves: rhbz#1605213


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-5
changelog:
  - arm: add support for EFI on ARMv7 (probinson)
    Related: rhbz#1623882
  - Aarch64 platforms: Fix gpt defaults for 64 bit arm platforms (probinson)
    Resolves: rhbz#1623882
  - arch: arm: drop get_arm_machine function (probinson)
    Related: rhbz#1623882
  - arch: arm: drop omap specifics for partitioning (probinson)
    Related: rhbz#1623882


author: David Lehman <dlehman@redhat.com> - 3.1.0-9
changelog:
  - Update to latest translations.
    Resolves: rhbz#1608337
  - Require libfc instead of fcoe for offloaded FCoE.
    Resolves: rhbz#1575953
  - Use udev to determine if disk is a multipath member.
    Related: rhbz#1575953
  - Don't crash if blockdev mpath plugin isn't available.
    Resolves: rhbz#1672971


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-11
changelog:
  - Various test fixes for RHEL 8
    Related: rhbz#1682561
  - Add upstream test suite to the SRPM
    Related: rhbz#1682561


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-12
changelog:
  - Deactivate incomplete VGs along with everything else
    Resolves: rhbz#1635125
  - Automatically adjust size of growable devices for new format
    Resolves: rhbz#1680013
  - Add flag for protecting cdrom devices during populate
    Resolves: rhbz#1719648
  - Clean up some errors evident in installer logs
    Resolves: rhbz#1579375
  - Use dasd disklabel for vm disks backed by dasds
    Resolves: rhbz#1676935


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-19
changelog:
  - Override LVM skip-activation to allow for thorough removal
    Resolves: rhbz#1766498
  - Make sure LVs are writable before wiping
    Related: rhbz#1766498
  - Fix udev test names so they actually get run.
    Related: rhbz#1758102
  - Add recognition of Dell FW RAID to udev.device_is_disk.
    Resolves: rhbz#1758102
  - Align base sizes up if smaller than min I/O size.
    Resolves: rhbz#1781106
  - Make minimal and optimal alignment getters public.
    Related: rhbz#1781106


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-21
changelog:
  - Add setters for requested_size/percent form LVMVolumeGroupDevice
    Related: rhbz#1841131
  - Allow for reserved vg space and a growable thin pool.
    Resolves: rhbz#1841131


author: David Lehman <dlehman@redhat.com> - 3.1.0-0.1.b2
changelog:
  - Do not ignore "Image out-of-sync" internal LVs (vtrefny)
  - Fixed error message when slave is missing (japokorn)
  - Ensure WWNs are set for multipath and dmraid. (dlehman)
  - Use ID_WWN_WITH_EXTENSION for WWNs. (dlehman)
  - Ignore pylint error "bad-option-value" for new pylint errors (vtrefny)
  - Fix errors found by new pylint 2.0.0 (vtrefny)
  - Fix caching logic in ExternalResource. (dlehman)
  - Use DiskFile to allow testing missing dependencies as non-root. (dlehman)
  - Restore availability caching after disabling for tests. (dlehman)
  - Preserve original blockdev plugin list in test cleanup. (dlehman)
  - Fix positional/key-word arguments in util.Path (vtrefny)
  - fix doc for is_s390() (dan)
  - The key size of LUKS should be 0 by default (vponcova)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Fixed create_device fail behavior (japokorn)
  - Fixed KS forcing zerombr onto RO disk (japokorn)
  - Fix BIOS device number regex in edd module. (#1552236) (dlehman)
  - Shrink devices before growing others with common ancestors. (#1539422) (dlehman)
  - Do not copy ksdata. (rvykydal)
  - Find and remove stale LVM metadata immediately after creating md array. (dlehman)
  - Adapt mock imports for compatibility w/ python2 & python3. (dlehman)
  - Use py2-compatible syntax to get system architecture. (dlehman)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-4
changelog:
  - Blivet RHEL 8.3 localization update
    Resolves: rhbz#182056
  - Do not use FSAVAIL and FSUSE% options when running lsblk
    Resolves: rhbz#1853624


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-5
changelog:
  - set allowed disk labels for s390x as standard ones (msdos + gpt) plus dasd
    Resolves: rhbz#1855200
  - Do not use BlockDev.utils_have_kernel_module to check for modules
    Resolves: rhbz#1855344


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-6
changelog:
  - Fix name resolution for MD devices and partitions on them
    Resolves: rhbz#1862904
  - Fix ignoring disk devices with parents or children
    Resolves: rhbz#1866243


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-7
changelog:
  - Add support for XFS format grow
    Resolves: rhbz#1862349
  - Do not limit swap to 128 GiB
    Resolves: rhbz#1656485
  - Use UnusableConfigurationError for partially hidden multipath devices
    Resolves: rhbz#1877052
  - Fix possible UnicodeDecodeError when reading model from sysfs
    Resolves: rhbz#1849326
  - Add basic support for LVM VDO devices
    Resolves: rhbz#1828745


author: Vojtech Trefny <vtrefny@redhat.com> - 3.2.2-8
changelog:
  - Let parted fix fixable issues with partition table
    Resolves: rhbz#1846869
  - Fix possible UnicodeDecodeError when reading sysfs attributes
    Resolves: rhbz#1849326


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#1988276
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1949953


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-10
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079220
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078801
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076958
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081276
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081276
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055198


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-3
changelog:
  - Catch BlockDevNotImplementedError for btrfs plugin calls
    Resolves: rhbz#2139169
  - Revert "Adjust to new XFS min size"
    Resolves: rhbz#2139187


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-6
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2175166
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2183437
  - Add support for filesystem online resize
    Resolves: rhbz#2168680


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-7
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2083139
  - Add a basic test case for the iscsi module
    Related: rhbz#2083139
  - tests: Use blivet-specific prefix for targetcli backing files
    Related: rhbz#2083139
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2084043
  - tests: Improve iscsi_test.ISCSITestCase
    Related: rhbz#2083139


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: David Marlin <dmarlin@redhat.com> - 5.63-2
changelog:
  + bluez-5.63-2
  - Change default of ClassicBondedOnly to true to align with HID specification.
  - Resolves: RHEL-18429
  - Fixing CVE-2021-41229


author: David Marlin <dmarlin@redhat.com> - 5.63-4
changelog:
  + bluez-5.63-4
  - Resolves: RHEL-35501
  - Fixing CVE-2023-50230
  - Resolves: RHEL-35504
  - Fixing CVE-2023-50229


author: David Marlin <dmarlin@redhat.com> - 5.63-5
changelog:
  + bluez-5.63-5
  - Resolves: RHEL-35371
  - Fixing CVE-2023-27349
  - Resolves: RHEL-35492
  - Fixing CVE-2023-51589


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Jerome Marchand <jmarchan@redhat.com> - 0.9-2
changelog:
  - Fixes gethostlatency
  - Fixes a struct definition issue that made several tools fail
  - Add CI gating


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-3
changelog:
  - Fix ENOMEM issue on arm64 machine with many cpus
  - Fix statsnoop and opensnoop on aarch64
  - Drop tcpdrop on ppc64


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.6-20
changelog:
  - Fixed installation of multiple drivers and text tables in Dracut module
    if environment variables are used


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804188


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817742


author: Jindrich Novy <jnovy@redhat.com> - 1.14.7-1
changelog:
  - initial rhel8-8.2.1 build
  - update to https://github.com/containers/buildah/releases/tag/v1.14.7
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/9e02bf9)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/56ed75b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.7-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/aaed66b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - fixes CVE-2022-27651
  - Resolves: #2067539


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Resolves: #2067540


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.21.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/7f9540d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.21
    (https://github.com/containers/buildah/commit/d1e9240)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/9c456a3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/d29224c)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/c1bdaba)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/63813ef)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/e99286b)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/60e6bc0)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/13622b1)
  - Resolves: #2129767


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/c43a389)
  - Resolves: #2136438


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/5b86d15)
  - Resolves: #2150428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/4785fdb)
  - Resolves: #2152017


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8ca903b)
  - Resolves: #2140087


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/39dfa73)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f01e5f9)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175070
  - Resolves: #2179948
  - Resolves: #2187317
  - Resolves: #2187364
  - Resolves: #2203680
  - Resolves: #2207510


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/5fd539c)
  - Resolves: RHEL-26772


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61835


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/fe85f0d)
  - Resolves: RHEL-61853


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)
  - Resolves: RHEL-67612


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/cf49e7c)
  - fixes "CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]"
  - Resolves: RHEL-89239


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819431


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Josh Stone <jistone@redhat.com> - 1.40.0-1
changelog:
  - Update to 1.40.0.
  - Fix compiletest with newer (local-rebuild) libtest
  - Build compiletest with in-tree libtest
  - Fix ARM EHABI unwinding


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-8
changelog:
  - Move systemd tmpfiles from /var/run to /run (#1804928)
  - Improve logging in the SCEP helper (#1807691)
  - Fix sort order of certificates passed into PKCS7_verify (#1808052)
  - Add -N option to SCEP helper to separate web server chain from
    SCEP issuer chain (#1808613)
  - Add template profile, MS v2 template and issuer to getcert list
    output (#1734451)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-9
changelog:
  - Call the secport equivalent of PR_ErrorToString
  - Remove a couple of unused varaibles found by coverity


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-3
changelog:
  - Remove BR on mktemp. It is now provided by coreutils.
  - Patch to fix NSS handling of keys in sqlite databases
  - Patches to fix tests now that sqlite is the NSS default.


author: Rob Crittenden <rcritten@redhat.com> - 0.79.6-4
changelog:
  - Improve handling of NSS tokens (#1624930)
  - Pull in upstream fixes discovered in coverity and clang (#1632449)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-4
changelog:
  - Optimize closing of file descriptors on fork (#1763745)
  - Remove NOMODDB flag flag from context init, look for full tokens (#1746543)
  - Retrieve full IPA CA chain (#1710632)


author: Tomas Halman <thalman@redhat.com> - 0.6.1-3
changelog:
  - cjose: AES GCM decryption uses the Tag length from the actual Authentication
    Tag provided in the JWE [rhel-8.8.0.z]
    Resolves: rhbz#2223491


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Tomas Orsava <torsava@redhat.com> - 6.0.1-6
changelog:
  - Change Requires from python3 to platform-python
  - The python3 package was renamed to platform-python
  - Related: rhbz#1619153


author: Daniel Kopecek <dkopecek@redhat.com> - 11-2
changelog:
  - Check that key derivation key is available
  - Delete remaining references to the removed http pin
  - Install cryptsetup and tpm2_pcrlist in the initramfs
  - Add device TCTI library to the initramfs
    Resolves: rhbz#1648004
    Resolves: rhbz#1650246


author: Sergio Correia <scorreia@redhat.com> - 13-1
changelog:
  - Update to new upstream release, v13
    Resolves: rhbz#1827225
    Resolves: rhbz#1827665
    Resolves: rhbz#1801556
    Resolves: rhbz#1784448
    Resolves: rhbz#1826917
    Resolves: rhbz#1812014


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - Revert "remove 'tee' command from logging configuration" [bz#1626117]
  - Resolves: rhbz#1626117]
    (cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el8
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
  - Resolves: bz#1615599
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: <> - 18.2-4.el8
changelog:
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
  - Resolves: bz#1644335
    ([ESXi][RHEL8.0]Enable cloud-init by default on VMware)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el8
changelog:
  - ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
  - Resolves: bz#1664227
    ([Azure]String missmatch causes the /dev/sdb1 mounting failed after stop&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-6.el8
changelog:
  - ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
  - Resolves: bz#1602784
    (cloud-init: Sometimes image boots fingerprints is configured, there's a network device present but it's not configured)


author: Danilo de Paula <ddepaula@redhat.com: - 18.5-1.el8
changelog:
  - Rebase to cloud-init 18.5
  - Resolves: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.1
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1579237]
  - Resolves: bz#1579237
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.2
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1648375]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1648375]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1648375]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1648375]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1648375]
  - Resolves: bz#1648375
    ([Azure] [RHEL 8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.3
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1648375]
  - Resolves: bz#1648375
    ([Azure] [RHEL 8] Cloud-init fixes to support fast provisioning for Azure[8.0.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el8.4
changelog:
  - Fix for TPS tests [bz#1687563]
    Resolve: bz#1687563
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 8.0.1])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 18.5-3.el8
changelog:
  - ci-Adding-gating-tests-for-Azure-ESXi-and-AWS.patch [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el8
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1691986]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1691986]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1691986]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1691986]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el8
changelog:
  - Improved gating testing [bz#1682786]
  - Resolves: bz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el8
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1692914]
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1691986]
  - Resolves: bz#1691986
    ([Azure] [RHEL 8.1] Cloud-init fixes to support fast provisioning for Azure)
  - Resolves: bz#1692914
    ([8.1] [WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-8.el8
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1706482]
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744718]
  - Resolves: bz#1706482
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 8.2.0])
  - Resolves: bz#1744718
    ([cloud-init][RHEL8][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-9.el8
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1785648]
  - Resolves: bz#1785648
    ([RHEL8]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-10.el8
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802140]
  - Resolves: bz#1802140
    ([cloud-init][RHEL8.2]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-11.el8
changelog:
  - ci-azure-avoid-re-running-cloud-init-when-instance-id-i.patch [bz#1788684]
  - ci-net-skip-bond-interfaces-in-get_interfaces.patch [bz#1768770]
  - ci-net-add-is_master-check-for-filtering-device-list.patch [bz#1768770]
  - Resolves: bz#1768770
    (cloud-init complaining about enslaved mac)
  - Resolves: bz#1788684
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1807797]
  - Resolves: bz#1807797
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8_2.1
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1826262]
  - Resolves: bz#1826262
    ([RHEL8.2] Race condition of starting cloud-init and NetworkManager [rhel-8.2.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-12.el8_2.2
changelog:
  - ci-net-append-type-dhcp-46-only-if-dhcp-46-is-True-in-v.patch [bz#1811753]
  - ci-net-sysconfig-Handle-default-route-setup-for-dhcp-co.patch [bz#1811753]
  - ci-azure-net-generate_fallback_nic-emits-network-v2-con.patch [bz#1811753]
  - ci-azure-support-matching-dhcp-route-metrics-for-dual-s.patch [bz#1811753]
  - ci-net-handle-openstack-dhcpv6-stateless-configuration.patch [bz#1811753]
  - ci-net-IPv6-accept_ra-slaac-stateless-51.patch [bz#1811753]
  - Resolves: bz#1811753
    ([RHEL8] DHCP Stateful - Openstack DHCPv6 instance get no default gateway and is unable to send IPv6 traffic (Network unreachable errors). [rhel-8.2.0.z])


