# changelog

author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-18
changelog:
  - Remove an unused variable from the sssd-secrets responder
  - Related: rhbz#1398701 - [sssd-secrets] https proxy talks plain http
  - Improve two DEBUG messages in the client trust code to aid troubleshooting
  - Fix standalone application domains
  - Related: rhbz#1425891 - Support delivering non-POSIX users and groups
                            through the IFP and PAM interfaces


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-19
changelog:
  - Resolves: rhbz#1428866 - Using ad_enabled_domains configuration option
                             in sssd.conf causes nameservice lookups to fail.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-20
changelog:
  - Resolves: rhbz#1441545 - With multiple subdomain sections id command
                             output for user is not displayed for both domains


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-21
changelog:
  - Resolves: rhbz#1446139 - Infopipe method ListByCertificate does not
                             return the users with overrides


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-22
changelog:
  - Resolves: rhbz#1427749 - SSSD in server mode iterates over all domains
                             for group-by-GID requests, causing unnecessary
                             searches


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.2-23
changelog:
  - Resolves: rhbz#1430494 - expect sss_ssh_authorizedkeys and
                             sss_ssh_knownhostsproxy manuals to be packaged
                             into sssd-common package


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-24
changelog:
  - Resolves: rhbz#1434992 - Wrong pam return code for user from subdomain
                             with ad_access_filter


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-25
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-28
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15
  - Also apply an additional patch for rhbz#1441545


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-29
changelog:
  - Reapply patch by Lukas Slebodnik to fix upgrade issues with libwbclient
  - Resolves: rhbz#1439457 - SSSD does not start after upgrade from 7.3 to 7.4 
  - Resolves: rhbz#1449107 - error: %pre(sssd-common-1.15.2-26.el7.x86_64)
                             scriptlet failed, exit status 3


author: Sumit Bose <sbose@redhat.com> - 1.15.2-30
changelog:
  - Resolves: rhbz#1449726 - sss_nss_getlistbycert() does not return results from
                             multiple domains
  - Resolves: rhbz#1447098 - sssd unable to search dbus for ipa user by
                             certificate
  - Additional patch for rhbz#1440132


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-31
changelog:
  - Resolves: rhbz#1446535 - Group resolution does not work in subdomain
                             without ad_server option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-32
changelog:
  - Resolves: rhbz#1306707 - Need better debug message when krb5_child
                             returns an unhandled error, leading to a
                             System Error PAM code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-34
changelog:
  - Resolves: rhbz#1446302 - crash in sssd-kcm due to a race-condition
                             between two concurrent requests


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-36
changelog:
  - Resolves: rhbz#1389796 - Smartcard authentication with UPN as logon name
                             might fail
  - Fix Coverity issues in patches for rhbz#1445445


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-37
changelog:
  - Resolves: rhbz#1428906 - sssd intermittently failing to resolve groups
                             for an AD user in IPA-AD trust environment.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-38
changelog:
  - Resolves: rhbz#1457644 - Segfault in access_provider = krb5 is set in
                             sssd.conf due to an off-by-one error when
                             constructing the child send buffer
  - Resolves: rhbz#1456531 - Option name typos are not detected with validator
                             function of sssctl config-check command in domain
                             sections


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-39
changelog:
  - Resolves: rhbz#1450094 - Properly support IPA's promptusername config
                             option


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-40
changelog:
  - Resolves: rhbz#1449729 - org.freedesktop.sssd.infopipe.GetUserGroups
                             does not resolve groups into names with AD


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-51
changelog:
  - Require the 7.5 libldb version which broke ABI
  - Related: rhbz#1469791 - Rebase SSSD to version 1.16+


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-1
changelog:
  - Resolves: rhbz#1469791 - Rebase SSSD to version 1.16+
  - Resolves: rhbz#1132264 - Allow sssd to retrieve sudo rules of local
                             users whose sudo rules stored in ldap server
  - Resolves: rhbz#1301740 - sssd can be marked offline if a trusted domain
                             is not reachable
  - Resolves: rhbz#1399262 - Use TCP for kerberos with AD by default
  - Resolves: rhbz#1416150 - RFE: Log to syslog when sssd cannot contact
                             servers, goes offline
  - Resolves: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Resolves: rhbz#1454559 - python-sssdconfig doesn't parse hexadecimal debug
                             _level, resulting in set_option():
                             /usr/lib/python2.7/site-packages/SSSDConfig/__init__.py
                             killed by TypeError
  - Resolves: rhbz#1456968 - MAN: document that attribute 'provider' is not
                             allowed in section 'secrets'
  - Resolves: rhbz#1460689 - KCM/secrets: Storing many secrets in a rapid
                             succession segfaults the secrets responder
  - Resolves: rhbz#1464049 - Idle nss file descriptors should be closed
  - Resolves: rhbz#1468610 - sssd_be is utilizing more CPU during sudo rules
                             refresh
  - Resolves: rhbz#1474711 - Querying the AD domain for external domain's ID can
                             mark the AD domain offline
  - Resolves: rhbz#1479398 - samba shares with sssd authentication broken on 7.4
  - Resolves: rhbz#1479983 - id root triggers an LDAP lookup
  - Resolves: rhbz#1489895 - Issues with certificate mapping rules
  - Resolves: rhbz#1490501 - sssd incorrectly checks 'try_inotify' thinking it is
                             the wrong section
  - Resolves: rhbz#1490913 - MAN: Document that full_name_format must be set if
                             the output of trusted domains user resolution should
                             be shortnames only
  - Resolves: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1461899 - Loading enterprise principals doesn't work with a
                             primed cache
  - Resolves: rhbz#1482674 - SUDO doesn't work for IPA users on IPA clients after
                             applying ID Views for them in IPA server
  - Resolves: rhbz#1486053 - Accessing IdM kerberos ticket fails while id mapping
                             is applied
  - Resolves: rhbz#1486786 - sssd going in offline mode due to sudo search filter.
  - Resolves: rhbz#1500087 - SSSD creates bad override search filter due to AD
                             Trust object with parenthesis
  - Resolves: rhbz#1502713 - SSSD can crash due to ABI changes in libldb >= 1.2.0
                             (1.1.30)
  - Resolves: rhbz#1461462 - sssd_client: add mutex protected call to the PAC
                             responder
  - Resolves: rhbz#1489666 - Combination sssd-ad and postfix recieve incorrect
                             mail with asterisks or spaces
  - Resolves: rhbz#1525052 - sssd_krb5_localauth_plugin fails to fallback to otheri
                             localname rules


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-2
changelog:
  - Resolves: rhbz#1484376 - [RFE] Add a configuration option to SSSD to
                             disable the memory cache
  - Resolves: rhbz#1327705 - Automatic creation of user private groups on
                             RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1505277 - Race condition between refreshing the cr_domain
                             list and a request that is using the list can
                             cause a segfault is sssd_nss
  - Resolves: rhbz#1462343 - document information on why SSSD does not use
                             host-based security filtering when processing
                             AD GPOs
  - Resolves: rhbz#1498734 - sssd_be stuck in an infinite loop after
                             completing full refresh of sudo rules
  - Resolves: rhbz#1400614 - [RFE] sssd should remember DNS sites from
                             first search
  - Resolves: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Resolves: rhbz#1459609 - When sssd is configured with id_provider proxy
                             and auth_provider ldap, login fails if the LDAP
                             server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-3
changelog:
  - Resolves: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                             threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-4
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1459609 - When sssd is configured with id_provider proxy
                            and auth_provider ldap, login fails if the LDAP
                            server is not allowing anonymous binds.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-5
changelog:
  - Resolves: rhbz#1507614 - Improve Smartcard integration if multiple
                             certificates or multiple mapped identities are
                             available
  - Related: rhbz#1499659 - CVE-2017-12173 sssd: unsanitized input when
                            searching in local cache database [rhel-7.5]
  - Resolves: rhbz#1408294 - SSSD authentication fails when two IPA
                             accounts share an email address without a
                             clear way to debug the problem
  - Resolves: rhbz#1502686 - crash - /usr/libexec/sssd/sssd_nss in
                             nss_setnetgrent_timeout


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-6
changelog:
  - Related: rhbz#1460724 - SYSLOG_IDENTIFIER is different
  - Related: rhbz#1432010 - SSSD ships a drop-in configuration snippet in
                            /etc/systemd/system
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-7
changelog:
  - Resolves: rhbz#1272214 - [RFE] Create a local per system report about
                             who can access that IDM client (attestation)
  - Resolves: rhbz#1482555 - sysdb index improvements - missing ghost
                             attribute indexing, unneeded objectclass index
                             etc..
  - Resolves: rhbz#888739 -  Enumerating large number of users makes sssd_be
                             hog the cpu for a long time.
  - Resolves: rhbz#1373547 - SSSD performance issue with malloc and brk
                             calls
  - Resolves: rhbz#1472255 - Improve SSSD performance in the 7.5 release