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 18.5-2
changelog:
  - Adding gating.yaml file
  - Resolves: rhbz#1682786
    (cloud-init changes blocked until gating tests are added)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-7.el8_1_0.1
changelog:
  - ci-azure-avoid.patch [bz#1810112]
  - Resolves: bz#1810112
    ([RHEL-8] cloud-init Azure byte swap (hyperV Gen2 Only) [rhel-8.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.coM> - 19.4-1.el8.1
changelog:
  - Rebase to cloud-init 19.4 [bz#1811912]
  - Resolves: bz#1811912
    ([RHEL-8.2.1] cloud-init rebase to 19.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.2
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1831646]
  - Resolves: bz#1831646
    ([RHEL8.2.1] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.3
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1844366]
  - Resolves: bz#1844366
    ([rhel-8.2.1]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.4
changelog:
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1844366]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1844366]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1844366]
  - Resolves: bz#1844366
    ([rhel-8.2.1]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.5
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1850456]
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1850456]
  - Resolves: bz#1850456
    ([RHEL8.2.1] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.6
changelog:
  - Fixing cloud-init-generator permissions [bz#1844366]
  - Resolves: bz#1844366
    ([rhel-8.2.1]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el8.7
changelog:
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1855595]
  - Resolves: bz#1855595
    (CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys [rhel-8] [rhel-8.2.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el8
changelog:
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812171]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812174]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1814152]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1840648]
  - Resolves: bz#1812171
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-8])
  - Resolves: bz#1812174
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-8])
  - Resolves: bz#1814152
    (CVE-2018-10896 cloud-init: default configuration disabled deletion of SSH host keys [rhel-8])
  - Resolves: bz#1840648
    ([cloud-init][RHEL-8.2.0] /etc/resolv.conf lose config after reboot (initial instance is ok))


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el8
changelog:
  - ci-Make-cloud-init.service-execute-after-network-is-up.patch [bz#1803928]
  - Resolves: bz#1803928
    ([RHEL8.3] Race condition of starting cloud-init and NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el8
changelog:
  - ci-changing-ds-identify-patch-from-usr-lib-to-usr-libex.patch [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el8
changelog:
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1822343]
  - ci-Render-the-generator-from-template-instead-of-cp.patch [bz#1834173]
  - ci-Change-from-redhat-to-rhel-in-systemd-generator-tmpl.patch [bz#1834173]
  - ci-cloud-init.service.tmpl-use-rhel-instead-of-redhat-4.patch [bz#1834173]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el8
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1822343]
  - Resolves: bz#1822343
    ([RHEL8.3] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el8
changelog:
  - Fixing cloud-init-generator permissions [bz#1834173]
  - Resolves: bz#1834173
    ([rhel-8.3]Incorrect ds-identify check in cloud-init-generator)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-8.el8
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839662]
  - ci-ssh-exit-with-non-zero-status-on-disabled-user-472.patch [bz#1833874]
  - Resolves: bz#1833874
    ([rhel-8.3]using root user error should cause a non-zero exit code)
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-9.el8
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1794664]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1794664]
  - ci-Detect-kernel-version-before-swap-file-creation-428.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-10.el8
changelog:
  - ci-Changing-notation-of-subp-call.patch [bz#1839662]
  - Resolves: bz#1839662
    ([ESXi][RHEL8.3][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8
changelog:
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1794664]
  - Resolves: bz#1794664
    ([RHEL8] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.1
changelog:
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1879989]
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1890551]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1894014]
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1894015]
  - ci-net-fix-rendering-of-static6-in-network-config-77.patch [bz#1894015]
  - Resolves: bz#1879989
    ([Azure][RHEL 8] cloud-init Permission denied with the use of mount option noexec [rhel-8.3.0.z])
  - Resolves: bz#1890551
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-8.3.0.z])
  - Resolves: bz#1894014
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init [rhel-8.3.0.z])
  - Resolves: bz#1894015
    (Add support for ipv6_autoconf[rhel-8.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.2
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1916839]
  - Resolves: bz#1916839
    ([Azure] Update existing user password RHEL8x [rhel-8.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-11.el8_3.3
changelog:
  - ci-sysconfig-distro-specific-config-rendering-for-BOOTP.patch [bz#1931835]
  - Resolves: bz#1931835
    (SUSE specific option, STARTMODE, should not exist in ifcfg-XXX file. [rhel-8.3.0.z])


author: Eduardo Otubo <otubo@redhat.com> - 20.3-1.el8
changelog:
  - Rebase to cloud-init 20.3 [bz#1885185]
  - Resolves: bz#1885185
    ([RHEL-8.4.0] cloud-init rebase to 20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-2.el8
changelog:
  - ci-Explicit-set-IPV6_AUTOCONF-and-IPV6_FORCE_ACCEPT_RA-.patch [bz#1889635]
  - ci-Add-config-modules-for-controlling-IBM-PowerVM-RMC.-.patch [bz#1886430]
  - Resolves: bz#1886430
    (Support for cloud-init config modules for PowerVM Hypervisor in Red Hat cloud-init)
  - Resolves: bz#1889635
    (Add support for ipv6_autoconf on cloud-init-20.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-3.el8
changelog:
  - ci--Removing-net-tools-dependency.patch [bz#1881871]
  - ci--Adding-man-pages-to-Red-Hat-spec-file.patch [bz#1612573]
  - Resolves: bz#1881871
    (Remove net-tools legacy dependency from spec file)
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-4.el8
changelog:
  - ci-Changing-permission-of-cloud-init-generator-to-755.patch [bz#1897528]
  - Resolves: bz#1897528
    (Change permission on ./systemd/cloud-init-generator.tmpl to 755 instead of 771)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-5.el8
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1881462]
  - Resolves: bz#1881462
    ([rhel8][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-6.el8
changelog:
  - ci-Installing-man-pages-in-the-correct-place-with-corre.patch [bz#1612573]
  - ci-Adding-BOOTPROTO-dhcp-to-render-sysconfig-dhcp6-stat.patch [bz#1859695]
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1898943]
  - ci-ssh_util-handle-non-default-AuthorizedKeysFile-confi.patch [bz#1862967]
  - Resolves: bz#1612573
    (Man page scan results for cloud-init)
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)
  - Resolves: bz#1898943
    ([rhel-8]cloud-final.service fails if NetworkManager not installed.)
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-7.el8
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [bz#1898949]
  - Resolves: bz#1898949
    (cloud-init should report full specific full version with "cloud-init --version")


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-8.el8
changelog:
  - ci-Missing-IPV6_AUTOCONF-no-to-render-sysconfig-dhcp6-s.patch [bz#1859695]
  - Resolves: bz#1859695
    ([Cloud-init] DHCPv6 assigned address is not added to VM's interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-9.el8
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900892]
  - ci-Revert-ssh_util-handle-non-default-AuthorizedKeysFil.patch [bz#1919972]
  - Resolves: bz#1900892
    ([Azure] Update existing user password RHEL8x)
  - Resolves: bz#1919972
    ([RHEL-8.4] ssh keys can be shared across users giving potential root access)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8
changelog:
  - ci-fix-a-typo-in-man-page-cloud-init.1-752.patch [bz#1913127]
  - Resolves: bz#1913127
    (A typo in cloud-init man page)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.2
changelog:
  - ci-Fix-requiring-device-number-on-EC2-derivatives-836.patch [bz#1942699]
  - Resolves: bz#1942699
    ([Aliyun][RHEL8.4][cloud-init] cloud-init service failed to start with Alibaba instance [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.3
changelog:
  - ci-get_interfaces-don-t-exclude-Open-vSwitch-bridge-bon.patch [bz#1957135]
  - ci-net-exclude-OVS-internal-interfaces-in-get_interface.patch [bz#1957135]
  - Resolves: bz#1957135
    (Intermittent failure to start cloud-init due to failure to detect macs [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.4
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1963981]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1967600]
  - Resolves: bz#1963981
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image [rhel-8.4.0.z])
  - Resolves: bz#1967600
    (cloud-init brew build fails on Fedora 33 [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20.3-10.el8_4.5
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1979252]
  - Resolves: bz#1979252
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8] [rhel-8.4.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-6
changelog:
  - ci-Stop-copying-ssh-system-keys-and-check-folder-permis.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7
changelog:
  - ci-Fix-home-permissions-modified-by-ssh-module-SC-338-9.patch [bz#1995840]
  - Resolves: bz#1995840
    ([cloudinit]  Fix home permissions modified by ssh module)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-8
changelog:
  - ci-ssh_utils.py-ignore-when-sshd_config-options-are-not.patch [bz#1862933]
  - Resolves: bz#1862933
    (cloud-init fails with ValueError: need more than 1 value to unpack[rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-9
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2013644]
  - Resolves: bz#2013644
    (cloud-init fails to set host key permissions correctly)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-10
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2021538]
  - Resolves: bz#2021538
    (cloud-init.service fails to start after package update)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-11
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028028]
  - Resolves: bz#2028028
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-12
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2039697]
  - ci-Datasource-for-VMware-953.patch [bz#2026587]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2026587]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2026587]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2026587]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2026587]
  - Resolves: bz#2039697
    ([RHEL8] [Azure] cloud-init fails to configure the system)
  - Resolves: bz#2026587
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Jon Maloy <jmaloy@redhat.com> - 21.1-13
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2023940]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2023940]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2023940]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2023940]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2023940]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2023940]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2023940]
  - Resolves: bz#2023940
    ([RHEL-8] Support for provisioning Azure VM with userdata)


author: Jon Maloy <jmaloy@redhat.com> - 21.1-14
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2046540]
  - Resolves: bz#2046540
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]
  - Resolves: bz#1935826
    ([rhel-8] Cloud-init init stage fails after upgrade from RHEL7 to RHEL8.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-15.el8_6.1
changelog:
  - ci-Add-r-n-check-for-SSH-keys-in-Azure-889.patch [bz#2088028]
  - Resolves: bz#2088028
    ([RHEL-8.7] SSH keys with \r\n line breaks are not properly handled on Azure [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-15.el8_6.2
changelog:
  - ci-systemd-Better-support-package-and-upgrade.patch [bz#2081003]
  - Resolves: bz#2081003
    (Cloud-init is placing the puppet module in the wrong stage. [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-15.el8_6.3
changelog:
  - ci-Leave-the-details-of-service-management-to-the-distr.patch [bz#2091933]
  - Resolves: bz#2091933
    (cloud-init has an undeclared dependency on the initscripts rpm [rhel-8.6.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-2
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [bz#1957532]
  - ci-cloud-init.spec.template-update-systemd_postun-param.patch [bz#1952089]
  - Resolves: bz#1957532
    ([cloud-init] From RHEL 82+ cloud-init no longer displays sshd keys fingerprints from instance launched from a backup image)
  - Resolves: bz#1952089
    (cloud-init brew build fails on Fedora 33)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-3
changelog:
  - ci-write-passwords-only-to-serial-console-lock-down-clo.patch [bz#1945891]
  - Resolves: bz#1945891
    (CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-4
changelog:
  - ci-ssh-util-allow-cloudinit-to-merge-all-ssh-keys-into-.patch [bz#1862967]
  - Resolves: bz#1862967
    ([cloud-init]Customize ssh AuthorizedKeysFile causes login failure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-5
changelog:
  - ci-Add-dhcp-client-as-a-dependency.patch [bz#1977385]
  - Resolves: bz#1977385
    ([Azure][RHEL-8] cloud-init must require dhcp-client on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-7.el8_5.1
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2017697]
  - Resolves: bz#2017697
    (cloud-init fails to set host key permissions correctly [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.2
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028738]
  - Resolves: bz#2028738
    (cloud-init.service fails to start after package update [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.3
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028756]
  - Resolves: bz#2028756
    ([RHEL-8] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.4
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2040690]
  - ci-Datasource-for-VMware-953.patch [bz#2040704]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040704]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040704]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040704]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040704]
  - Resolves: bz#2040690
    ([RHEL8] [Azure] cloud-init fails to configure the system [rhel-8.5.0.z])
  - Resolves: bz#2040704
    ([cloud-init][RHEL8] Support for cloud-init datasource 'cloud-init-vmware-guestinfo' [rhel-8.5.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 21.1-7.el8_5.5
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2060026]
  - Resolves: bz#2060026
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::". [rhel-8.5.0.z])


author: Camilla Conte <cconte@redhat.com> - 21.1-15
changelog:
  - ci-Detect-a-Python-version-change-and-clear-the-cache-8.patch [bz#1935826]
  - ci-Fix-MIME-policy-failure-on-python-version-upgrade-93.patch [bz#1935826]


author: Jon Maloy <jmaloy@redhat.com> - 22.1-2
changelog:
  - ci-Add-native-NetworkManager-support-1224.patch [bz#2059872]
  - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2059872]
  - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2082071]
  - ci-Remove-rhel-specific-files.patch [bz#2082071]
  - Resolves: bz#2059872
    ([RHEL-8]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles)
  - Resolves: bz#2082071
    (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files)


author: Jon Maloy <jmaloy@redhat.com> - 22.1-3
changelog:
  - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2082686]
  - Resolves: bz#2082686
    ([cloud][init] Add support for reading tags from instance metadata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-4
changelog:
  - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096269]
  - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096269]
  - Resolves: bz#2096269
    (Adjust udev/rules default path[RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-5
changelog:
  - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107464 bz#2110066 bz#2117526 bz#2104393 bz#2098624]
  - Resolves: bz#2107464
    ([RHEL-8.7] Cannot run sysconfig when changing the priority of network renderers)
  - Resolves: bz#2110066
    (DNS integration with OpenStack/cloud-init/NetworkManager is not working)
  - Resolves: bz#2117526
    ([RHEL8.7] Revert patch of configuring networking by NM keyfiles)
  - Resolves: bz#2104393
    ([RHEL-8.7]Failed to config static IP and IPv6 according to VMware Customization Config File)
  - Resolves: bz#2098624
    ([RHEL-8.7] IPv6 not workable when cloud-init configure network using NM keyfiles)


author: Camilla Conte <cconte@redhat.com> - 22.1-6.el8_7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2153182]
  - Resolves: bz#2153182
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL [rhel-8.7.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-6.el8_7.2
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2165945]
  - Resolves: bz#2165945
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8] [rhel-8.7.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 22.1-6
changelog:
  - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115576]
  - Resolves: bz#2115576
    (cloud-init configures user "centos" or "rhel" instead of "cloud-user" with cloud-init-22.1)


author: Camilla Conte <cconte@redhat.com> - 22.1-7
changelog:
  - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2151861]
  - Resolves: bz#2151861
    ([RHEL-8] Ensure network ready before cloud-init service runs on RHEL)


author: Camilla Conte <cconte@redhat.com> - 22.1-8
changelog:
  - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2162258]
  - Resolves: bz#2162258
    (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b' [RHEL-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 22.1-8.el8_8.1
changelog:
  - ci-Add-warning-during-upgrade-from-an-old-version-with-.patch [bz#2217064]
  - Resolves: bz#2217064
    ([cloud-init] System didn't generate ssh host keys and lost ssh connection after cloud-init removed them with updated cloud-init package. [rhel-8.8.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-1
changelog:
  - limit-permissions-on-def_log_file.patch
  - Resolves bz#1424612
  - include-NOZEROCONF-yes-in-etc-sysconfig-network.patch
  - Resolves bz#1653131
  - Rebase to 23.1.1 [bz#2172821]
  - Resolves: bz#2172821


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-2
changelog:
  - ci-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2182407]
  - Resolves: bz#2182407
    (cloud-init strips new line from "/etc/hostname" when processing "/var/lib/cloud/data/previous-hostname")


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-3
changelog:
  - ci-Don-t-change-permissions-of-netrules-target-2076.patch [bz#2182947]
  - ci-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190081]
  - Resolves: bz#2182947
    (Request to backport "Don't change permissions of netrules target (#2076)")
  - Resolves: bz#2190081
    (CVE-2023-1786 cloud-init: sensitive data could be exposed in logs [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-5
changelog:
  - ci-Add-warning-during-upgrade-from-an-old-version-with-.patch [bz#2210012]
  - Resolves: bz#2210012
    ([cloud-init] System didn't generate ssh host keys and lost ssh connection after cloud-init removed them with updated cloud-init package.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-6
changelog:
  - ci-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch [bz#2219528]
  - ci-Revert-Revert-Add-native-NetworkManager-support-1224.patch [bz#2219528]
  - ci-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2219528]
  - ci-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2219528]
  - ci-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2219528]
  - ci-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2219528]
  - ci-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2219528]
  - Resolves: bz#2219528
    ([RHEL8] Support configuring network by NM keyfiles)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - ci-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222501]
  - Resolves: bz#2222501
    (Don't change log permissions if they are already more restrictive [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - ci-DS-VMware-modify-a-few-log-level-4284.patch [bz#2223810]
  - Resolves: bz#2223810
    ([cloud-init] [RHEL8.9]There are warning logs if dev has more than one IPV6 address on ESXi)


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-9
changelog:
  - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460]
  - Resolves: bz#2229460
    ([rhel-8.9] [RFE] Configure "ipv6.addr-gen-mode=eui64' as default in NetworkManager)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10
changelog:
  - Resolves: bz#2233047
    ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling)


author: Camilla Conte <cconte@redhat.com> - 23.1.1-10.el8_9.1
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16444]
  - Resolves: RHEL-16444
    ([cloud-init][rhel-8.9.0.z] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Jon Maloy <jmaloy@redhat.com> - 23.1.1-11.el8_9.1
changelog:
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-18980]
  - ci-tests-unittests-add-a-new-unit-test-for-network-mana.patch [RHEL-18980]
  - Resolves: RHEL-18980
    ([RHEL-8] NetworkManagerActivator brings up interface failed when using sysconfig renderer [rhel-8.9.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-2
changelog:
  - ci-net-network_manager-do-not-set-may-fail-to-False-for.patch [RHEL-7277]
  - ci-net-allow-dhcp6-configuration-from-generate_fallback.patch [RHEL-7277]
  - ci-net-nm-check-for-presence-of-ifcfg-files-when-nm-con.patch [RHEL-17610]
  - Resolves: RHEL-7277
    ([RFE] [Azure][RHEL8][Network][cloud-init] Can not acquire IPv6 address)
  - Resolves: RHEL-17610
    ([RHEL-8] NetworkManagerActivator brings up interface failed when using sysconfig renderer)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-3
changelog:
  - ci-fix-clean-stop-warning-when-running-clean-command-47.patch [RHEL-21530]
  - ci-test-jsonschema-Pin-jsonschema-version-4781.patch [RHEL-21530]
  - Resolves: RHEL-21530
    ([RHEL-8.10]subp.py[WARNING]: skipping /etc/cloud/clean.d/README when do cloud-init clean)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-4
changelog:
  - ci-Revert-Use-grep-for-faster-parsing-of-cloud-config-i.patch [RHEL-22248]
  - Resolves: RHEL-22248
    ([Azure][RHEL-8] cloud-init-23.4 cannot read "- Azure" datasource_list format)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-5
changelog:
  - ci-ci-Pin-pytest-8.0.0.-4816.patch [RHEL-21323]
  - ci-fix-Add-types-to-network-v1-schema-4841.patch [RHEL-21323]
  - Resolves: RHEL-21323
    ([rhel-8] The schema WARNING info for network-config.json is not suitable in cloud-init-23.4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-6
changelog:
  - ci-Revert-systemd-Standardize-cloud-init-systemd-enable.patch [RHEL-21290]
  - Resolves: RHEL-21290
    (Unknown lvalue 'ConditionEnvironment' in section 'Unit' for /usr/lib/systemd/system/cloud-init.target,cloud-init.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7
changelog:
  - ci-Retain-exit-code-in-cloud-init-status-for-recoverabl.patch [RHEL-28817]
  - Resolves: RHEL-28817
    ([RHEL 8.10] cloud-init 23.4 returns 2 on recoverable errors instead of 0)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.1
changelog:
  - ci-fix-Correct-v2-NetworkManager-route-rendering-4637.patch [RHEL-27134]
  - ci-feat-apply-global-DNS-to-interfaces-in-network-manag.patch [RHEL-27134]
  - ci-fix-Undeprecate-network-in-schema-route-definition-5.patch [RHEL-29710]
  - Resolves: RHEL-27134
    ([rhel-8]cloud-init fails to configure DNS/search domains for network-config v1)
  - Resolves: RHEL-29710
    (Suggest to backport patch ff40d1a to undeprecate 'network' in schema route definition [rhel-8.10.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.2
changelog:
  - ci-fix-Fall-back-to-cached-local-ds-if-no-valid-ds-foun.patch [RHEL-32841]
  - Resolves: RHEL-32841
    ([cloud-init][ESXi]VMware datasource resets on every boot causing it to lose network configuration [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.3
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36701]
  - Resolves: RHEL-36701
    (DataSourceNoCloudNet not configurable via config files [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.5
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40418]
  - Resolves: RHEL-40418
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.6
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-46013]
  - Resolves: RHEL-46013
    ([RHEL-8] cloud-init fails to configure DNS search domains [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-7.el8_10.7
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49742]
  - Resolves: RHEL-49742
    ([Cloud-init] [RHEL-8.10] Password reset feature broken with CloudstackDataSource)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8_10.8
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54155]
  - Resolves: RHEL-54155
    ([RHEL 8.10] cloud-init schema validation fails.)


author: Jon Maloy <jmaloy@redhat.com> - 23.4-7.el8.9
changelog:
  - ci-fix-rh_subscription-add-string-type-to-org-5453.patch [RHEL-81169]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-81169]
  - Resolves: RHEL-81169
    (Cloud-init fails to subscribe system if activation key 'org' is not an integer [rhel-8.10.z])


author: Camilla Conte <cconte@redhat.com> - 23.1.1-11
changelog:
  - ci-net-fix-ipv6_dhcpv6_stateful-stateless-slaac-configu.patch [bz#2046491]
  - Resolves: bz#2046491
    (cloud-init enable both DHCPv4 and DHCPv6 when network type is ipv6_dhcpv6-stateful/ipv6_dhcpv6-stateless)
  - Resolves: RHEL-2325
    ([RHEL8.9][cloud-init] Not inform user during upgrade that cloud-init generated config files are left )


author: Camilla Conte <cconte@redhat.com> - 23.1.1-12
changelog:
  - ci-rhel-cloud.cfg-remove-ssh_genkeytypes-in-settings.py.patch [RHEL-16572]
  - Resolves: RHEL-16572
    ([cloud-init][rhel-8] Backport the patch "rhel/cloud.cfg: remove ssh_genkeytypes in settings.py and set in cloud.cfg" to fix settings.py)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Patsy Franklin <pfrankli@redhat.com> - 3.11.0-2
changelog:
  - Choose correct version of python to use.  Require the correct
    sphinx build depending on which python we choose. (#1583117)


author: Brian C. Lane <bcl@redhat.com> - 0.1.1-1
changelog:
  - fixes blueprints end-to-end test (jgiardin)
  - Hides Comment feature from Pending Changes modal (jgiardin)
  - Remove non-functional UI elements/components (jgiardin)
  - fixes line length in unit test (jgiardin)
  - update selector for Edit Blueprint button in test (jgiardin)
  - fixes empty state on blueprints page and tests (jgiardin)
  - fixes spacing errors (jgiardin)
  - fixes bad merges during rebase (jgiardin)
  - handles error case for fetching blueprints (jgiardin)
  - sets timeout on Loading state (jgiardin)
  - how did that 'n' get in there? (jgiardin)
  - fixes line length (jgiardin)
  - Disables actions (jgiardin)
  - Updates UI based on state, for loading and error (jgiardin)
  - Adds reducer for updating state when an error occurs (jgiardin)
  - updates state to hold values for fetch status (jgiardin)
  - components: Use consistent syntax for handlers (lars)
  - Fix two issues. (henrywangxf)
  - test/create.image: simplify shallow wrapper creation (lars)
  - CreateImage: don't call unset handlers (lars)
  - test/create.image: also conider handleStartCompose (lars)
  - correcting the initial state (jgiardin)
  - updates mockState in unit tests to match state updates for Filters (jgiardin)
  - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin)
  - Remove mock data (lars)
  - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf)
  - Domain socket support in UI testing. (henrywangxf)
  - Update queue status text, Remove cancel button (jacobdkozol)
  - Added status icons for imageListView (jacobdkozol)
  - Add start compose functionality (jacobdkozol)
  - Fix blueprint page issue loading components (jacobdkozol)
  - Remove redux persist (jacobdkozol)
  - Remove unused code (lars)
  - Merge pull request #248 from jgiardino/filter (jgiardin)
  - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin)
  - Fix style of pagination input under available components (anilsson)
  - fix issue when multiple filters are defined (jgiardin)
  - implements filtering and refactors toolbars (jgiardin)