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-8
changelog:
  - Resolves: rhbz#1490120 - SSSD complaining about corrupted mmap cache
                             and logging error in /var/log/messages and
                             /var/log/sssd/sssd_nss.log


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-9
changelog:
  - Resolves: rhbz#1482231 - sssd_nss consumes more memory until
                             restarted or machine swaps
  - Resolves: rhbz#1512508 - SSSD fails to fetch group information after
                             switching IPA client to a non-default view


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-10
changelog:
  - Resolves: rhbz#1421194 - SSSD doesn't use AD global catalog for
                             gidnumber lookup, resulting in unacceptable
                             delay for large forests


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-11
changelog:
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked
                             cert on smart card
  - Resolves: rhbz#1520984 - getent output is not showing home directory
                             for IPA AD trusted user
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-12
changelog:
  - Resolves: rhbz#1512027 - NSS by-id requests are not checked against
                             max_id/min_id ranges before triggering the
                             backend


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-13
changelog:
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked cert
                             on smart card


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-15
changelog:
  - Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                             subdomain initialization - IPA AD Trust
  - Related: rhbz#1482555 - sysdb index improvements - missing ghost
                            attribute indexing, unneeded objectclass index
                            etc..
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                             gidNumber = 0
  - Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                            a primed cache
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-16
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-17
changelog:
  - Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                             server


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-18
changelog:
  - Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
  - Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Jesse Keating <jkeating@redhat.com> - 0.2.3-1
changelog:
  - Initial release split off of libburn package.
  - Disable docs for now, will be fixed in future upstream release


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Adam Tkac <atkac redhat com> 0.0.93-6
changelog:
  - improve package description a little (#600243)
  - include example.c as %doc in the -devel subpackage


author: Adam Tkac <atkac redhat com> 1.0.0-1
changelog:
  - update to 1.0.0
  - patches merged
    - libjpeg-turbo-programs.patch
    - libjpeg-turbo-nosimd.patch
  - add libjpeg provides to the main package to workaround problems with broken
    java-1.6.0-openjdk package


author: Alexey Kurov <nucleo@fedoraproject.org> - 4.9.50-1
changelog:
  - libkdcraw update from digikam-3.0.0-beta2
  - enable build against lcms2
  - enable RawSpeed libraw codec


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.90-3
changelog:
  - License: GPLv2+
  - fix Summary
  - %doc: +ChangeLog NEWS
  - drop uneeded scriptlets
  - add %check section


author: Daiki Ueno <dueno@redhat.com> - 0.1.3-1
changelog:
  - move arch-independent data files to -common subpackage
  - remove unnecessary R: from -common and -data subpackages
  - add BR: python2-devel


author: Rex Dieter <rexdieter[AT]users.sf.net> 0.9.11-2
changelog:
  - revert to 0.9.11 (0.9.12 makes gnupg2 fail on x86_64) using Obsoletes
    to avoid Epoch or other ugly means.


author: Dan Vrátil <dvratil@redhat.com> 0.9.0-1.20121228git
changelog:
  - Fixed versioning
   - Added instructions how to retrieve sources
   - Fixed URL
   - Removed 'rm -rf $RPM_BUILD_ROOT'


author: Dan Vrátil <dvratil@redhat.com> 1:0.0.71-1
changelog:
  - update to 0.0.71 - first official release
   - remove kscreen-console, it's now shipped in kscreen package


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Lars Bjørndal <lars.bjorndal@broadpark.no> 1.8.0-2
changelog:
  - Created the tools sub package and did a lot of clean ups, see <https://bugzilla.redhat.com/show_bug.cgi?id=597597>.


author: Lars Bjørndal <lars.bjorndal@broadpark.no> - 1.8.0-3
changelog:
  - Fixed some small problems, among them wrong destination directory for documentation. See <https://bugzilla.redhat.com/show_bug.cgi?id=597597> for further details.


author: Lars Bjørndal <lars.bjorndal@broadpark.no> - 1.9.0-1
changelog:
  - A new version was up to day. At the same time, fixed a minor spec issue according to a comment from Martin Gieseking, see <https://bugzilla.redhat.com/show_bug.cgi?id=597597>.


author: Lars Bjørndal <lars.bjorndal@broadpark.no> - 1.9.0-2
changelog:
  - In advice from Martin Gieseking: Removed some garbage from the file section, and added a PDF version of the liblouis documentation. See <https://bugzilla.redhat.com/show_bug.cgi?id=597597>.


author: Martin Gieseking <martin.gieseking@uos.de> 2.4.1-1
changelog:
  - Updated to upstream release 2.4.1.
  - Made the devel package's dependency on the base package arch specific.


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.11-0.2
changelog:
  - Main package requires libmalaga version-release and gtk2 (malshow needs it)
  - libmalaga requires in -devel removed, that's implicit
  - install-info called in post of main package
  - Unneeded postun line removed
  - INSTALL.txt is not needed in this package
  - All documents are now in libmalaga
  - /usr/share/malaga/ now owned by the malaga package
  - A shorter Summary so rpmlint won't complain
  - Currently writes an empty debuginfo package, "install -s" is called in 
    Makefile, how do I remove it?


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.11-0.3
changelog:
  - Don't strip binaries
  - Remove static archive
  - Make build procedure more verbose
  - Make libtool output more verbose
  - Remove redundant requires gtk2
  - Add INSTALL="install -p" to make install to preserve timestamps
  - Change libmalaga.so* to have permissions 0755


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-1
changelog:
  - New version
  - Drop upstreamed linking patch
  - Re-add a Makefile.in sed build verbosity trick, which was done in the
    dropped patch but not upstream


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-4
changelog:
  - Add patch to change the (un)map_file functions to malaga_(un)map_file,
    there was a symbol conflict with the samba libraries causing a segfault
    if enchant-voikko and evolution-mapi were both installed when using
    Evolution. Bugs rhbz #502546 and sourceforge #2802548, patch by Harri
    Pitkänen.
  - Add defattr to the libmalaga subpackage


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 7.12-7
changelog:
  - Add patch to link malshow with -lm, hopefully fixes FTBFS caused by
    https://fedoraproject.org/wiki/Features/ChangeInImplicitDSOLinking


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fixed License to be LGPL
  - Add COPYING license file to docs
  - Fixed Group
  - Fixed buildroot
  - Added {} braces around % macros
  - Removed .la and .a files 
  - Own {_includedir}/libmb directory
  - Add dist tag to release
  - Add smpflags  flag to make
  - Remove use of boken makeinstall macro


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-1
changelog:
  - update to 1.0.11, soname bump to libmemcached.so.11
  - drop broken SASL support
  - don't generate parser (bison 2.6 not supported)


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.3.1-3
changelog:
  - Changed license to GPLv3+ and added some comments
    regarding the license issues with this package


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - This version introduces a API bump (which is required for
    supporting large files on 32bit environments)
  - The license issues we had with version 0.3.1 of this package (as
    discussed in #457924) are resolved in this version. The license
    of this package is now changed to LGPLv2+
  - Added a patch to fix two testcases on 64bit environments (upstream bug #1454)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0a-1
changelog:
  - Update to version 0.4.0a
  - Drop upstreamed patch
  - Added a new patch to fix a 64bit issue
  - The -devel package now contains a pkgconfig file
  - The configure script is now run with '--enable-messages --enable-https'
  - Made the -doc subpackage noarch (F11+)


author: Tim Niemueller <tim@niemueller.de> - 0.9.2-3
changelog:
  - Add missing BR gnutls-devel and libgcrypt-devel
  - Added patch to fix test apps (NSS instead of GnuTLS/OpenSSL curl,
    implicit DSO linking)
  - Disable test cases for now due to false errors, reported upstream


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-4
changelog:
  - Remove docs from -devel package
  - Upgrade cmake requirement to 2.8.0
  - Add cmake to -devel requires


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Marc Wiriadisastra <marc@mwiriadi.id.au> - 0.0-0.3.20060920alpha
changelog:
  - Got source using wget -N
  - Removed some doc's
  - Shifted doc line for doc package
  - Added install -p


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Linus Walleij <triad@df.lth.se> 0.0.20-1
changelog:
  - New upstream release.
  - Updated after review by Parag AN, Kevin Fenzi and Ralf Corsepius.
  - Fixed pkgconfig bug upstream after being detected by Ralf...


author: Linus Walleij <triad@df.lth.se> 0.1.4-1
changelog:
  - New upstream release.
  - Candidate for FC5, FC6 backport.
  - Hopefully API/ABI compatible, testing in devel tree.