author: Brian C. Lane <bcl@redhat.com> - 0.1.2-1
changelog:
  - New Version 0.1.2
    Related: rhbz#1613058
  - Add the .spec files to .PHONY (bcl)
  - Add welder-web and cockpit-composer release instructions (bcl)
  - Add a 'tag' target to the Makefile (bcl)
  - Adjust image list layout to improve alignment (jgiardin)
  - Fix blueprint packages getting added to history (jacobdkozol)
  - Fixed bug where startComposeApi would not return start compose response (sfondell)
  - Run `make po-push` from travis on pushes to master. (dshea)
  - Add a po-push target to the Makefile. (dshea)
  - Don't call compose API on the blueprints page (lars)
  - Support downloading images (lars)
  - Fix fetchComposes() call (lars)
  - Update text string (jgiardin)
  - add bootstrap class for large modals (jgiardin)
  - Fix issues with translated strings and add one more for "Close" (jgiardin)
  - Make strings translatable (but includes build error) (jgiardin)
  - Update layout (jgiardin)
  - Don't show custom sources section if empty (jgiardin)
  - Add modal for listing sources (jgiardin)
  - Revert "Revert "Add python and gcc to the Dockerfiles."" (dshea)
  - Include translations in the dist tarball (dshea)
  - Remove the zanata-js crud from package-lock.json (dshea)
  - Fix how fetching blueprints/composes is triggered (jacobdkozol)
  - Update API calls error messages (jacobdkozol)
  - Fix polling issue. Add error action. (jacobdkozol)
  - Add loading images from prior sessions and sort by start time. (jacobdkozol)
  - Revert "Run `npm rebuild` after `npm install`." (lars)
  - Revert "Add python and gcc to the Dockerfiles." (lars)
  - Don't update translations on every build (lars)
  - Fix yamllint errors on .travis.yml (dshea)
  - Add new requirements to the travis environment (dshea)
  - Add a script for testing translations. (dshea)
  - Run `npm rebuild` after `npm install`. (dshea)
  - Make the editBlueprint selector more specific. (dshea)
  - Add python and gcc to the Dockerfiles. (dshea)
  - Add a i18n section to the README (dshea)
  - Create cockpit translation modules. (dshea)
  - Extract cockpit manifest strings for translation. (dshea)
  - Add translated messages. (dshea)
  - Add scripts for interacting with Zanata. (dshea)
  - Internationalize strings with react-intl. (dshea)
  - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf)
  - Build srpm together with rpm (atodorov)
  - Images list UI refinements (jgiardin)
  - cockpituous-release: Use upstream release-source (martinpitt)
  - core: Use escalated privileges to access Lorax API (stefw)
  - remove utils from Layout (jgiardin)
  - Remove unused Layout components (jgiardin)
  - Submit coverage report only if present (atodorov)
  - Use default composer dir without --group option (atodorov)
  - Fix created image not being added to state (jacobdkozol)
  - package.json: Remove bootstrap-select (lars)
  - package.json: Update stylelint (lars)
  - blueprints: Show actual error message (lars)
  - core: propagate errors from cockpitFetch() (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.3-1
changelog:
  - New version 0.1.3
    Related: rhbz#1613058
  - Update Create Image notifications (#328) (jgiardin)
  - Make strings translatable in Pending Changes dialog (#341) (jgiardin)
  - Makefile: don't run po-pull on dist (lars)
  - Add the .spec files to .PHONY (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.1.4-1
changelog:
  - New version 0.1.4
    Related: rhbz#1613058
  - Adds queue status to an infotip in the Create Image modal (jgiardin)
  - Update Create Image modal to also commit unsaved changes (jgiardin)
  - Catching a couple of minor issues (jgiardin)
  - Update Create Image modal to include blueprint object instead of just name (jgiardin)
  - Update Create Image button selector in end-to-end test (jgiardin)
  - Display warning messages to the user in Create Image modal (jgiardin)
  - use updated property key from api for date created (jgiardin)
  - translations: Fail when zanata-js is not installed (lars)
  - README.md: Add missing `translations:` (lars)
  - translations: remove test target (lars)
  - po: Update from Fedora Zanata (lars)
  - translations: move po files and scripts to po/ (lars)
  - translations: Strip country code when loading react-intl's locale-data (mpitt)
  - remove redundant .then(data => data) (jgiardin)
  - Add ability to stop builds that are waiting or running (jgiardin)
  - Change text from "Delete Build" to "Delete Image" (jgiardin)
  - Update Delete Blueprint modal to match layout of Delete Build (jgiardin)
  - Fix miscellaneous propType warnings (jgiardin)
  - Include confirmation modal for deleting a finished build (jgiardin)
  - Swap order of date and type in the Image list item details (jgiardin)
  - Add Delete action for Finished composes (jgiardin)
  - Add ability to delete Failed builds (jgiardin)
  - test_blueprints: Make blueprint selection more robust (lars)
  - Use upstream patternfly-react's Tab component (lars)
  - Changes en-dash to dash and adds spaces (jgiardin)
  - Updates based on a11y review, also simplified i18n format (jgiardin)
  - minor tweaks to improve the screen reader experience (jgiardin)
  - Makes strings translatable in pagination for available components (jgiardin)
  - Update React and enzyme (lars)
  - package.json: Use ~ instead of ^ versions for dependencies (lars)
  - Drop unused dependencies (lars)
  - package.json: update dependencies (lars)
  - Remove package-lock.json (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.5-1
changelog:
  - New version 0.1.5
    Related: rhbz#1613058
  - Found a code coverage bug and fix it. (henrywangxf)
  - Update README.md to support Cockpit CI. (henrywangxf)
  - Updates Create Image modal to not have a default image type (jgiardin)
  - Add support for Modules during Add/Remove (jgiardin)
  - new test: Build mock images and verify download becomes enabled (atodorov)
  - Fix flaky issue when running test on chrome (henrywangxf)
  - Add selenium debug support. (henrywangxf)
  - Creates user-friendly labels to display for image types (jgiardin)
  - Compile with code coverage enabled, collect coverage result and upload to codecov.io. (henrywangxf)
  - new test: verify stock blueprints from backend are displayed (atodorov)
  - Simplify selenium startup again (mpitt)
  - Temporarily support selenium images with and without -debug variants (mpitt)
  - Fix python string format issue (henrywangxf)
  - Remove ugly blank except in tests (henrywangxf)
  - README: We're running tests on Cockpit's CI now (lars)
  - Fix tests to not exit with non-zero code (#362) (henrywangxf)
  - Update Discard Changes to delete workspace (jgiardin)
  - Fix test case "Then selected component icon should have border" (henrywangxf)
  - Cockpit CI Integration (henrywangxf)
  - Display modules in list of selected components (jgiardin)
  - pass blueprint data that's expected on save (jgiardin)
  - Fix /run/weldr permission issue (henrywangxf)
  - Fix end-to-end test cases (henrywangxf)
  - po: Update Japanese translations from Zanata (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.6-1
changelog:
  - New version 0.1.6
    Resolves: rhbz#1640184
  - Include spec into release tarball (mpitt)
  - Fix a bug in importSanity test. (henrywangxf)
  - Add RHEL-X in welder-web test scenarios. (henrywangxf)
  - test: Support Cockpit test scenario (mpitt)
  - Makefile: Simplify variable defaults (mpitt)
  - A big commit to fix random failure on chrome. (henrywangxf)
  - Remove inert 'Architecture' field in 'Create Image' dialog (#388) (stefw)
  - po: Update from Fedora Zanata (lars)
  - Remove ForEach to run two test cases but use two separate cases. If there's
    one case failed, I can find it according to case name. (henrywangxf)
  - Wait for delete menu action visable before click it. (henrywangxf)
  - test: Drop node installation from vm.install (mpitt)
  - Don't clean bots/ directory for VM preparation (mpitt)
  - Two improvements: (henrywangxf)
  - Go to view blueprint page by clicking blueprint name link instead of by URL.
    That helps improving case stability. (henrywangxf)
  - Move sed to test/vm.install from test/run because developers do not normally
    use test/run to trigger tests. (henrywangxf)
  - test: Only install node if it isn't already available (mpitt)
  - Makefile: bots is not a phony target (mpitt)


author: Brian C. Lane <bcl@redhat.com> - 0.1.7-1
changelog:
  - New version 0.1.7
    Resolves: rhbz#1640184
  - Capitalize OpenStack corrently in the image create dialog (anilsson)
  - Add AppStream metainfo (mpitt)
  - Make cockpit-composer the only package name (mpitt)
  - Lots of integration test improvements (henrywangxf)


author: Martin Pitt <mpitt@redhat.com> - 0.1.8-1
changelog:
  - New version 0.1.8
  - Provide visual indication when a blueprint component is a dependency
  - Enable Undo to retrieve changes after the Discard Changes action
  - Update how blueprint contents are depsolved when contents are added/removed
  - Display an error if a component is added that results in a depsolve failure
  - Show all versions available for a package
  - Provide ability to specify a wildcard version for a package rhbz#1673066


author: Martin Pitt <mpitt@redhat.com> - 0.3-1
changelog:
  - New version 0.3
  - Add/edit/remove sources
  - Remove new line in encrypted password rhbz#1655862
  - Resolve issues with changes saved to the workspace


author: Martin Pitt <mpitt@redhat.com> - 4-1
changelog:
  - Add additional blueprint name validation rhbz#1696415
  - Fix images not loading on refresh
  - Add notification for source repo deletion
  - Fix AppStream ID
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Show depsolve errors on the blueprints page
  - Add labels for additional output types (rhbz#1769154)
  - Expose Image Builder on /composer, not /welder
  - Define a URL for each tab on a blueprint page
  - Provide a link in the image creation notification to the Images tab on the blueprint page


author: Matej Marusak <mmarusak@redhat.com> - 12.1-1
changelog:
  - Fix integration tests, external test repository URL ceased to exist
  - Translation updates rhbz#1784453
  - Add documentation URL page help menu


author: Lars Karlitski <larskarlitski@redhat.com> - 21.1-1
changelog:
  - Support setting parameters (ref and parent) for ostree images
  - Loosen restrictions on password strength
  - Various UI refinements


author: Jacob Kozol <jkozol@redhat.com> - 22.1-1
changelog:
  - Patternfly imports are standardized to be consistent with cockpit
  - Cancel image build button bug fixed
  - Empty components state provides a help message
  - Wizard component has bug fixes and is refactored for future scalability
  - Test updates
  - ESLint upgraded to version 7 and the code style is improved
  - Translation files are updated from fedora weblate
  - Cockpit-composer's dependency on osbuild-composer  is more specific
  - Coverity scan is now supported to help improve code quality
  - Resolves: #1820539


author: Jacob Kozol <jkozol@redhat.com> - 27-1
changelog:
  - Sync with upstream release 27
  - Add additional form validation for the Create Image Wizard
  - Improve page size dropdown styling
  - Improve error state messages
  - Update pagination component for pf4
  - Add wildcards and support for multiple values to input filter
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 29-1
changelog:
  - Add ability to upload to VMWare
  - Add support for additional ostree parameters
  - Update NPM dependencies
  - Add and update translations
  - Minor test fixes


author: Jacob Kozol <jkozol@redhat.com> - 29.1-1
changelog:
  - Add RHEL for Edge Container and Installer image types
  - Update translations
  - Add tests for new image types
  - Improve test reliability


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Fix building with platform-python rhbz#1631174
  - Machines: Fix system VMs with non-root users rhbz#1632772
  - Machines: Offer cockpit-machines as Application


author: Martin Pitt <mpitt@redhat.com> - 181-1
changelog:
  - Fix key typing in file auto complete widget rhbz#1637866
  - Use libvirt-dbus by default rhbz#1637803


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Machines: Manage storage pools
  - Machines: libvirt connection choice during VM creation
  - PackageKit page: Display registration status clearly
  - Drop .map files from -tests, should be only in debuginfo package rhbz#1648953


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Machines: Fix Dialog and tab layouts rhbz#1658490, rhbz#1657119
  - Machines: Fix information popup in vCPU dialog rhbz#1657133
  - Machines: Enforce https:// URLs for remote VM image locations rhbz#1644267
  - Storage: Filesystem labels are validated upfront rhbz#1655580
  - Storage: Some mount options are prefilled when needed
  - Storage: Fix empty tooltips rhbz#1655922


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Machines: Remove useless notifications from disk tab rhbz#1632800
  - Machines: Add deletion and deactivation of storage pools/volumes
    rhbz#1658847, rhbz#1668882, rhbz#1668877
  - Machines: Fix preparation of disk data for disks of type volume rhbz#1661897
  - Machines: Add disk format field when creating new disk xml rhbz#1662213
  - Machines: Fix storage pool state after destroy/undefine rhbz#1663793
  - Machines: Add import of existing images rhbz#1666825
  - Machines: Enable/disable VM autostart rhbz#1670491


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - Storage: Fix pre-filling of vdo fstab options rhbz#1672935
  - Machines: Add PXE boot rhbz#1680973
  - Machines: Add pause/resume rhbz#1680401
  - Machines: Configure boot device order rhbz#1672760
  - Machines: Import existing qcow2 image rhbz#1666825
  - Machines: Edit virtual memory rhbz#1676557
  - Machines: Deletion of storage volumes rhbz#1668882


author: Martin Pitt <mpitt@redhat.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Machines: Auto-detect guest operating system rhbz#1652959
  - Machines: Support https://*.iso installation source rhbz#1684422
  - Machines: Fix crash on VM creation with Edge browser rhbz#1692707
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Machines: Support ISO source from http:// rhbz#1644267
  - Machines: Select destination storage pool on creation rhbz#1658852
  - Machines: Hide iscsi-direct type from create new pool dialog when not
    available rhbz#1709708
  - Machines: Fix handling of storage pools that failed to get active
    rhbz#1715388
  - Machines: Fix OS detection while changing installation source rhbz#1715409


author: Martin Pitt <mpitt@redhat.com> - 197-1
changelog:
  - Machines: Support all storage pool types for new disks
  - Machines: Show available space on host at VM creation
  - Machines: Fix regression on network tab rhbz#1720267


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - New upstream release 219
  - Send key functionality for the virtual machines (rhbz#1693487)
  - Fix dnf-automatic timer parsing (rhbz#1829685)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - machines: Remove --noreboot parameter to virt-install for VM installation
    (rhbz#1750637)
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 224-1
changelog:
  - Translation updates
  - Machines: Remove creation of user account (rhbz#1853918)
  - Machines: Fix reboot after PXE installation (rhbz#1853408, rhbz#1859045)
  - Machines: Fix notification for transient VMs (rhbz#1853649)
  - Machines: Make Storage/Network lists consistent with VM list (rhbz#1854257)
  - Machines: Fix close button on NIC Edit modal dialog header (rhbz#1857044)


author: Matej Marusak <mmarusak@redhat.com> - 224.1-1
changelog:
  - machines: add padding to storage pools list cells (rhbz#1857500)
  - machines: Fix OS autodetection in create VM dialog (rhbz#1862333)
  - machines: Fix TypeError for OSRow in VM creation dialog (rhbz#1862106)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Dominik Rehak <drehak@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Fix showing remediations when leapp is killed
    Resolves: #1873184
  - Add support of dialog related report entries
    Resolves: #1873608


author: Dominik Rehak <drehak@redhat.com> - 0.1.3-1
changelog:
  - Update to 0.1.3
  - Fix running remediation commands
    Resolves: #1877313
  - Fix showing report when not logged in as superuser
    Resolves: #1859779


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-2
changelog:
  - Updated dependencies regarding rename of binary packages
    in leapp-repository
    Resolves: #2017115


author: Petr Stodulka <pstodulk@redhat.com> - 0.1.6-3
changelog:
  - Updated dependencies to make possible the upgrade of the package
    during IPU 7 -> 8
  - Resolves: #2037743


author: Bob Mader <bob@redhat.com> - 0.1.7-1
changelog:
  - Update to 0.1.7
  - Make report UI compatible with report-schema 1.2.0
    Resolves: RHEL-55438
  - Fix remediation plan back button behavior
    Resolves: RHEL-30012


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Martin Pitt <mpitt@redhat.com> - 242-1
changelog:
  - Updates: Show subscription status on cloud images (rhbz#1931429)
  - Machines: Allow creation of non-root user for unattended installations (rhbz#1940287)


author: Martin Pitt <mpitt@redhat.com> - 246-1
changelog:
  - Polish of the Storage page
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 248-1
changelog:
  - Machines: Share host files with the guest using virtiofs
  - Machines: Show list of pass-through devices


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - Machines: Fix input for "Target Path" when Creating storage pool (rhbz#1866225)
  - Machines: Don't round or floor memory and storage size unnecessarily (rhbz#1979152)
  - Machines: Use cockpit's proxy API for monitoring libvirt service changes (rhbz#1974223)
  - Machines: Fix ooops when press the down arrow several times when inputting custom path (rhbz#1977554)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Software Updates: Introduce basic kpatch support
  - Software Updates: Handle unregistered RHEL systems with non-CDN OS repository
    (rhbz#1970057)
  - Machines: Read qemu.conf to get spice/vnc address (rhbz#1963701)


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Machines: Parse supported disk bus types from domcapabities (rhbz#1862779)
  - Machines: Stop exposing unattended installation option for ISO installation
    media (rhbz#1868594)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Machines: Now officially supported on Arch Linux (https://archlinux.org/)
  - Machines: Support selecting between consoles of the same type


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 269-1
changelog:
  - Show base-10 units by default (rhbz#1970119)
  - Apps: Fix i18n (rhbz#2018389)
  - Software Updates: Install kpatches only (rhbz#2039989)
  - Machines: Fix deleting net interfaces with non-unique MAC address (rhbz#1867478)
  - Machines: Create disks with random/customizable serial number (rhbz#2036330)
  - Machines: Fix network interface source icon (rhbz#2063680)


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Software Updates: Optionally reboot after updating
   - Machines: Show toast notication if VM's storage deletion fails (rhbz#2105984)


author: Matej Marusak <mmarusak@redhat.com> - 278-1
changelog:
  - Machines: Allow TRIM/UNMAP requests by default for newly added disks
  - Machines: Insert and eject CD & DVD media


author: Katerina Koukiou <kkoukiou@redhat.com> - 283-1
changelog:
  - Machines: Summarize system and user session differences
  - Machines: Virtual watchdog device support


author: Martin Pitt <mpitt@redhat.com> - 284-1
changelog:
  - Storage: Set up a system to use NBDE
  - Machines: Option to forcefully revert a snapshot
  - Fix tabular numbers font


author: Katerina Koukiou <kkoukiou@redhat.com> - 289-1
changelog:
  - Machines: Show an alert when virtualization is disabled in BIOS/EFI
  - Storage: Mounting filesystems at boot time
  - Machines: Create VM based on cloud image and start it later (rhbz#1913548)


author: Martin Pitt <mpitt@redhat.com> - 291-1
changelog:
  - Update to PatternFly 5 Alpha
  - Machines: Option to use RAW volume during VM creation
  - Machines: Redesign VM’s CPU configuration


author: Martin Pitt <mpitt@redhat.com> - 292-1
changelog:
  - Metrics: Add disk IO per service
  - Several right-to-left language fixes
  - Machines: Apply watchdog changes on next boot if hotplug fails


author: Martin Pitt <mpitt@redhat.com> - 295-1
changelog:
  - Machines: Vsock device support
  - Machines: Confirm shutdown actions
  - Machines: Show virtual interface's TAP device


author: Martin Pitt <mpitt@redhat.com> - 296-1
changelog:
  - Machines: Fix "Edit" button CSS for transient VMs (rhbz#2215597)
   - Machines: Fix format detection for CD/DVD images (rhbz#2215599)


author: Martin Pitt <mpitt@redhat.com> - 299-1
changelog:
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Martin Pitt <mpitt@redhat.com> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Martin Pitt <mpitt@redhat.com> - 2-1
changelog:
  - Update to upstream 2 release
  - Support podman API 1.3
  - Support running commands with arguments
  - Show the default command coming from image
  - Implement filtering of images and containers


author: Martin Pitt <mpitt@redhat.com> - 3-1
changelog:
  - Enable Commit button for running containers
  - Fix race condition with container deletion
  - Stop fetching all containers/images for each container/image event


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit - bug 1732713
  - Add container Terminal - bug 1703245
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25138


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit rhbz#1732713
  - Add container Terminal rhbz#1703245


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25139


author: Matej Marusak <mmarusak@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates


author: Jindrich Novy <jnovy@redhat.com> - 15-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/15
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 16-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/v16
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 17-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/17
  - Related: RHELPLAN-39206


author: Matej Marusak <mmarusak@redhat.com> - 15-1
changelog:
  - Drop obsolete functionality for Fedora Atomic
  - Localize dates and times
  - Make tests non-destructive, to support gating
  - Fix crash on filtering anonymous images
  - Translation updates
  - Show historical logs


author: Jindrich Novy <jnovy@redhat.com> - 25-3
changelog:
  - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 25-4
changelog:
  - replace docker.io with quay.io for gating tests due do
    docker.io new pull rate limit requirements
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 27.1-3
changelog:
  - another gating test fix - don't remove all containers but only admin ones
    thanks to Matej Marusak
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 69-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/69
  - use unified spec file
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 77-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/77
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 78-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/78
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 79-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/79
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 80-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/80
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 81-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/81
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 82-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/82
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 83-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/83
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: Jira:RHEL-25557


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correct path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6
  - Bump testlib to 229
  - Add binary recording test
  - Update UI to adopt PatternFly 4
  - Update dependencies
  - Use --all journalctl option
  - Fixed timezone issue by searching in client time
  - Bump cockpit test version from 199 to 219
  - Improve test coverage with more tests
  - Simplify and cleanup existing tests


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 2-1
changelog:
  - Release 2
  - Optimize performance when playing back flooded output recordings.
  - Make Logs View optional rendered with a toggle button.
  - Make Logs component a child of Recording component.
  - Fix Recording page column sorting in Google Chrome.
  - CSS updates for Patternfly 4 compatibility.
  - Replace term.js with maintained xterm.js library.
  - Fix hostname and username filtering.


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-11
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990397


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-164.2
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045062).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Arjun Shankar <arjun@redhat.com> - 2.28-216
changelog:
  - Retain .gnu_debuglink section for libc.so.6 (#2115830)
  - Remove .annobin* symbols from ld.so
  - Remove redundant ld.so debuginfo file


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Jens Petersen <petersen@redhat.com> - 1.0.8-4
changelog:
  - change ja_JP.SAPSJIS locale from SAP SHIFT_JIS to SAP SHIFT_JISX0213
    (Takao Fujiwara, #888856)
  - previous ja_JP.SAPSJIS locale is still available as ja_JP.oldsapsjis
  - fix install and uninstall scripts to setup the Shift JIS gconv modules
    correctly when upgrading


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-2
changelog:
  - Fix build for RHEL-8
  - Resolves: rhbz#1523696
  - add BuildRequires:  glibc-locale-source
  - fix glibc-cs_CZ@SAP.patch
  - fix glibc-cs_CZ@HPUX.patch
  - fix glibc-sk_SK@SAP.patch
  - fix glibc-tr_TR@SAP.patch
  - fix category in glibc-2.5-de_DE and glibc-2.5-es_ES
  - add patch for iconv stuff for RHEL-8
  - add


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-5
changelog:
  - Move all files into the main package and drop compat-locales-sap-common
    sub-package.
  - Resolves: rhbz#1639296


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-7
changelog:
  - Remove "Requires: glibc-all-langpacks" again and drop the
    posttrans and postun scripts instead. If these scripts are removed,
    glibc-all-langpacks is not needed anymore.
    This avoids problems with /usr/sbin/build-locale-archive.
  - Related: rhbz#1688815


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-8
changelog:
  - Remove  BuildArch: noarch. The binary locales are architecture
    dependent.
  - Related: rhbz#1688815


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-9
changelog:
  - Add Conflicts: compat-locales-sap <= 1.0.10-6 to avoid
    rpmdeplint error because of the architecture change.
  - Related: rhbz#1688815


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077418


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Brian C. Lane <bcl@redhat.com> 28.14.14-1
changelog:
  - Update cli tests to use composer-cli name (bcl)
    Related: rhbz#1635763
  - Revert "Rename composer-cli to composer" (bcl)
    Related: rhbz#1635763


author: Brian C. Lane <bcl@redhat.com> 28.14.15-1
changelog:
  - Add an openstack image type (bcl)
    Resolves: rhbz#1628645
  - Add cloud-init to vhd images. (dshea)
    Related: rhbz#1628648
  - Replace /etc/machine-id with an empty file (dshea)
    Related: rhbz#1628648
    Related: rhbz#1628645
    Related: rhbz#1628647
    Related: rhbz#1628646


author: Brian C. Lane <bcl@redhat.com> 28.14.16-1
changelog:
  - Fix vhd images (vponcova)
    Related: rhbz#1628648
  - Update depsolving with suggestions from dnf (bcl)
    Resolves: rhbz#1638683


author: Brian C. Lane <bcl@redhat.com> 28.14.17-1
changelog:
  - Update documentation for - 28.14.17 (bcl)
    Related: rhbz#1645189
  - lorax-composer: Install selinux-policy-targeted in images (bcl)
    Resolves: rhbz#1645189
  - Remove setfiles from mkrootfsimage (bcl)
    Related: rhbz#1645189
  - Remove SELinux Permissive checks (bcl)
    Resolves: rhbz#1645189
  - New lorax documentation - 28.14.17 (bcl)
    Related: rhbz#1639132
  - Build manpages for composer-cli and lorax-composer (bcl)
    Resolves: rhbz#1639132
  - Add --no-system-repos to lorax-composer (bcl)
    Resolves: rhbz#1650363


author: Brian C. Lane <bcl@redhat.com> 28.14.18-1
changelog:
  - New lorax documentation - 28.14.18 (bcl)
    Related: rhbz#1656642
  - Add openstack to the image type list in the docs (dshea)
    Related: rhbz#1628645
  - lorax-composer: Handle packages with multiple builds (bcl)
    Resolves: rhbz#1656642
  - Adjust test_drtfr_gpgkey to pass on Fedora 28 and RHEL 8 (bcl)
    Related: rhbz#1655876
  - Update the projects tests to use DNF Repo object (bcl)
    Related: rhbz#1655876
  - dnf changed the type of gpgkey to a tuple (bcl)
    Resolves: rhbz#1655876
  - lorax-composer: Add CDN repo checks to startup and compose start. (bcl)
    Resolves: rhbz#1655623
  - lorax-composer: Check for CDN only repos (bcl)
    Related: rhbz#1655623
  - There is no support for edk2-ovmf on arm/arm64 (bcl)
    Resolves: rhbz#1655512
  - lorax-composer: Check the queue and results at startup (bcl)
    Resolves: rhbz#1647985


author: Brian C. Lane <bcl@redhat.com> 28.14.19-1
changelog:
  - lorax: Save information about rootfs filesystem size and usage (bcl)
    Resolves: rhbz#1659625
  - lorax-composer: Cancel running Anaconda process (bcl)
    Resolves: rhbz#1656691
  - Add cancel_func to virt and novirt_install functions (bcl)
    Resolves: rhbz#1656691
  - lorax-composer: Check for STATUS before deleting (bcl)
    Related: rhbz#1656691
  - Check for existing CANCEL request, and exit on FINISHED (bcl)
    Related: rhbz#1656691


author: Brian C. Lane <bcl@redhat.com> 28.14.20-1
changelog:
  - Revert "lorax-composer: Cancel running Anaconda process" (bcl)
    Related: rhbz#1656691
  - Make sure cancel_func is not None (bcl)
    Related: rhbz#1656691
  - Increase boot.iso rootfs to 3GiB (bcl)
    Resolves: rhbz#1661169


author: Brian C. Lane <bcl@redhat.com> 28.14.21-1
changelog:
  - Remove unneeded else from for/else loop. It confuses pylint (bcl)
    Related: rhbz#1664485
  - Allow customizations to be specified as a toml list (dshea)
    Resolves: rhbz#1664485
  - New lorax documentation - 28.14.21 (bcl)
    Related: rhbz#1650295
  - Update the example livemedia-creator kickstarts for RHEL8 (bcl)
    Resolves: rhbz#1650295
  - Change default releasever to 8 (bcl)
    Related: rhbz#1650295


author: Brian C. Lane <bcl@redhat.com> 28.14.22-1
changelog:
  - Report an error if the blueprint doesn't exist (bcl)
    Related: rhbz#1653934
  - tmux is version 2.8 on Fedora 28 (atodorov)
    Related: rhbz#1653934
  - Disable pylint no-member errors for 2 dnf constants (atodorov)
    Related: rhbz#1653934
  - Backport cloud image tests to RHEL 8 (atodorov)
    Related: rhbz#1653934