author: Linus Walleij <triad@df.lth.se> 0.2.0-1
changelog:
  - New upstream release.
  - Fixes (hopefully) the issues found by Harald.
  - Dependent apps will need to recompile and patch some minor code.


author: Linus Walleij <triad@df.lth.se> 0.2.2-2
changelog:
  - Flat out KILL the Doxygen HTML docs to resolve multiarch conflicts.
    Either upstream (that's me!) needs to work around the HTML files being
    different each time OR Doxygen must stop generating anchors that
    hash the system time, creating different files with each generation.
    Pre-generating the docs is deemed silly. (Someone will disagree.)


author: Linus Walleij <triad@df.lth.se> 0.2.3-1
changelog:
  - New upstream release.
  - New soname libmtp.so.7 so all apps using libmtp have to
    be recompiled, have fun.
  - If it works out we'll try to reserve a spot to backport
    this fixed version to F8 and F7 in a controlled manner.


author: Linus Walleij <triad@df.lth.se> 0.2.6.1-3
changelog:
  - Loose PAM console permissions, also assume that we can ship
    documentation again since Doxygen has been updated. Fedora
    HALd rules for the portable_audio_player capability in
    20-acl-management.fdi will change permissions on the device
    node for each plugged-in device.


author: Linus Walleij <triad@df.lth.se> 0.3.0-1
changelog:
  - Upgrade to 0.3.0. This has to happen some way, perhaps the
    painful way: I upgrade to gnomad2 2.9.2 that use 0.3.0 and
    then I write patches to Rhythmbox and Amarok to use 0.3.0
    and also send these upstream.


author: Linus Walleij <triad@df.lth.se> 1.0.3-2
changelog:
  - Replace hal-filesystem dependence with hal-info
    We can remove this altogether once all apps are cleansed
    from HAL.


author: Linus Walleij <triad@df.lth.se> 1.0.3-4
changelog:
  - Set ENV{ACL_MANAGE}="0" and TAG+="udev-acl" akin to rfkill
    apparently this may be an interrim solution.


author: Linus Walleij <triad@df.lth.se> 1.0.3-6
changelog:
  - It appears adding ENV{ID_MTP_DEVICE}="1",
    ENV{ID_MEDIA_PLAYER}="1" is the way forward so testing this
    before pushing a new libmtp release.


author: Linus Walleij <triad@df.lth.se> 1.1.0-1
changelog:
  - New upstream version including fixed bugs and the patch we
    used to carry. Dependecies need to be rebuilt. (New
    soversion)


author: Linus Walleij <triad@df.lth.se> 1.1.1-1
changelog:
  - New upstream version fixing problems with a few color devices
    plus adding new device support. Move udev rules from level
    60 to level 69 to come after SANE and avoid probing these
    devices.


author: Brent Fox <bfox@redhat.com> 2.0.2-6
changelog:
  - add a BuildPreReq for libstdc++-devel and gcc-c++ (bug #106556)
  - add a Requires for libstdc++-devel for libmusicbrainz-devel


author: John (J5) Palmieri <johnp@redhat.com> 2.1.1-1
changelog:
  - Update to upstream version 2.1.1
  - Removed libmusicbrainz-2.0.2-missing-return.patch
  - Removed libmusicbrainz-2.0.2-conf.patch


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-5
changelog:
  - fix doxygen-induced multilib conflicts (#480378)
  - add %check section (disabled by default, pending cppunit detection issues)


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Paul P. Komkoff Jr <i@stingr.net> - 0.0.33-0.1.svn7211
changelog:
  - grab latest upstream changes and fixes, along with new version number
  - do not mess with bundled nfnetlink.h, use <linux/netfilter/nfnetlink.h>


author: Steve Dickson <steved@redhat.com> 0.24-3
changelog:
  - Used the newly added --with-pluginpath config flag to 
    redefine where the plugins live (bz 664641).


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib64/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - update to 0.9.5.95 (0.9.6-rc1)  snapshot
  - editor: fixed UI mnemonics
  - editor: fix defaults for PPP echo values
  - applet: various crash and stability fixes
  - applet: show IPv6 addressing page for VPN plugins that support it
  - applet: port to GSettings and split out 0.8 -> 0.9 migration code into standalone tool


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - lib: recognize PKCS#12 files exported from Firefox
  - lib: fix some wireless dialog crashes


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.7.997 (0.9.8-beta2)
  - editor: better handling of gateway entry for IPv4
  - editor: fix some mnemonics (rh #893466)
  - editor: fix saving connection when ignoring CA certificate
  - editor: enable Bridge connection editing
  - editor: hide widgets not relevant for VPN connections


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - Updated translations
  - editor: don't overwrite bridge/bond master interface name with UUID
  - applet: fix WWAN PIN dialog invalid "label1" entry widget
  - editor: fix allowed values for VLAN ID and MTU
  - editor: preserve existing PPP connection LCP echo failure and reply values
  - editor: ensure changes to the STP checkbox are saved
  - editor: hide BSSID for AdHoc connection (rh #906133)
  - editor: fix random data sneaking into IPv6 route gateway fields
  - editor: fix handling of initial entry for MAC address widgets


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-3.git20130430
changelog:
  - editor: fix possible crash canceling connection edit dialog
  - applet: only request secrets from the user when allowed to
  - applet: fix signal icons with newer libpng
  - applet: fix possible crash getting secrets with libsecret


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-5.git20130906
changelog:
  - editor: fix missing user/password when re-editing a connection (rh #1000564)
  - editor: fix handling of missing CA certificate prompts (rh #758076) (rh #809489)
  - editor: fix handling of bonding modes (rh #953076)
  - applet/editor: add InfiniBand device support (rh #867273)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-6.git20130906
changelog:
  - libnm-gtk: fix for enabling the Apply button for PEAP and TTLS (rh #1000564)
  - libnm-gtk: only save CA certificate ignored value when connection is saved
  - editor: fix display of VLAN parent interface


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-7.git20131011
changelog:
  - editor: add support for Team devices (rh #1003646)
  - editor: don't use deprecated WEP40 and WEP104 values for pairwise (rh #1005171)
  - editor: add 'primary' option for bond interfaces (rh #1013727)
  - editor: dis-allow IPv6 scopes in DNS server entry (rh #962449)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-8.git20131108
changelog:
  - editor: improve handling of NPAR/SRIOV devices in bonds (rh #804527)
  - editor: allow creating bridge masters without slaves


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-9.git20131212
changelog:
  - applet: fix crash if some resources were not available (rh #1034500)
  - editor: default to user-saved secrets and allow changing secret storage (rh #879566)
  - applet/editor: fix various Coverity-found defects (rh #1025894)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-13.git20140307
changelog:
  - Update to new git master snapshot
  - connection-editor: allow VLANs/slaves of more device types (rh #1045203)
  - connection-editor: add DCB configuration UI (bgo #711032) (rh #1068688)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.3-1.git20160615.28a0e28
changelog:
  - New snapshot:
  - applet: make new auto connections only available for current user (rh #1176042)
  - editor: allow forcing always-on-top windows for installer (rh #1097883)
  - editor: allow changing bond MTU (rh #1177582)
  - editor: use ifname instead of UUID in slaves' master property (rh #1083186)
  - editor: allow adding Bluetooth connections (rh #1229471)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.6-1
changelog:
  - Align with the 1.0.6 upstream release:
  - editor: add support for setting MTU on team connections (rh #1255927)
  - editor: offer bond connections in vlan slave picker (rh #1255735)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
  - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Christopher Aillon <caillon@redhat.com> - 0.3.0-4
changelog:
  - Require a desktop-notification-daemon to be present.  Currently,
    this is notify-daemon, but libnotify doesn't specifically require
    that one.  Require 'desktop-notification-daemon' which daemons
    providing compatible functionality are now expected to provide.


author: Luke Macken <lmacken@redhat.com> - 0.4.2-3
changelog:
  - Add upstream patch libnotify-0.4.2-status-icon.patch to emit the correct
    property change notification 'status-icon' instead of 'attach-icon'


author: Christopher Aillon <caillon@redhat.com> - 0.4.2-4
changelog:
  - Add upstream patch (r2899) to correct an invalid assertion when
    creating notifications using status icons


author: Matthias Clasen <mclasen@redhat.com> - 0.4.4-1
changelog:
  - Update to 0.4.4, which contains important bug fixes 
    and memory leak fixes
  - Require pkgconfig in the -devel package


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Rex Dieter <rexdieter[AT]users.sf.net> 0.9.3-4
changelog:
  - remove extrenous entries from libofa.pc
  - dos2unix README
  - fix url in Source0
  - -devel: %doc examples/


author: Colin Walters <walters@redhat.com> 2:1.1.2-1
changelog:
  - Update to 1.1.2
  - Delete upstreamed libogg-1.1-64bit.patch
  - Delete upstreamed libogg-underquoted.patch


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.3.0-4
changelog:
  - fix compilation error in FC-4 (bz #158641)
  - use buildtime exported CFLAGS instead of making up its own


author: Matthias Saou <http://freshrpms.net/> 0.3.2-1
changelog:
  - Update to 0.3.2.
  - Change ldconfig calls to be the program.
  - Include new gtk-doc files in the devel package.
  - add dist macro.


author: Matthias Saou <http://freshrpms.net/> 0.3.5-3
changelog:
  - Sync spec files across branches.
  - Parallel make seems to have worked for 0.3.5 on devel, but just in case...


author: Matthias Saou <http://freshrpms.net/> 0.3.7.1-1
changelog:
  - Update to today's CVS code which should fix the PPC build issue.
  - Include new oil-bugreport tool in the devel package.


author: Matthias Saou <http://freshrpms.net/> 0.3.12-4
changelog:
  - Update License field.
  - Remove standard gcc-c++ build requirement.
  - Spec file cleanup, only consistency changes.
  - Remove standard rpath from oil-bugreport.


author: - Bastien Nocera <bnocera@redhat.com> - 0.3.12-7
changelog:
  - Add upstream patch to not crash on PPC machines without Altivec
    (hopefully this time the right one) (#252179)


author: - Bastien Nocera <bnocera@redhat.com> - 0.3.12-9
changelog:
  - Disable Altivec so we don't crash on non-Altivec PPCs, see
    https://bugzilla.redhat.com/bugzilla/process_bug.cgi#c16


author: - David Woodhouse <dwmw2@infradead.org> - 0.3.12-10
changelog:
  - Re-enable explicit Altivec but don't let the compiler use it automatically
  - Start applying the ppc64-configure patch again


author: - Bastien Nocera <bnocera@redhat.com> - 0.3.12-11
changelog:
  - Revert the previous commit, it's still broken, see:
    http://koji.fedoraproject.org/koji/taskinfo?taskID=151172


author: Colin Walters <walters@redhat.com> - 0.3.14-1
changelog:
  - New upstream version
  - Drop upstreamed liboil-0.3.13-better-altivec-detect.patch
  - Drop upstreamed clobber-ecx.patch


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.8-1
changelog:
  - Version bump to 0.0.8.
    * Fixed a huge memory leak. (FreeDesktop Bugzilla #21435)
    * cfa output should write the data in PGM as big endian.
    * Better handling of Canon CR2 "slices" to fix crasher with Canon
      450D/Digital Rebel XSi files (and possibly others).
    * Added new API or_rawfile_new_from_memory() to load a Raw file from a
      memory buffer.
    * Added new API or_rawfile_get_typeid() and the associated consts.
    * Added new API or_rawdata_get_minmax().
    * Added new API or_get_file_extensions().
    * Added new API or_rawfile_get_rendered_image() to get a rendered image.
    * Added new API or_bitmapdata_*().
    * New GdkPixbuf loader.
    * Decompress NEF files.
  - License changed to LGPLv3 or later.
  - Missing includes fixed by upstream.
  - Replaced 'BuildRequires: chrpath glib2-devel' with 'BuildRequires:
    exempi-devel libcurl-devel'.
  - Added 'Requires: gtk2' to pixbuf-loader for directory ownership.
  - Added a %check stanza.


author: Christian Krause <chkr@fedoraproject.org> - 0.0.8-2
changelog:
  - add upstream patch 1b15acdcfdc4664bc6c0be473cb6e096071a4e62
    to support certain PEF files and to fix a crash when opening
    such files (BZ 606898)


author: Christian Krause <chkr@fedoraproject.org> - 0.0.8-3
changelog:
  - add upstream patch 22287584fbfa4657098ee997957a6c4fc972a53b to
    properly decompress CFA from certain cameras (BZ 624283)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.1-1
changelog:
  - Fix and simplify udev rule.
  - Fedora:
    - Fix minimum RAM requirements for F16 and F17.
  - Add data on:
    - Fedora 18
    - GNOME 3.6
    - Ubuntu 12.10
  - Fixes to doc build.
  - Install script:
    - Add get_config_param method.
    - Differenciate between expected/output script names.
    - Add more utility functions.
  - Add 'installer-reboots' parameter to medias.
  - osinfo-detect does not die of DB loading errors anymore.
  - More type-specific entity value getters/setters.
  - Fixe and update RNG file.
  - Add 'subsystem' property/attribute to devices.


author: Christophe Fergeau <cfergeau@redhat.com> 0.2.5-1
changelog:
  - New upstream release 0.2.5
  - Disable udev rule as it's no longer required with newer
    systemd/util-linux


author: Christophe Fergeau <cfergeau@redhat.com> - 0.2.5-2
changelog:
  - BuildRequires /usr/bin/pod2man as this will automatically pick the right
    package rather than conditionally requiring a package that is only
    available in f19+
  - Do not Requires: udev when building libosinfo without its udev rule
    (which is done on f19+)


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.1.20-3
changelog:
  - fix FC-4 with aclocal call
  - move man3 pages to -devel
  - don't set default, just put comment in conf file
  - own /etc/libpaper.d
  - use debian/NEWS
  - include the meager translations
  - use --disable-static


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.23-3
changelog:
  - update to nmu1
  - apply patch to fix imprecise definition of DL format
  - apply patch so that when no config is present, libpaper will fallback through
    LC_PAPER before giving up and using Letter


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Adam Jackson <ajax@redhat.com> 0.9.1-3.20071031
changelog:
  - libpciaccess-fd-cache.patch: Cache sysfs PCI config space file
    descriptors for great boot speed justice.


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Bastien Nocera <bnocera@redhat.com> 1.5.0-1
changelog:
  - Disable vala, as it was disabled upstream:
  http://git.gnome.org/browse/libpeas/commit/?id=1031aaeeef282ab2bb65cb6ae48fa4abff453c4d


author: Krzysztof Czurylo <krzysztof.czurylo@intel.com> - 1.1-1
changelog:
  - NVML 1.1 release
  - Update link to source tarball
  - Add libpmempool subpackage
  - Remove obsolete patches


author: Jeff Moyer <jmoyer@redhat.com> - 1.2.1-1.el7
changelog:
  - Update to latest stable release
  - Pull in pending stable patches for the test harness
  - disable % check temporarily until all test issues are resolved
  - Resolves: bz#1383467 bz#1382407


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Tom Lane <tgl@redhat.com> 2:1.2.16-1
changelog:
  - Update to libpng 1.2.16
  Resolves: #211705, #216706, #227334
  - Separate libpng.a into a -static subpackage
  - Other minor packaging fixes per Fedora merge review
  Resolves: #226038


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #717509
  Resolves: #721307


author: Tom Lane <tgl@redhat.com> 2:1.5.6-1
changelog:
  - Update to new major release series 1.5.x; includes source-code-incompatible
    API changes and a soname version bump
  - Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 2:1.5.6-2
changelog:
  - Don't include libpng12.pc in the compat subpackage; instead just offer a
    phony Provides: for it in the devel subpackage


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: kwizart < kwizart at gmail.com > - 0.2.3-2
changelog:
  - Rename binding-python to python
  - Add Requires: gecko-libs >= %{gecko_version}
  - Fix some descriptions
  - Add plugin-webkit package


author: kwizart < kwizart at gmail.com > - 0.2.3-3
changelog:
  - Move proxy.h to libproxy/proxy.h
    This will prevent it to be included in the default include path
  - Split main to libs and util and use libproxy to install all


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Nicolas Chauvet <kwizart@fedoraproject.org> - 0.3.1-1
changelog:
  - Update to 0.3.1
  - Avoid dependecies on -python and -bin subpackages
  - Create -networkmanager sub-package.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 0.4.4-1
changelog:
  - Update to 0.4.4
  - Removed install workarounds (fixed upstream)
  - Removed patches (fixed upstream)
  - Moved -python to noarch
  - Downgrade cmake requirement (upstream change)
  - Disabled perl bindings
  - Run tests


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.5-2
changelog:
  - Update to 0.4.5
  - Disable mozjs on fedora >= 15
  - Disable webkit
  - Add libproxy bootstrap option to disable modules.