author: Brian C. Lane <bcl@redhat.com> 28.14.23-1
changelog:
  - lorax: Move default tmp dir to /var/tmp/lorax (bcl)
    Resolves: rhbz#1668408
  - Expand parameters as separate words (jstodola)
    Related: rhbz#1653934
  - Add /usr/local/bin to PATH for tests (atodorov) (atodorov)
  - Do not generate journal.xml from beakerlib (atodorov)
    Related: rhbz#1653934
  - Use any tmux version (atodorov)
    Related: rhbz#1653934
  - Make test scripts executable with chmod +x (atodorov)
    Related: rhbz#1653934


author: Brian C. Lane <bcl@redhat.com> 28.14.23-2
changelog:
  - lorax-composer: pass customization.kernel append to extra_boot_args (bcl)
    Resolves: rhbz#1690068
  - Improve logging for template syntax errors (bcl)
    Related: rhbz#1690068
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Related: rhbz#1690068
  - lorax-composer: Add the ability to append to the kernel command-line (bcl)
    Related: rhbz#1690068
  - Add some extra cancel_func protection to QEMUInstall (bcl)
    Related: rhbz#1690507
  - installer: make sure cancel_func has a value (yuvalt)
    Resolves: rhbz#1690507


author: Brian C. Lane <bcl@redhat.com> 28.14.23-4
changelog:
  - Revert "lorax-composer: Add CDN repo checks to startup and compose start." (bcl)
    Related: rhbz#1693801
  - Revert "lorax-composer: Check for CDN only repos" (bcl)
    Related: rhbz#1693801
  - Fix bz# for ssl cert patch (bcl)
    Resolves: rhbz#1693801


author: Brian C. Lane <bcl@redhat.com> 28.14.23-6
changelog:
  - Fix path to generic.prm (jstodola)
    Resolves: rhbz#1712822
  - Add kernel to ext4-filesystem template (bcl)
    Resolves: rhbz#1710969
  - lorax-composer: Return UnknownBlueprint errors when using deleted blueprints (bcl)
    Resolves: rhbz#1682992
  - lorax-composer: Delete workspace copy when deleting blueprint (bcl)
    Related: rhbz#1682992


author: Brian C. Lane <bcl@redhat.com> 28.14.23-7
changelog:
  - tests: Make it easier to update version globs (bcl)
    Related: rhbz#171282
  - Add patches to lorax.spec (bcl)
    Related: rhbz#1712822


author: Brian C. Lane <bcl@redhat.com> 28.14.24-1
changelog:
  - Add a ppc64le template for live iso creation (bcl)
    Related: rhbz#1673744
  - Move the package requirements for live-iso setup out of the template (bcl)
    Resolves: rhbz#1673744
  - Remove exclusions from lorax-composer templates (bcl)
    Related: rhbz#1673744
  - Add LiveTemplateRunner to parse per-arch live-iso package requirements (bcl)
    Related: rhbz#1673744
  - Move the run part of LoraxTemplateRunner into new TemplateRunner class (bcl)
    Related: rhbz#1673744
  - lorax-composer: Use reqpart --add-boot for partitioned disk templates (bcl)
    Related: rhbz#1673744
  - livemedia-creator: Add support for reqpart kickstart command (bcl)
    Related: rhbz#1673744
  - Fix make_appliance and the libvirt.tmpl (bcl)
    Related: rhbz#1673744
  - Add get_file_magic to tests/lib.py (bcl)
    Related: rhbz#1673744
  - Clarify the ks repo only error message (bcl)
    Related: rhbz#1673744
  - Add tests to test_creator.py (bcl)
    Related: rhbz#1673744
  - Add some tests for creator.py (bcl)
    Related: rhbz#1673744
  - Make the lorax-composer ks templates more generic (bcl)
    Related: rhbz#1673744
  - Add some extra cancel_func protection to QEMUInstall (bcl)
    Related: rhbz#1684316
  - installer: make sure cancel_func has a value (yuvalt)
    Resolves: rhbz#1684316
  - Update VMware datastore location to unblock tests (chrobert)
    Related: rhbz#1678937
  - Allow overriding $CLI outside test scripts (atodorov)
    Related: rhbz#1678937
  - Use make ci inside test-in-copy target (atodorov)
    Related: rhbz#1678937
  - New test: Build live-iso and boot with KVM (atodorov)
  - New test: Build qcow2 compose and test it with QEMU-KVM (atodorov)
  - Removed remnants of fedora branding. (47631017+jakub-vavra)
    Resolves: rhbz#1672583
  - Drop auth from the kickstart examples (bcl)
    Resolves: rhbz#1672583
  - New test: Verify tar images with Docker and systemd-nspawn (atodorov)
  - Update OpenStack flavor and network settings in tests (atodorov)
  - Use existing storage account (jstodola)
  - Record date/time of VM creation (jstodola)
  - Make sure compose build tests run with SELinux in enforcing mode (jikortus)


author: Brian C. Lane <bcl@redhat.com> 28.14.25-1
changelog:
  - New lorax documentation - 28.14.25 (bcl)
    Related: rhbz#1687743
  - lorax-composer: pass customization.kernel append to extra_boot_args (bcl)
    Resolves: rhbz#1687743
  - Improve logging for template syntax errors (bcl)
    Related: rhbz#1687743
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Related: rhbz#1687743
  - lorax-composer: Add the ability to append to the kernel command-line (bcl)
    Related: rhbz#1687743
  - lorax-composer: Return UnknownBlueprint errors when using deleted blueprints (bcl)
    Resolves: rhbz#1683441
  - lorax-composer: Delete workspace copy when deleting blueprint (bcl)
    Related: rhbz#1683441
  - Remove 3G minimum from lorax-composer (bcl)
    Resolves: rhbz#1677741


author: Brian C. Lane <bcl@redhat.com> 28.14.26-1
changelog:
  - Only use repos with valid urls for test_server.py (bcl)
    Related: rhbz#1678937
  - Use strict=False when reading repo files (bcl)
    Related: rhbz#1678937
  - tests: Skip docs if not installed (bcl)
    Related: rhbz#1678937
  - tests: Make sure example-development is present for delete test (bcl)
    Related: rhbz#1678937
  - tests: Make it easier to update version globs (bcl)
    Related: rhbz#1678937
  - tests: Select the group to use based on the release (bcl)
    Related: rhbz#1678937
  - Add requirements-test.txt (bcl)
    Related: rhbz#1678937
  - Fix the google cloud boot console settings (dshea)
    Related: rhbz#1689140
  - Add a compose type for alibaba. (dshea)
    Resolves: rhbz#1689140
  - Add a compose check for google cloud images. (dshea)
    Related: rhbz#1689140
  - Add a compose type for Google Compute Engine (dshea) (dshea)
  - Add a new output type, tar-disk. (dshea)
    Related: rhbz#1689140
  - Support compressing single files. (dshea)
    Related: rhbz#1689140
  - Add an option to align the image size to a multiplier. (dshea)
    Related: rhbz#1689140
  - Pass ssl certificate options to anaconda (lars)
    Resolves: rhbz#1663950
  - Add checks for disabled root account (jikortus)
  - Fixup lorax.spec bugs (bcl)
    Related: rhbz#1678937


author: Brian C. Lane <bcl@redhat.com> 28.14.27-1
changelog:
  - Add kernel to ext4-filesystem template (bcl)
    Resolves: rhbz#1709792
  - Switch the --virt-uefi method to use SecureBoot (bcl)
    Resolves: rhbz#1691661
  - qemu wasn't restoring the terminal if it was terminated early (bcl)
    Resolves: rhbz#1691632
  - Revert "lorax-composer: Add CDN repo checks to startup and compose start." (bcl)
    Related: rhbz#1691969
  - Revert "lorax-composer: Check for CDN only repos" (bcl)
    Related: rhbz#1691969
  - Add test for passing custom option on kernel command line (jikortus)
    Related: rhbz#1687743
  - Use verify_image function as a helper for generic tests (jikortus)
    Related: rhbz#1704172
  - Change [[modules]] to [[packages]] in tests (atodorov)
    Related: rhbz#1698368
  - Add new test to verify compose paths exist (atodorov)
    Related: rhbz#1698368
  - Add new sanity tests for blueprints (atodorov)
    Related: rhbz#1698368
  - Update VMware info for VMware testing (chrobert)
    Related: rhbz#1678937
  - Add test for starting compose with deleted blueprint (jikortus)
    Related: rhbz#1699303
  - Fixes for locked root account test (jikortus)
    Related: rhbz#1698473
  - Fix lorax.spec bz reference (bcl)
    Related: rhbz#1678937


author: Brian C. Lane <bcl@redhat.com> 28.14.28-1
changelog:
  - Create a lorax-docs package with the html docs (bcl)
    Resolves: rhbz#1695274
  - Fix path to generic.prm (jstodola)
    Resolves: rhbz#1714107


author: Brian C. Lane <bcl@redhat.com> 28.14.29-1
changelog:
  - tests: Update openssh-server to version * (bcl)
    Related: rhbz#1678937
  - Remove repos.git related tests (bcl)
    Related: rhbz#1709595
  - composer-cli: Update diff support for customizations and repos.git (bcl)
    Related: rhbz#1709595
  - Add support for customizations and repos.git to /blueprints/diff/ (bcl)
    Related: rhbz#1709595
  - tests: Update custom-base with customizations (bcl)
    Related: rhbz#1709595
  - Change customizations.firewall to append items instead of replace (bcl)
    Resolves: rhbz#1709595
  - Update customizations.services documentation (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add services support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add firewall support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add locale support to blueprints (bcl)
    Related: rhbz#1709595
  - lorax-composer: Fix customizations when creating a recipe (bcl)
    Related: rhbz#1709595
  - Update docs for new timezone section (bcl)
    Related: rhbz#1709595
  - lorax-composer: Add timezone support to blueprint (bcl)
    Related: rhbz#1709595
  - Proposal for adding to the blueprint customizations (bcl)
    Related: rhbz#1709595


author: Brian C. Lane <bcl@redhat.com> 28.14.30-1
changelog:
  - New lorax documentation - 28.14.30 (bcl)
    Related: rhbz#1709594
  - Assert that RuntimeErrors have correct messages (egoode)
    Related: rhbz#1709594
  - More descriptive error for a bad ref in repos.git (egoode)
    Related: rhbz#1709594
  - Add more tests for gitrpm.py (bcl)
    Related: rhbz#1709594
  - lorax-composer: Fix installing files from [[repos.git]] to / (bcl)
    Related: rhbz#1709594
  - Add tests using repos.git in blueprints (bcl)
    Related: rhbz#1709594
  - Move git repo creation into tests/lib.py (bcl)
    Related: rhbz#1709594
  - rpmgit: catch potential errors while running git (bcl)
    Related: rhbz#1709594
  - tests: Add test for Recipe.freeze() function (bcl)
    Related: rhbz#1709594
  - Add repos.git support to lorax-composer builds (bcl)
    Related: rhbz#1709594
  - Add pylorax.api.gitrpm module and tests (bcl)
    Related: rhbz#1709594
  - Add support for [[repos.git]] section to blueprints (bcl)
    Resolves: rhbz#1709594
  - [tests] Handle blueprints in setup_tests/teardown_tests correctly (atodorov)
    Related: rhbz#1714298
  - tests: Set BLUEPRINTS_DIR in all cases (lars)
    Related: rhbz#1714298


author: Brian C. Lane <bcl@redhat.com> 28.14.33-1
changelog:
  - New lorax documentation - 28.14.33 (bcl)
    Related: rhbz#1761653
  - docs: Increase root filesystem to 2000 in rhel-minimal.ks (bcl)
    Resolves: rhbz#1730937
  - Update ppc64le isolabel to match x86_64 logic (bcl)
    Related: rhbz#1757338
  - set inst.stage2 for ppc64le image (dan)
    Related: rhbz#1757338
  - docs: Override macboot/nomacboot documentation (bcl)
    Resolves: rhbz#1761653
  - tests: Keep beakerlib repo on the VM for tests which need it (atodorov)
    Related: rhbz#1769525
  - tests: unskip Qcow2 and Live-ISO scenarios (atodorov)
    Related: rhbz#1769525
  - tests: Ensure failure if beakerlib results file not found (atodorov)
    Related: rhbz#1769525
  - tests: Documentation updates (atodorov)
    Related: rhbz#1769525
  - tests: Use host repositories for make vm (atodorov)
    Related: rhbz#1769525
  - Remove unused make targets (atodorov)
    Related: rhbz#1769525
  - DRY when setting up, running & parsing results for beakerlib tests (atodorov)
    Related: rhbz#1769525
  - tests: Use journalctl -g to check for failed login (bcl)
    Related: rhbz#1769525
  - tests: Fix check_root_account when used with tar liveimg test (bcl)
    Related: rhbz#1769525
  - tests: Use the same asserts as before (atodorov)
    Related: rhbz#1769525
  - tests: switch to using podman instead of docker (atodorov)
    Related: rhbz#1769525
  - tests: Remove nested vm from tar liveimg kickstart test (bcl)
    Related: rhbz#1769525
  - tests: Use --http0.9 for curl ssh test (bcl)
    Related: rhbz#1769525
  - test: Boot the live-iso faster, and login using ssh key (bcl)
    Related: rhbz#1769525
  - tests: Split testing the image into a separate script (bcl)
    Related: rhbz#1769525
  - test: Split up the test class to allow booting other images (bcl)
    Related: rhbz#1769525
  - [tests] Collect compose logs after each build (atodorov)
    Related: rhbz#1769525
  - [tests] Use a function to wait for compose to finish (jikortus)
    Related: rhbz#1769525
  - [tests] Use functions for starting and stopping lorax-composer (atodorov)
    Related: rhbz#1769525
  - tests: Add kickstart tar installation test (jikortus)
    Related: rhbz#1733975
  - tests: add option to disable kernel command line parameters check (jikortus)
    Related: rhbz#1733975
  - tests: Use a loop to wait for VM and sshd to start (bcl)
    Related: rhbz#1733975
  - tests: Drop an old bug reference (bcl) (bcl)