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.6-3
changelog:
  - Fix mozjs/webkit obsoletion - rhbz#656849
  - Workaround unreliable Version field in pkg-config - rhbz#656484


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.7-0.1svn20110412
changelog:
  - Update to 0.4.7 svn20110412
  - Add support for webkitgtk3
  - Add support for xulrunner 2.0
  - fix #683015 - libproxy fails with autoconfiguration
  - fix #683018 - libproxy needs BR: NetworkManager-glib-devel  (f14)
  - Manually fix libproxy-1.0.pc version field - #664781 / #674854


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Carl Byington <carl@five-ten-sg.com> - 0.6.8
changelog:
  - Initial version of pst2dii to convert to Summation dii load file format
  - changes for Fedora packaging guidelines (#434727)


author: Carl Byington <carl@five-ten-sg.com> - 0.6.9
changelog:
  - Patch from Joachim Metz for 64 bit compile.
  - Fix pst format documentation for 8 byte backpointers.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.11-1
changelog:
  - Use ftello/fseeko to properly handle large files.
  - Document and properly use datasize field in b5 blocks.
  - Fix some MSVC compile issues and collect MSVC dependencies into one place.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.15-1
changelog:
  - Patch from Robert Simpson for file handle leak in error case.
  - Fix for missing length on lz decompression, bug found by Chris White.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.19-1
changelog:
  - Fix base64 encoding that could create long lines.
  - Initial work on a .so shared library from Bharath Acharya.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.20-1
changelog:
  - add configure option --enable-dii=no to remove dependency on libgd.
  - many fixes in pst2ldif by Robert Harris.
  - add -D option to include deleted items, from Justin Greer
  - fix from Justin Greer to add missing email headers
  - fix from Justin Greer for my_stristr()
  - fix for orphan children when building descriptor tree
  - avoid writing uninitialized data to debug log file
  - remove unreachable code
  - create dummy top-of-folder descriptor if needed for corrupt pst files


author: Carl Byington <carl@five-ten-sg.com> - 0.6.21-1
changelog:
  - fix title bug with old schema in pst2ldif.
  - also escape commas in distinguished names per rfc4514.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.22-1
changelog:
  - patch from David Cuadrado to process emails with type PST_TYPE_OTHER
  - base64_encode_multiple() may insert newline, needs larger malloc
  - subject lines shorter than 2 bytes could segfault


author: Carl Byington <carl@five-ten-sg.com> - 0.6.26-1
changelog:
  - patch from Fridrich Strba for building on mingw and general
  - cleanup of autoconf files.
  - add processing for pst files of type 0x0f.
  - strip and regenerate all MIME headers to avoid duplicates.
  - do a better job of making unique MIME boundaries.
  - only use base64 coding when strictly necessary.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.28-1
changelog:
  - improve decoding of multipart/report and message/rfc822 mime types.
  - improve character set handling.
  - fix embedded rfc822 messages with attachments.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.30-1
changelog:
  - track character set individually for each mapi element.
  - remove charset option from pst2ldif since we get that from each
    object now.
  - avoid emitting bogus empty email messages into contacts and
    calendar files.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.33-1
changelog:
  - compensate for iconv conversion to utf-7 that produces strings that
    are not null terminated.
  - don't produce empty attachment files in separate mode.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.35-1
changelog:
  - properly add trailing mime boundary in all modes.
  - build separate libpst, libpst-libs, libpst-devel rpms.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.37-1
changelog:
  - add pst_attach_to_mem() back into the shared library interface.
  - fix memory leak caught by valgrind.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.38-1
changelog:
  - add python interface to the shared library.
  - bump soname to version 4 for many changes to the interface.
  - better decoding of recurrence data in appointments.
  - remove readpstlog since debug log files are now plain text.
  - add readpst -j option for parallel jobs for each folder.
  - make nested mime multipart/alternative to hold the text/html parts.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.41-1
changelog:
  - fix ax_python detection - should not use locate command
  - checking for fedora versions is not needed


author: Carl Byington <carl@five-ten-sg.com> - 0.6.43-1
changelog:
  - decode more of the pst format, some minor bug fixes
  - add support for code pages 1200 and 1201.
  - add readpst -t option to select output item types, which can
    now be used to process folders containing mixed item types.
  - fix segfault with embedded appointments
  - add readpst -u option for Thunderbird mode .size and .type files
  - better detection of embedded rfc822 message attachments


author: Carl Byington <carl@five-ten-sg.com> - 0.6.44-1
changelog:
  - patch from Lee Ayres to add file name extensions in separate mode.
  - allow mixed items types in a folder in separate mode.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.45-1
changelog:
  - patch from Hugo DesRosiers to export categories and notes into vcards.
  - extend that patch to export categories into vcalendar appointments also.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.48-1
changelog:
  - fix for broken internet headers from Outlook
  - fix ax_python.m4 to look for python2.7
  - use mboxrd from quoting for output formats with multiple messages per file
  - use no from quoting for output formats with single message per file


author: Carl Byington <carl@five-ten-sg.com> - 0.6.51-1
changelog:
  - fix for buffer overrun; attachment size from the secondary
    list of mapi elements overwrote proper size from the primary
    list of mapi elements.
    fedora bugzilla 696263


author: Carl Byington <carl@five-ten-sg.com> - 0.6.52-1
changelog:
  - fix dangling freed pointer in embedded rfc822 message processing
  - allow broken outlook internet header field - it sometimes contains
    fragments of the message body rather than headers


author: Carl Byington <carl@five-ten-sg.com> - 0.6.53-1
changelog:
  - add Status: header in output
  - allow fork for parallel processing of individual email folders
    in separate mode
  - proper handling of --with-boost-python option


author: Carl Byington <carl@five-ten-sg.com> - 0.6.55-1
changelog:
  - preserve bcc headers
  - document -C switch to set default character set
  - space after colon is not required in header fields


author: Tomas Mraz <tmraz@redhat.com> 0.9-2
changelog:
  - fixes for problems found in review (missing BR on pam-devel,
    License field, Source URL, Require pam, other cleanups)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.0-2
changelog:
  - remove "." from Summary
  - Add "check-devel to BuildRequires
  - Add "make check" to check section
  - Changed a buildroot to RPM_BUILD_ROOT
  - Document alphatag, numcomm and dirty variables.


author: Angus Salkeld <asalkeld@redhat.com> - 0.4.1-1
changelog:
  - SPEC: add procps to BuildRequire
  - SPEC: remove automake and autoconf from BuildRequire
  - SPEC: remove call to ./autogen.sh
  - SPEC: update to new upstream version 0.4.1
  - LOOP: check read() return value
  - DOCS: add missing @param on new timeout argument
  - BUILD: only set -g and -O options if explicitly requested.
  - BUILD: Remove unneccessary check for library "dl"
  - BUILD: improve the release build system


author: Angus Salkeld <asalkeld@redhat.com> - 0.5.1-1
changelog:
  - Rebased to 0.5.1 which includes:
  - LOOP: make the return more consistent in qb_loop_timer_expire_time_get()
  - LOG: add string.h to qblog.h
  - Add a qb_strerror_r wrapper.
  - don't let an invalid time stamp provoke a NULL dereference
  - LOG: move priority check up to prevent unnecessary format.
  - rename README to README.markdown


author: Angus Salkeld <asalkeld@redhat.com> - 0.6.0-1
changelog:
  - Rebased to 0.6.0 which includes (#734457):
  - Add a stop watch
  - LOG: serialize the va_list, don't snprintf
  - LOG: change active list into array access
  - atomic: fix qb_atomic_pointer macros
  - LOG: allow the thread priority to be set.
  - Fix splint warning on ubuntu 11.04


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.0-1
changelog:
  - LOOP: handle errors from the poll function
  - LOOP: make the item type applicable to jobs too.
  - LOOP: fix the todo calculations.
  - TEST: check for a single job causing a cpu spin
  - LOOP: prevent jobs from consuming too much cpu.
  - Get coverity to ignore this warning.
  - Change example code to use fgets instead of gets
  - LOG: pass the result of qb_log_thread_start() back to the user
  - Fix some issues found by clang
  - Add clang-analyzer check
  - Add a split timer to the stopwatch.
  - IPC: merge common code into new function
  - IPC: better handle a disconnect been called from within connection_created()
  - IPC: fix scary typo
  - IPC: fix server error handling


author: Angus Salkeld <asalkeld@redhat.com> - 0.10.1-1
changelog:
  - Fix "make distcheck" add include path to AM_CPPFLAGS
  - Bump the version to 0.10.1
  - clang: Remove unused code
  - TEST: make the ipc failure test closer to corosync's case.
  - RB: add a debug message if trying to read a message of the wrong size
  - IPC: split up the recv into chuncks of 2 seconds. (#788742)
  - Be more consistent with the internal logs.
  - LOOP: make it possible to pass in NULL as the default loop instance
  - RB: use the proper struct not the typedef in the implementation.
  - RB: Fix potential mem leak
  - Don't mix enums (QB_TRUE/TRUE)
  - use random() not rand()
  - Remove dead code
  - set umask before calling mkstemp()
  - Use safer versions of string functions (strcpy -> strlcpy)
  - Increase the coverity aggressiveness
  - TEST: make the loop ratelimit test more forgiving.


author: Angus Salkeld <asalkeld@redhat.com> - 0.11.1-1
changelog:
  - configue libqb to not use epoll as it seems broken (#800865)
  - LOOP: remove some old timerfd code.
  - TEST: add a test to check the order of the jobs
  - LOOP: when new jobs are added they are added to the head instead of the tail.
  - LOG: Now the array is self locking we can make the lookup array dynamic
  - Add locking to the array when growing.
  - IPC: make the _request_q_len_get() function more obvious.
  - IPC: fix multiple receives from qb_ipc_us_recv()
  - IPC: make sure that the wrong union member is not written to.
  - TIMER: check for null timer handle

  Wed Mar 7 2012  Angus Salkeld <asalkeld@redhat.com> - 0.11.0-1
  - ARRAY: cleanup the pointer sizeof()
  - LOG: turn off __attribute__(section) for powerpc (not working)
  - TESTS: move the util tests into "slow-tests" (i.e. optional)
  - TEST: make the test_priority the same type as in the callsite
  - LOG: make the log arrays manually grow-able since we need to lock the calls.
  - RB: fix test failure on ppc
  - RB: change the name of the size to word_size to be more clear
  - TEST: add some more signal tests.
  - LOOP: fix deletion of signal handlers when they are pending
  - LOOP: signal handlers were always added as high priority.
  - TEST: deal with mac's limited sed
  - check: add debugging to the configure options and remove unused options
  - TEST: properly clear the filters
  - LOG: expose the mechanism to get a dynamic callsite.
  - Revert part of my COARSE grained timer commit
  - Remove timerfd usage and go back to timelist.
  - UTIL: if possible use COARSE resolution clocks - they are much faster.
  - ARRAY: save memory (in the bins array) and allow holes in the array
  - LOOP: add qb_loop_timer_is_running()
  - LOOP: allow stop() and run() to be called with NULL loop instance.
  - LOOP: fix doxygen parameter comment
  - LOG: add stdout target
  - LOOP: add a function to delete jobs
  - LOG: remove debug printf's
  - LOG: remove an old/incorrect doxygen comment.
  - LOG: add a hostname %H format specifier.
  - LOG: Add qb_log_filter_fn_set()


author: Angus Salkeld <asalkeld@redhat.com> - 0.13.0-1
changelog:
  - Remove unneccessary __attribute__ ((aligned(8))) from internal headers
  - IPC: add a new function to get (and alloc) the extended stats.
  - Revert "Add the event queue length to the connection stats."
  - IPC: cleanup better on a failed client connect.
  - IPC(soc): be more consistent with control struct size
  - IPC: kill a compiler warning
  - IPC(soc): pass in the correct size into munmap()
  - TEST: Use /bin/sh not /bin/bash
  - TEST: check for lost shared mem on bsd too
  - rb: cleanup the semaphores
  - Fix some small issues in ./check
  - Cleanup the .gitignore files
  - configure.ac tweaks
  - Remove HZ and use sysconf instead.
  - SUN_LEN() macro is present if __EXTENSIONS__ is defined on Illumos
  - PF_UNIX is a POSIX standard name
  - Test for log facility names
  - IPC: drop log message to debug.
  - IPC: fix retrying of partial recv's and sends.
  - IPC: initialize enough shared mem for all 3 one way connections.
  - IPC: keep retrying to recv the socket message if partially recv'ed (part 2)
  - IPC: keep retrying to recv the socket message if partially recv'ed
  - IPC: handle the server shutdown better
  - IPC: handle a connection disconnect from the server better
  - IPC: make it possible to send events in the connected callback.
  - Add the event queue length to the connection stats.
  - IPC: add a is_connected client side function.
  - Fix typo in ./check
  - docs: clarify the need to use request/response headers
  - Remove unused local variable
  - IPC: change the socket recv function to read the response header.
  - Add some special commands into the ipc example
  - TEST: improve the tracing in the ipc tests.
  - Make "make (s)rpm" work more reliably
  - TEST: add a test to confirm we get the events we send.
  - TEST: reuse send_and_check for events.
  - IPC: make it possible for a root client to talk to a non-root server.
  - Run ./Lindent in the examples directory
  - Add some debug code to the ipcclient example
  - IPC: make sure ipc (socket) clients can connect to a server running as root.
  - IPC: allow qb to bump the max_message_size
  - IPC: check for a sane minimum max_message_size
  - add rpl_sem.h loop_poll_int.h to noinst_headers
  - Handle errors more consistently
  - call recv_ready on socket types
  - Handle a recv of size 0
  - make bsd shm path better by default.
  - Fix kqueue on freebsd.
  - Get the example socket includes right.
  - Fix kqueue compiling.
  - POLL: seperate out the poll/epoll and add kqueue
  - Test existence of getpeer* functions
  - Add inet header to tcpclient example
  - Don't link with setpshared if unavailable
  - NetBSD doesn't have semun defined
  - Use MADV_NOSYNC only on systems where available
  - Use SCHED_BATCH only on platforms where available
  - Fix a bug introduced by the bsd patch.
  - Cleanup the selection of semaphores to use
  - Fix some leaks in the logging.
  - Try and improve the portability on bsd variants.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.0-1
changelog:
  LOG: fix threaded logging.
  Add user control of the permissions that are set on the shared mem files
  LOG: Restrict string trucation during serialization to when a precision is specified
  LOG: Gracefully fail when the caller exceeds QB_LOG_MAX_LEN
  LOG: Observe field widths when serializing string arguments
  RB: use the same mechanism in reclaim as read/peek to detect end-of-ring
  Add needs_response_ack option to ./check
  RB: fix wrong sem_flg IPC_NOWAIT option
  TESTS: fix warning about unused functions
  Remove D_FORTIFY_SOURCE from check.
  Open shared mem file in /dev/shm only for linux
  Don't use msg_flags on solaris (recvmsg).
  Turn off attribute_section on solaris
  ipc example: add -e (events) option
  IPC: if the server returns EAGAIN or ETIMEOUT the check the connection
  LOG: make it possible to fsync() on each file log.
  IPC: make sure that the created callback happens before dispatches
  LOG: fix the printing of %p in the blackbox
  IPC: On bsd's use the notifier for responses
  IPC: interpret ECONNRESET and EPIPE as ENOTCONN
  cleanup some warnings
  config: use newer AC_COMPILE_IFELSE()
  blackbox: fix %p formatting
  LOG: put all fields in the blackbox (added priority and tags)
  example: make the priority uint8_t
  Remove strerror out of check_funcs
  RB: fix compiler warning.
  Add replacement function stpcpy
  Add missing AC_TYPE_UINT16_T to configure.ac
  Use AC_FUNC_STRERROR_R and STRERROR_R_CHAR_P
  Add stpcpy strcasecmp to the check_funcs
  Move some conditional defines into code (from the configure script)
  Remove some unused configure checks
  Remove message queues
  Check for union semun properly
  Blackbox: provide more space for log messages when reading from the blackbox.
  Add the blackbox reader manpage to the spec file
  Enable error logging for the blackbox reader
  RB: Read the file size into an initialized variable of the correct size
  Add a tool to dump the blackbox.
  RB: to be safer save the read and write pointers at the top of the blackbox
  avoid unwarranted use of strncpy: use memcpy instead
  blackbox: fix the print_from_file()
  RB: add an option to not use any semaphores
  LOG: tweak the blackbox format string
  LOG: accept NULL strings into the blackbox
  LOG: protect close and reload from calling log
  Add benchmark option (-b) to examples/ipcclient
  TEST: make rbreader/writer more like the other benchmarking apps
  IPC: log the connection description in all logs
  TEST: re-organise the ipc test suites
  IPC: only modify the dispatch if we get EAGAIN
  Correctly display timestamp in blackbox


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.1-1
changelog:
  RB: set the new read pointer after clearing the header (#839605).
  RB: improve the debug print outs
  RB: be more explicit about the word alignment
  RB: cleanup the macros for wrapping the index
  RB: use sem_getvalue as a tie breaker when read_pt == write_pt
  RB: if read or peek don't get the message then re-post to the semaphore
  RB: convert the rb_peek() status into a recv like status.
  RB: use internal reclaim function
  IPC: use calloc instead of malloc to fix valgrind warnings
  Upgrade the doxygen config.
  Fix a valgrind error.