author: Brian C. Lane <bcl@redhat.com> 28.14.34-1
changelog:
  - lorax-composer: Add cloud-init support to the vhd image (bcl)
    Resolves: rhbz#1754711
  - Add dmidecode on supported architectures (bcl)
    Related: rhbz#1714793


author: Brian C. Lane <bcl@redhat.com> 28.14.35-1
changelog:
  - tests: If TEST_OS isn't specified then match the host OS (atodorov)
    Related: rhbz#1769525
  - tests: enable compose_ext4 test to use CDN repos (jrusz)
    Related: rhbz#1777265
  - Add more lines to .gitignore (jrusz)
    Related: rhbz#1777265
  - Remove all repo files & install composer-cli from host repos (atodorov)
    Related: rhbz#1769525
  - Always remove lorax-composer & composer-cli RPMs before installing them (atodorov)
    Related: rhbz#1769525
  - Always remove existing VM image before building new one (atodorov)
    Related: rhbz#1769525


author: Brian C. Lane <bcl@redhat.com> 28.14.36-1
changelog:
  - composer-cli: Only display the available compose types (bcl)
    Related: rhbz#1751998
  - composer-cli: Return int from handle_api_result not bool (bcl)
    Related: rhbz#1779301
  - Add support for API v1 commands upload, and providers (bcl)
    Resolves: rhbz#1779301


author: Brian C. Lane <bcl@redhat.com> 28.14.37-1
changelog:
  - composer-cli: Add python3-pytoml to composer-cli requirements (bcl)
    Related: rhbz#1779301
  - composer-cli: Remove unneeded % from API WARNING message (bcl)
    Related: rhbz#1779301
  - Use mkisofs for the s390 live-iso template (bcl)
    Related: rhbz#1746424


author: Brian C. Lane <bcl@redhat.com> 28.14.38-1
changelog:
  - composer-cli: Increase DELETE timeout to 120s (bcl)
    Resolves: rhbz#1788461
  - Add test for running composer with --no-system-repos option (jikortus)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.39-1
changelog:
  - tests: Enable Elastic Network Adapter support for AWS (atodorov)
    Related: rhbz#1789308
  - AWS test: take into account different instance type for non x86 (atodorov)
    Related: rhbz#1789308
  - lorax-composer: Enable ami on aarch64 (bcl)
    Resolves: rhbz#1789308
  - Add test for canceling a running compose (jrusz)
    Related: rhbz#1788461


author: Brian C. Lane <bcl@redhat.com> 28.14.40-1
changelog:
  - tests: run ssh commands in batch mode (jrusz)
    Related: rhbz#1785154
  - tests: remove --test=2 from compose_sanity (jrusz)
    Related: rhbz#1788461
  - Add tests for metapackages and package name globs (bcl)
    Related: rhbz#1791612
  - tests: Check for cloud-init presence in azure image (jrusz)
    Related: rhbz#1754711


author: Brian C. Lane <bcl@redhat.com> 28.14.41-1
changelog:
  - tests: Add new test to run 'test' and 'check' in cockpit ci (jrusz)
    Related: rhbz#1785154
  - tests: rpm now returns str, drop decode() call (bcl)
    Related: rhbz#1785154
  - tests: Switch to using CentOS8 for the Docker tests (bcl)
    Related: rhbz#1785154
  - tests: Finish switch to using example-development in composer tests (bcl)
    Related: rhbz#1785154
  - tests: this_is_rhel function return true for CentOS or RHEL (bcl)
    Related: rhbz#1785154
  - tests: Disable pylint preexec-fn warning (bcl)
    Related: rhbz#1785154
  - pylint: whitelist the rpm module (bcl)
    Related: rhbz#1785154
  - tests: Use unittest.mock (bcl)
    Related: rhbz#1785154
  - Test & cleanup script for Alibaba cloud (atodorov)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.42-1
changelog:
  - lorax: Restore the 98dracut-systemd service files to the install.img (bcl)
    Related: rhbz#1805405
  - lorax: Add eject back into the boot.iso (bcl)
    Related: rhbz#1805405


author: Brian C. Lane <bcl@redhat.com> - 28.14.42-2
changelog:
  - tests: Add tests for branding (bcl)
  - Move get_dnf_base_object into a module (bcl)
  - lorax: Add --skip-branding cmdline argument (bcl)
    Related: rhbz#1826479
    Resolves: rhbz#1828616


author: Brian C. Lane <bcl@redhat.com> 28.14.47-1
changelog:
  - lorax-composer: Add deprecation notice to documentation (bcl)
    Related: rhbz#1844649
  - composer-cli: Add documentation for uploads and osbuild-composer (bcl)
    Related: rhbz#1844649
  - composer-cli: Remove the upload and providers commands (bcl)
    Related: rhbz#1844649
  - composer-cli: Return a better error with no value (bcl)
    Related: rhbz#1844649
  - tests: rhel8-branch uses nose not pytest (bcl)
    Related: rhbz#1844649
  - tests: Add tests for composer-cli compose start JSON POST (bcl)
    Related: rhbz#1844649
  - composer-cli: Update bash completion for start-ostree (bcl)
    Related: rhbz#1844649
  - composer-cli: Add new start-ostree command (bcl)
    Resolves: rhbz#1844649
  - composer-cli: Add support for --size to compose start (bcl)
    Related: rhbz#1844649
  - composer-cli: pytoml load() needs an open file not a string (bcl)
    Resolves: rhbz#1843704
  - test: Put VM image overlay into /var/tmp (martin) (martin)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.48-1
changelog:
  - composer-cli: Disable retry counter on connection timeout (bcl)
    Related: rhbz#1848727
  - composer-cli: Change timeout to 5 minutes (bcl)
    Resolves: rhbz#1848727


author: Brian C. Lane <bcl@redhat.com> 28.14.49-1
changelog:
  - include generic.ins for s390 boot iso (dan)
    Related: rhbz#1844517
  - Fix the bug referenced in the last build (bcl)
    Resolves: rhbz#1848727


author: Brian C. Lane <bcl@redhat.com> 28.14.50-1
changelog:
  - composer-cli: Make start-ostree parent and ref optional (bcl)
    Resolves: rhbz#1859680
  - composer-cli: Add a get_arg function (bcl)
    Related: rhbz#1859680


author: Brian C. Lane <bcl@redhat.com> 28.14.51-1
changelog:
  - tests: Overwrite rhel-8.json when testing with osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Allow skipping image build in compose sanity test (atodorov)
    Related: rhbz#1825190
  - Set BACKEND=osbuild-composer if running that test scenario (atodorov)
    Related: rhbz#1825190
  - tests: Don't check info after compose cancel with osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Compare blueprints as TOML objects, not strings (atodorov)
    Related: rhbz#1825190
  - tests: Remove lorax-composer specific checks (atodorov)
    Related: rhbz#1825190
  - tests: Remove compose after we're done (atodorov)
    Related: rhbz#1825190
  - tests: don't use beakerlib in blueprint (lars)
    Related: rhbz#1825190
  - tests: don't depend on internal state of composer (lars)
    Related: rhbz#1825190
  - tests: Do not rely on example blueprints (atodorov)
    Related: rhbz#1825190
  - tests: Special case compose types for osbuild-composer (atodorov)
    Related: rhbz#1825190
  - tests: Don't check example blueprints if we don't have to (atodorov)
    Related: rhbz#1825190
  - tests: Use BACKEND env variable instead of hard-coded values (atodorov)
    Related: rhbz#1825190
  - tests: Disable non-cli test scenarios b/c osbuild-composer (atodorov)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.53-1
changelog:
  - tests: Push example blueprints b/c they may not exist (atodorov)
    Related: rhbz#1825190
  - rhel-livemedia.ks: Add anaconda-live package to the example kickstart (bcl)
    Related: rhbz#1691319
  - Switch VMware testing env to improve stability results (chrobert)
    Related: rhbz#1825190


author: Brian C. Lane <bcl@redhat.com> 28.14.56-1
changelog:
  - Switch to using upstream mk-s390image for s390 cdboot.img creation (bcl)
    Related: rhbz#1892404
  - Add --squashfs-only option to drop inner rootfs.img layer (marmarek)
    Resolves: rhbz#1846282


author: Brian C. Lane <bcl@redhat.com> 28.14.57-1
changelog:
  - fixes #543 qemu -nodefconfig deprecated (afm404)
    Resolves: rhbz#1904168
  - sshd_config: Apply suggested changes (bcl)
    Resolves: rhbz#1872892


author: Brian C. Lane <bcl@redhat.com> 28.14.58-1
changelog:
  - composer-cli: Add support for start-ostree --url URL (bcl)
    Resolves: rhbz#1929381
  - tests: Override rhel-8-beta.json repositories for osbuild-composer (atodorov)
  - tests: Remove systemctl for osbuild-composer (atodorov)
  - tests: Start osbuild-composer.socket (bcl)
  - test: Fix vm.install for non-LVM cloud images (martin)


author: Brian C. Lane <bcl@redhat.com> 28.14.59-1
changelog:
  - Backport mkksiso to RHEL 8.5.0 (bcl)
    Resolves: rhbz#1955355
  - Move manpages into the correct subpackages (bcl)
    Resolves: rhbz#1928962
  - composer-cli: Update documentation URLs (bcl)
    Resolves: rhbz#1915361
  - Use wildcard for grub2 modules in livemedia.ks example (bcl)
    Related: rhbz#1973530
  - runtime-install: Install ipcalc (bcl)
    Related: rhbz#1958314
  - test: Add new osbuild-composer expected types (martin) (martin)
  - test: Fix URL to bots testmap (martin) (martin)


author: Brian C. Lane <bcl@redhat.com> 28.14.60-1
changelog:
  - New lorax documentation - 28.14.59 (bcl)
    Related: rhbz#1955355
  - docs: Add missing mkksiso.1 manpage (bcl)
    Related: rhbz#1955355
  - docs: Fix reference in composer-cli.rst (bcl)
    Related: rhbz#1915361
  - Makefile: Use user-mode podman and fix docs-in-docker target (bcl)
    Related: rhbz#1955355


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Brian C. Lane <bcl@redhat.com> 28.14.69-1
changelog:
  - runtime-cleanup: Use branding package name instead of product.name (bcl)
    Related: rhbz#2052154
  - treebuilder: Add branding package to template variables (bcl)
    Related: rhbz#2052154
  - api: Read substitution variables from the host (bcl)
    Resolves: rhbz#2095053
  - tests: Switch to using centos:stream8 for Dockerfile.test (bcl)
    Related: rhbz#2095053


author: Brian C. Lane <bcl@redhat.com> 28.14.70-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042101
  - templates: Don't include redhat.exec on s390 (bcl)
    Related: rhbz#2042101
  - templates: Drop non-64bit PPC support from live grub.cfg (bcl)
    Related: rhbz#2042101
  - templates: Update config_files for inst.* usage (bcl)
    Related: rhbz#2042101
  - tests: Run the 'test-in-docker' tests for github PRs (bcl)
    Resolves: rhbz#2095578


author: Brian C. Lane <bcl@redhat.com> 28.14.71-1
changelog:
  - Makefile: skip running pylint for 'make ci' (bcl)
    Related: RHEL-24416
  - templates: Remove libreport bugzilla plugins (bcl)
    Resolves: RHEL-24416


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.26-3
changelog:
  - fix "Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]"
  - Resolves: #1961682


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-4
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/3161452)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-5
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/b033cb5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-6
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/75e067e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ $1 -eq 0 ]; then 
    if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
      /usr/sbin/semodule -n -X 200 -s ${_policytype} -r macro which uses priority 200. &> /dev/null || : 
      /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
    fi 
  fi 

    Change the install command in the %post section if the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    /usr/sbin/semodule -n -s ${_policytype} -X 200 -i macro. 
    /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
  fi 

    Replace relabel commands with using the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre 
  fi 

    
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
     if [ -f /var/lib/rpm-state/file_contexts.pre ]; then 
       /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null 
       rm -f /var/lib/rpm-state/file_contexts.pre 
     fi 
  fi 

    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ $1 -eq 0 ]; then 
    if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
      /usr/sbin/semodule -n -X 200 -s ${_policytype} -r macro which uses priority 200. &> /dev/null || : 
      /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
    fi 
  fi 

    Change the install command in the %post section if the specfile
    to use the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    /usr/sbin/semodule -n -s ${_policytype} -X 200 -i macro. 
    /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : 
  fi 

    Replace relabel commands with using the 
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
    [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre 
  fi 

    
  . /etc/selinux/config 
  _policytype= 
  if [ -z "${_policytype}" ]; then 
    _policytype="targeted" 
  fi 
  if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then 
     if [ -f /var/lib/rpm-state/file_contexts.pre ]; then 
       /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null 
       rm -f /var/lib/rpm-state/file_contexts.pre 
     fi 
  fi 

    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.123.0-2
changelog:
  - implement spec file refactoring by Zdenek Pytela, namely:
    Change the uninstall command in the %postun section of the specfile
    to use the %selinux_modules_uninstall macro which uses priority 200.
    Change the install command in the %post section if the specfile
    to use the %selinux_modules_install macro.
    Replace relabel commands with using the %selinux_relabel_pre and
    %selinux_relabel_post macros.
    Change formatting so that the lines are vertically aligned
    in the %postun section.
    (https://github.com/containers/container-selinux/pull/85)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.130.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.130.0
  - don't use macros in changelog
  - Related: #1821204


author: Jindrich Novy <jnovy@redhat.com> - 2:2.131.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.131.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.132.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.132.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.132.0-2
changelog:
  - sync with Fedora and install selinux contexts file into /usr/share/containers/selinux/contexts
    (thanks to Dan Walsh)
  - do not print error in RPM transaction log when customizable_types file is missing
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.134.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.134.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.135.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.135.0
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 2:2.134.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.134.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.135.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.135.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.137.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.137.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.138.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.138.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.139.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.139.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.142.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.142.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.143.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.143.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.144.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.144.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 2:2.150.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.150.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.151.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.151.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.152.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.152.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.153.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.153.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.154.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.154.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.155.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.155.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.156.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.156.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.158.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.158.0
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2:2.160.2-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.160.2
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.161.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.161.1
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1999245