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.2-1
changelog:
  Get libqb building on cygwin.
  ipc_us: slightly more robust cmsg handling
  ipc_us: on Linux, set SO_PASSCRED on the sending socket too
  ipc_us: clear request unused fields
  TEST: Include writing and reading the blackbox in the log_long_msg test
  LOG: fix qb_vsnprintf_deserialize()
  blackbox: fix 64-bit big-endian issues
  Remove IPC_NEEDS_RESPONSE_ACK and turn off shm ipc on solaris
  Define unix path max for openbsd
  Only turn on ipc_needs_response_ack=yes for solaris
  Some improvements to kqueue usage.
  kqueue: drop log message to trace.
  Fix splint warning
  openbsd requires netinet/in.h before arpa/inet.h
  Avoid strcpy() use strlcpy() instead.
  Fix kqueue complile warnings
  openbsd doesn't have EBADMSG
  openbsd has a different UNIX_PATH_MAX
  LOG: change qb_vsprintf_serialize() into qb_vsnprintf_serialize()
  TEST: increase timeout to 6 secs as the recv timeout is 5 secs
  TEST: get the logic right - grrr.
  Turn off attribute_section on netbsd
  Some missing pshared semaphore checks
  Cleanup the checks for pshared semaphores
  Add a config check for pthread_mutexattr_setpshared
  Remove uses of timersub and use qb_util_stopwatch
  RB: change the #error to ENOTSUP if no usable shared process sem
  LOOP-KQUEUE: fix reference before assignment.
  build: fix libqb.pc creation and make maintainer-clean
  LOG: Make sure the semaphores are initialized.
  build: remove bashism in cc support check
  Catch disconnected sockets on Solaris
  Don't free rb->shared_hdr in qb_rb_create_from_file()
  Check error return of qb_ipcs_uc_recv_and_auth()
  Fix removal of automatically installed doc files when building rpms
  Add the mailing list to the travis email notifications.
  Work around debian not setting the arch path in splint.
  Remove color-tests and parallel-tests automake options.
  Add travis continuous integration config
  LOG: Invoke custom log filter function if tag changes
  tests/rbwriter: don't ignore write failure
  ipcs: avoid use-after-free for size-0 || disconnect-request


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.3-1
changelog:
  IPC: Pass the timeout to poll() if the recv function returns EAGAIN
  LOG: make the format comparison safe and sane
  LOG: don't break on empty callsites, just ignore them
  LOG: use the array callback to register new callsites
  array: add a mechanism to get a callback when a bin is allocated
  Solaris based operating systems don't define MSG_NOSIGNAL and SO_NOSIGPIPE.
  Make sure atomic's are initialized (for non-gcc atomic).


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Warren Togami <wtogami@redhat.com> 0.10.0-1
changelog:
  - upgrade to 0.10.0
  - Spec cleanups
  - Remove INSTALL, add NEWS
  - Add new binaries
  - libtool, auto* not needed


author: Kristian Høgsberg <krh@redhat.com> - 1.2.1-5
changelog:
  - Make rawiso support actually work.
  - Update fw-device-cdev.h to sync with latest kernel patch.
  - Add Requires to pull in a recent enough kernel.


author: Kristian Høgsberg <krh@redhat.com> - 1.2.1-7
changelog:
  - Update firewire-cdev.h again to get the iso context create ioctl changes.
  - Bump kernel requires accordingly.


author: Jarod Wilson <jwilson@redhat.com> - 1.2.1-8
changelog:
  - Switch kernel Requires to a Conflicts so we don't end up pulling
    kernels into build chroot, and bump to GA kernel ver (#244128)


author: Jarod Wilson <jwilson@redhat.com> - 1.2.1-9
changelog:
  - Drop Conficts, causes interesting issues if people have an
    older kernel installed and/or kernel-xen installed (#244474)


author: Jarod Wilson <jwilson@redhat.com> - 1.3.0-3
changelog:
  - Update firewire-cdev.h to match kernel and eliminate
    bitfield usage, fixes capture on big-endian systems (#345221)


author: Jarod Wilson <jwilson@redhat.com> - 1.3.0-6
changelog:
  - Unmap the correct memory range on iso receive teardown, fixes
    segfault on exit from dvgrab (Mladen Kuntner, #444354)


author: Jarod Wilson <jwilson@redhat.com> - 1.3.0-7
changelog:
  - Fully initialize data structures and plug dir leak. Resolves
    crashes when used with kino (Philippe Troin, #451727)


author: Jarod Wilson <jwilson@redhat.com> - 2.0.0-0.1.20080430_git
changelog:
  - Update to pre-2.0.0 git tree, which features merged "juju" firewire
    stack support, enabled simultaneously with classic ieee1394 support


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-3
changelog:
  - Address some compiler warnings
  - Reduce nesting depth in new_handle dispatches
  - Fix segfault in handle_arm_request


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-5
changelog:
  - Fix up iso stop command so starting/stopping/starting iso reception works
  - Plug firewire handle leak


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-6
changelog:
  - Set errno = ENOSYS for all unimplemented functions
  - Make dvgrab and friends work w/o requiring r/w on the local fw node (#441073)


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.1-0.2
changelog:
  - Make one define a bit cleaner
  - Changes by Caolán McNamara:
    - Unpack the component at install time
    - Make a non-empty debuginfo package
    - Install the extension to /usr/lib/


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2-0.1.rc1
changelog:
  - 2.2rc1
  - Use new install-unpacked make target, no need to unzip the extension
    anymore
  - This target both compiles and installs, so do everything in install and
    leave build empty
  - Set $HOME to be a temporary directory while using unopkg. Otherwise unopkg
    causes problems if the package is installed with sudo
  - Rebuild for GCC 4.3


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2-2
changelog:
  - Upstream released 2.2
  - Remove the "temporary $HOME hack" and all -env options, since unopkg has 
    been patched to take care of all that


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2-3
changelog:
  - Update the package to match the newest extension guidelines:
    - Change location
    - Update openoffice.org-* Requires


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.0-0.1.pre4
changelog:
  - New pre-release
  - License changed to GPLv3+
  - Require openoffice.org >= 3.0.0
  - Drop unneeded 3 layer patch
  - Build with new SHOW_UGLY_WARNINGS=1 option as this is a test release


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.0-0.2.rc1
changelog:
  - New release candidate:
    - Require libvoikko >= 2.0
    - Don't build with SHOW_UGLY_WARNINGS anymore


author: Caolán McNamara <caolanm@redhat.com> - 3.0-2
changelog:
  - add --force to protect against installing by rpm an extension which was
    previously installed manually


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.0-3
changelog:
  - Remove unneeded openoffice.org-core Requires, rpmbuild should detect that
    automatically. Keep libvoikko >= 2.0 Requires as instructed by upstream
    release notes, rpmbuild can't detected that automatically.


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.0-4
changelog:
  - Add Epoch 1 to all openoffice.org-core pre-/post-Requires to avoid bugs such
    as rhbz #472093 (incorrect openoffice.org-core dependency)


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.0-5
changelog:
  - Add patch from upstream to fix FTBFS with OOO300_m14, the grammar
    checking framework was changed


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.1-1
changelog:
  - Update source URL to "official" upstream and bump version accordingly.
  - The tarball is the same as in RC2.


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.1-3
changelog:
  - Add patch from SVN to partly fix broken configuration handling, which
    may lead to an OO.o crash (rhbz#549289)


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 3.1-5
changelog:
  - Fix for rhbz #618151, switch group elements to node elements in config.xcu,
    patch by David Tardon


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-1
changelog:
  - Package renamed from openoffice.org-voikko to libreoffice-voikko
  - First upstream libreoffice-voikko release


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-2
changelog:
  - Build in the build section, install in the install section
  - Add the _isa macro to the libreoffice dependencies


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.2-1.git714e828
changelog:
  - Add LRI_PROGRESSCB and LRI_PROGRESSDATA options (RhBug: 919123)
  - Bindings: More pythonic operations with handle's attributes (RhBug: 919124)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.2-2.gitb3c3323
changelog:
  - py: Use standard python exception while accessing bad attrs. (RhBug: 920673)
  - Default mask for newly created files is 0666. (RhBug: 922557)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.2-3.git720d68d
changelog:
  - Add CURL_GLOBAL_ACK_EINTR flag to curl init.
  - Proper multi handle cleanup. (RhBug: 947388)
  - Support for read 'useragent' attr. (RhBug: 947346)
  - Add valgrind supress files. (RhBug: 923214)
  - Make python bindings interruptible (LRO_INTERRUPTIBLE) (RhBug: 919125)
  - Add LRI_MIRRORS option (RhBug: 923198)
  - Add LRI_METALINK option. (BzBug: 947767)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.4-1
changelog:
  - Fix type conversion long long -> long.(RhBug: 957656)
  - python: Handle.perfrom() could be called without Result().
  - Add LRI_MAXMIRRORTRIES option. (RhBug: 954736)
  - py: unittests: Add metalink.xml and mirrorlist files. (RhBug: 954294)
  - Fix double free and memory leak. (RhBug: 954294)
  - New option LRO_MAXMIRRORTRIES. (RhBug: 949517)
  - LRI_MIRRORS return only content of mirrorlist file (without LRO_URL as first item).
  - Add LRO_FETCHMIRRORS option.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.4-2
changelog:
  - examples: Add C example of usage.
  - Fix predefined lists in types.h (GitHub issue 4). Thank you hughsie
  - Add LRO_VARSUB and LRI_VARSUB. (RhBug: 965131)
  - py: Change reported name from _librepo.Exception to librepo.LibrepoException