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.162.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.162.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.163.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.163.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.164.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.164.2
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.165.1-2
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.165.1
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.167.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.167.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.170.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.170.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.171.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.171.0
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.172.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.172.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.169.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.169.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.171.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.171.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.187.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.187.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.188.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.188.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.189.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.189.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.183.0-1
changelog:
  - update to
    https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.190.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.190.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.193.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.193.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.197.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.197.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.198.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.198.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.199.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.200.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.200.0
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.191.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.191.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.193.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.193.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.195.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.195.1
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.197.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.197.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.198.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.198.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.199.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.200.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.200.0
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Resolves: #2179466


author: Jindrich Novy <jnovy@redhat.com> - 2:2.199.0-1
changelog:
  - revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0
    (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.205.0
  - remove user_namespace class, thanks to Lokesh Mandvekar
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.205.0-2
changelog:
  - use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.211.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.211.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.213.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.213.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.215.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Resolves: RHEL-28923


author: Jindrich Novy <jnovy@redhat.com> - 2:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <lsm5@redhat.com> - 2:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - remove dependency on policycoreutils-python-utils as it pulls in python
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 0.8.5-1
changelog:
  - update to https://github.com/containernetworking/plugins/archive/v0.8.5.tar.gz
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v0.8.6
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179944
  - Resolves: #2187342
  - Resolves: #2187360
  - Resolves: #2203693
  - Resolves: #2207506


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-4.git0144aa8
changelog:
  - Resolves: #1597629 - handle dependency issue for skopeo-containers
  - rename skopeo-containers to containers-common as in Fedora


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-2
changelog:
  - comment out mountopt option in order to fix gating tests
    see bug 1769769
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - fix symlinks in /usr/share/rhel/secrets and make
    subscription-manager soft dependency to make them work
  - Related: RHELPLAN-25139


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 2:1-36
changelog:
  - remove aardvark-dns and netavark - packaged separately
  - update vendored components and configuration files
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1-4
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2021990


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-1
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v0.2.0
  - initial rhel8-8.2.1 build
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-4
changelog:
  - re-include ppc64 arch, golang doesn't seem broken there any more
  - synchronize man pages and config files with upstream
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:0.2.0-5
changelog:
  - follow Dan's suggestion to deliver seccomp.json and storage.conf
    from Fedora and not directly from upstream yet
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.0-2
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854719


author: Eduardo Santiago <santiago@redhat.com> - 1:1.1.0-3
changelog:
  - fix broken gating tests: docker unexpectedly removed htpasswd from
    their 'registry:2' image, so we now use htpasswd from httpd-tools on host.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-4
changelog:
  - change default logging mechanism to use for container engine events
    in containers.conf to be events_logger = "file" - it should fix
    RHEL gating tests for podman nonroot (thanks to Dan Walsh)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-8
changelog:
  - revert back to version aimed at 8.3.1 - skopeo-1.2.0
  - also downgrade versions of vendored libraries
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - use infra_image = registry.redhat.io/ubi8/pause in contiainers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934947


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e7880c4)
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-7
changelog:
  - update documentation and configs according to the current
    versions of vendored projects
  - Related: #1938234


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-9
changelog:
  - revert back to state of 3.0-8.4.0
  - sync shortnames with pyxis
  - improve shortnames
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - update shortnames from Pyxis
  - Related: #2009153


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-13
changelog:
  - put back ubi8/buildah and ubi8/skopeo as it was released in 8.4
    (only ubi8/podman was not)
  - Related: #1972700


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1954702


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Jonathan Lebon <jlebon@redhat.com> - 0.9.1-4
changelog:
  - Add xz-devel BR to ensure we're not bundling
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974453


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-3
changelog:
  - Resolves: rhbz#1602409

  - Remove libcgroup (rhbz#1602409)
  - merge upstream commit c9e5d6db13fa965d83e27a3b664477e9b5b26edf (rhbz#1602409)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-5
changelog:
  - Resolves: rhbz#1639211

  - config: Fix crash in reload if new interfaces are added (rhbz#1639211)
  - merge upstream commit 9f2d5a3a3faa8bd1021b505bcf3c5428b3435e39 (rhbz#1639211)


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-2
changelog:
  - Resolves: rhbz#1665211

  - totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4 (rhbz#1665211)
  - merge upstream commit 2ab4d4188670356dcb82a80f2fc4598f5145c77d (rhbz#1665211)


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-3.1
changelog:
  - Resolves: rhbz#1765619

  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765619)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765619)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-4
changelog:
  - Resolves: rhbz#1745624
  - Resolves: rhbz#1745642
  - Resolves: rhbz#1749263
  - Resolves: rhbz#1765025

  - totem: fix check if all nodes have same number of links (rhbz#1749263)
  - merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
  - totem: Increase ring_id seq after load (rhbz#1745624)
  - merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
  - man: Fix link_mode priority description (rhbz#1745642)
  - merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Marek Polacek <polacek@redhat.com> 8.2.1-1.3
changelog:
  - change the default -march on s390x to z13 with tuning for z14 (#1571124)
  - use --disable-multilib on s390x


author: Jeff Law <law@redhat.com 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Marek Polacek <polacek@redhat.com> 8.3.1-5
changelog:
  - update from Fedora gcc-8.3.1-5 (#1747157)
  - use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847)


author: Marek Polacek <polacek@redhat.com> 8.3.1-5.1
changelog:
  - consider negative edges in cycle detection (#1817991, PR gcov-profile/91601)
  - fix Fortran debug info for arrays with descriptors (#1655624,
    PR fortran/92775)
  - fix wrong code emitted for movv1qi on s390x (#1784758, PR target/92950)


author: Marek Polacek <polacek@redhat.com> 8.4.1-1
changelog:
  - update from GCC 8.4 release (#1868446)
  - remove symlinks to 32-bit versions of these static libraries: libasan.a,
    libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)


author: Marek Polacek <polacek@redhat.com> 8.5.0-2
changelog:
  - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
  - fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Marek Polacek <polacek@redhat.com> 8.5.0-20
changelog:
  - fix for TLSLD references (#2213753)
  - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - adjust a pattern in s390.md (PR target/87723, #2214847)


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.7-2
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1738619
  - Support for KASLR on s390x
    Resolves: rhbz# 1753172


author: Dave Anderson <anderson@redhat.com> - 7.2.7-3
changelog:
  - Rebase to github commit 6c1c8ac6
    Resolves: rhbz#1738619
  - Fix "log -a" option
    Resolves: rhbz#1785537
  - Fix for ELF kdump vmcores form s390x KASLR kernels
    Resolves: rhbz#1786996


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-3
changelog:
  - Fix for reading compressed kdump dumpfiles from systems with physical memory
    Resolves: rhbz#1819606


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-6
changelog:
  - aarch64: Revert to reading CONFIG_ARM64_USER_VA_BITS_52 and CONFIG_ARM64_PA_BITS=52 for 52-bit VA/PA space.
    Resolves: rhbz#1861086


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-7
changelog:
  - crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
    Resolves: rhbz#1855527


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-8
changelog:
  - crash/arm64: Fix arm64 read error with 'idmap_ptrs_per_pgd' symbol with debug kernel
    Resolves: rhbz#1876039


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-1
changelog:
  - Rebase to upstream crash version 7.2.9
  - Also minimize the rhel-only patches to the bare minimum.
    Resolves: rhbz#1881854


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-2
changelog:
  - Fix the sources file to add gdb-7.6 tarball
    [The line was somehow removed when using rhpkg new-sources to
     update the crash tarball location]
    Resolves: rhbz#1881854


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.0-3
changelog:
  - Fix for "sched: Change task_struct::state"
  - Fix for "sched: move CPU field back into thread_info if THREAD_INFO_IN_TASK=y"
  - Fix live debugging with lockdown=integrity
  - Fix 'waitq' command for Linux 4.13 and later kernels
  - Fix for "kmem -s|-S" option on Linux 5.7 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-4.1
changelog:
  - Fix segmentation fault caused by failure of stopping CPUs
  - Fix segfault in arm64_is_kernel_exception_frame()


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-5
changelog:
  - Update to the latest upstream commit 47216437e79a
  - ("Fix "net" command on kernel configured with CONFIG_IPV6=m")


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-8
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  - Fix invalid structure size error during crash startup on ppc64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Lianbo Jiang <lijiang@redhat.com> - 1.6.3-1
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2054066


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Lianbo Jiang <lijiang@redhat.com> - 1.0.7-2
changelog:
  - Fix for "current buffer not found"
  - Fix for "invalid kernel virtual address: 0  type: struct topa_entry"
  - Fix for "invalid ring_buffer"
    Resolves: rhbz#1838927


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-2
changelog:
  - Consistently produce valid URLs by prepending protocol. (RhBug:1632121)
  - modifyrepo_c: Prevent doubling of compression (test.gz.gz) (RhBug:1639287)
  - Correct pkg count in headers if there were invalid pkgs (RhBug:1596211)
  - Add support for modular errata (RhBug:1656584)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-3
changelog:
  - Backport patch to switch off timestamps on documentation in order to remove
    file conflicts (RhBug:1738788)


author: Ales Matej <amatej@redhat.com> - 0.15.1-1
changelog:
  - Update to 0.15.1
  - Allow pip to see installation of python3-createrepo_c
  - Imporove documentation
  - Remove dependency on deltarpm in favour of drpm
  - Obsolete createrepo on all Fedoras again (RhBug:1702771)
  - Fix issue with createrepo_c hanging at the end (RhBug:1714666)
  - Don't include packages with forbidden control chars in repodata
  - Depend on the appropriate minimum version of libmodulemd
  - Add --pkgorigins mode for Koji
  - Prevent exiting with 0 if errors occur while finalizing repodata.
  - Add support for reading and merging module metadata
  - Update --keep-all-metadata to keep all additional metadata, not just updateinfo and groupfile (RhBug:1639287)
  - mergerepo_c: Add support for --koji simple mode
  - Fix generating corrupted sqlite files (RhBug: 1696808)
  - Do not obsolete createrepo on Fedora < 31
  - mergerepo_c: check if nevra is NULL and warn user about src.rpm naming
  - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past
  - Enhance support of zchunk
  - Support of zchunk
  - [spec] Fix ldconfig for rhel <= 7
  - Fix "CR_DELTA_RPM_SUPPORT" redefined warnings
  - Set to build against Python 3 by default
  - Update README
  - Add mergerepo_c --repo-prefix-search and --repo-prefix-replace.
  - Fix missing packages in mergerepo_c in case multiple VR exists for single pkg in repo.


author: Ales Matej <amatej@redhat.com> - 0.15.1-2
changelog:
  - Add reboot_suggested to UpdateRecord (RhBug:1772466)
  - Explicitly output boolean values for updateinfo.xml (RhBug:1772466)
  - Fix modifyrepo_c with modules.yaml as a symbolic link (RhBug:1776399)


author: Ales Matej <amatej@redhat.com> - 0.15.10-1
changelog:
  - Update to 0.15.10
  - New option --recycle-pkglist for --update mode
  - Add restart_suggested field to updatecollectionpackage in updateinfo.xml
  - Add relogin_suggested field to updatecollectionpackage in updateinfo.xml (Rhbug:1779751)
  - Export all changelog entries to other.xml in compatibility mode
  - Enhance error handling when locating repositories (RhBug:1762697)
  - Clean up temporary .repodata on sigint
  - Support issued date in epoch format set by Python API (RhBug:1779751)
  - Allow parsing of xml repodata from string via new API functions (RhBug:1804308)
  - Fix a bug when setting updateCollectionModule (RhBug:1821781)


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.15-2
changelog:
  - backport "exec: check read bytes from sync" (gscrivan@redhat.com)
    (https://github.com/containers/crun/issues/511)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.4.4-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.4.4
  - Resolves: #2067577
  - Related: #2001445


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-1
changelog:
  - Update to cryptsetup 2.0.4.
  - patch: Add RHEL system library paths in configure.
  - patch: Increase default LUKS2 header size to 8 MiBs.
  - patch: update tests to be compatible with larger headers.
  - Set default format to LUKS2.
  - Cleanup changelog.
  - Resolves: #1564540 #1595257 #1595266 #1595881 #1600164


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-2
changelog:
  - patch: fix device alignment bug when processing hinted
    value by device topology info.
  - Resolves: #1614219


author: Ondrej Kozina <okozina@redhat.com> - 2.0.6-1
changelog:
  - Update to cryptsetup 2.0.6
  - Enables all supported metadata sizes in LUKS2 validation code.
  - Resolves: #1653383


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399

  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Parag Nemade <pnemade AT redhat DOT com> - 0.130-6
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove owneship of %{_fontdir} in -common
  - Remove group tag


author: Pravin Satpute <psatpute@redhat.com> - 0.130-9
changelog:
  - Resolved #1217066 : culmus-keteryg-fonts takes over Firefox?
  - Update fontconf priority of all fonts from 65 to 66, except David


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46
changelog:
  - 2074684 - lp to a remote server takes a long time
  - 2074736 - CUPS is too chatty about "Removing document files." in debug mode


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