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.5-1
changelog:
  - Return LRE_ALREADYDOWNLOADED if the file exists even if no resume
    is specified. (GitHub issue 15)
  - downloadtarget: New module, future replacement for curltarget module.
  - Librepo migrated to lr_LrMirrorlist from lr_InternalMirrorlist.
  - test: Run python unittest verbosely
  - lrmirrorlis: New module. GLib2 ready replacement for the internal_mirrorlist
    module.
  - package_downloader: Add LRE_ALREADYDOWNLOADED rc code. (GitHub issue 15)
  - handle: After set python SIGINT handler back, check if librepo was
    interrupted by CTRL+C. (RhBug: 977803)
  - cmake: Set required python version to 2. (GitHub issue 10)
  - Fix missing VAR substitution for mirrorlist. (GitHub issue 11)
  - cmake: Add FindXattr module.
  - Add support for caching checksum as extended file attribute. (GitHub issue 8)
  - util: Add lr_asprintf().
  - util: Add lr_vasprintf().
  - handle: Fix funky logic in internal error handling. (GitHub issue 9)
  - Add lr_yum_repomd_get_age() function. (GitHub issue 6)
  - test: Add test for LR_VERSION_CHECK macro.
  - Add a LR_VERSION_CHECK macro


author: Tomas Mlcoch <tmlcoch at redhat.com> - 0.0.5-2
changelog:
  - Bump version in versioh.h to 0.0.5
  - Python: Fix Handle.mirrors to return empty list instead of None if
    no mirrors available (RhBug: 986228)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.0.0-1
changelog:
  - Huge API changes
  - Library starts to use GLib2
  - Support for parallel downloads
  - Better error reporting
  - More GLib2 style C api
  - More descriptive Python exception messages
  - A lot of bugfixes
  - Updated examples


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.1.0-1
changelog:
  - New librepo.download_url(url, fd, handle=None) function in Python API.
  - Low-level downloader interface is now public in C API.
  - Small change of API lr_download_packages() and lr_packagetarget_new
    functions.
  - In python download_packages() changed from method of Handle() to
    librepo module function without handle param.
    Param handle was moved to the PackageTarget class that takes handle
    as a optional param during constrution.
  - Implements checking size of downloaded files (expectedsize
    param of downloading functions).


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.2.0-1
changelog:
  - Better detection of bad content of repomd.xml
  - Close files properly (RhBug: 1012290)
  - Add fastestmirror module + LRO_FASTESTMIRROR option
  - downloader: Fix uninitialized total to download variable (GitHub issue 22)
  - Add LRO_MIRRORLISTURL and LRO_METALINKURL. LRO_MIRRORLIST is deprecated.
  - Few other small fixes


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.3.0-1
changelog:
  - Some CURL error codes should be considered as fatal (RhBug: 1022994)
  - fastestmirror: Add support for cache - New options: LRO_FASTESTMIRRORCACHE
    and LRO_FASTESTMIRRORMAXAGE
  - fastestmirror: For download_packages() do fastestmirror detection for
    all handles in one shot
  - Use <mm0:alternates> during repomd.xml download (RhBug: 1019103)
  - Don't perform fastest mirror test if file already exists locally.
  - fastestmirror.h:26:24: fatal error: mirrorlist.h: No such file
    or directory (#1018006)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.4.0-1
changelog:
  - Add LRO_FASTESTMIRRORCB
  - Add LRO_LOWSPEEDTIME and LRO_LOWSPEEDLIMIT options. (RhBug: 1028444)
  - Default connection timeout changed to 30sec instead of 300sec.
  - unittests: Fix expired key (RhBug: 1031825)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.5.0-1
changelog:
  - Extend C example
  - Add LRR_YUM_TIMESTAMP (GitHub issue #25)
  - Close the correct file when using a metalink.xml file
  - Add lr_check_packages()
  - Enable checksum caching for already existing local packages
  - Library: Call LR_PROGRESSCB with zeroized values, when total_to_download
    value is changed
  - Skip fastestmirror detection of only one mirror is present


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.5.1-1
changelog:
  -  Downloading: LRO_MAXSPEED has effect over whole downloading, it is not
     per target max speed anymore.
  -  Sanitize progresscb (GitHub issue 24) (Thanks zde/zpavlas)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.6.0-1
changelog:
  - Small API change: End callback now must return integer and not void)
  - downloader: Check for the lr_interrupt regularly
  - Handle exceptions in python callbacks as return values (RhBug: 1066321)
  - Support for byterange of download (RhBug: 1058777)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.0-1
changelog:
  - Support for xml:base tag in repomd.xml.
  - Downloader: If checksums don't match, include the expected values and types
    in the error message.
  - Handle: Add LRO_HMFCB and LRI_HMFCB options.
  - API CHANGE: lr_download_single_cb() new param mfcb (LrMirrorFailureCb)
  - API CHANGE: Removed cbdata param from lr_download_single_cb(). Use specific
    data for each target.
  - New callback LrHandleMirrorFailureCb
  - Python doc update (Check it out: http://tojaj.github.io/librepo/)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.2-1
changelog:
  - Fix segfault in headercb if only base_url and no mirrolist is used (RhBug: 1090325)
  - Set environmental variable LIBREPO_DEBUG enables librepo debug output to stderr


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.3-1
changelog:
  - Fix some issues which were found by coverity scan
  - Add missing support for Handle Mirror Failure Callback (hmfcb)
    while downloading repomd.xml (related to RhBug: 1093014)
  - Add LRO_SSLVERIFYPEER and LRO_SSLVERIFYHOST options (RhBug: 1093014)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.4-1
changelog:
  - Add LRO_IPRESOLVE option to set a kind of IP addresses to use when resolving host names
  - Relicenced from GPLv2 to LGPLv2+
  - error mesage is in unicode (RhBug:1096452)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.5-1
changelog:
  - accepts unicoded destination as UTF-8 string (Related: RhBug:1108908)
  - downloader: Do not print debug message about preparing internal mirror list
    if no internal mirror is available
  - fastestmirror: subtract name lookup (dns) time from plain connect time
  - fastestmirror: Small refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.6-1
changelog:
  - New option LRO_ADAPTIVEMIRRORSORTING
  - Increase limits to make librepo more robust (RhBug: 1124349)
  - New option LRO_ALLOWEDMIRRORFAILURES
  - Refactoring
  - Default value of LRO_MAXDOWNLOADSPERMIRROR changed from 2 to 3


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.9-1
changelog:
  - handle: Fix memory leak when looking for local metalink/mirrorlist (Issue #33)
  - Return -1 for LRR_YUM_TIMESTAMP if no repomd is available
  - Use CURLOPT_ERRORBUFFER to get more useful error messages
  - repoutil_yum: lr_repoutil_yum_check_repo: fix path handling


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-1
changelog:
  - move reporter plugins from abrt to libreport
  - fixed provides/obsolete to properly obsolete report package
  - wizard: make more fields editable


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-2
changelog:
  - obsolete report in rawhide properly rhbz#723320
  - added button to add attachments
  - ignore backup files
  - improved support for interactive plugins
  - added description text for logger
  - added python bindings for interactive plugins
  - Resolves: #723320


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-3
changelog:
  - enable bugzilla reporter for analyzer=libreport rhbz#725970
  - improved compatibility with anaconda


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-7
changelog:
  - added glob support to event xml files
  - changed handling of long text files
  - added a simple editor as a fallback when no editor is installed (i.e in anaconda) rhbz#728479
  - Resolves: #733448 #728479


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-9
changelog:
  - don't allow sending reports with bad rating rhbz#672023
  - don't allow reporting without duphash rhbz#739182
  - tell users to fill out reports in English rhbz#734037
  - fixed config for kerneloops reporter rhbz#731189
  - Resolves: #672023 #739182 #734037 #731189


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5.982-1
changelog:
  - re-fix rhbz#730887
  - re-fixed prgname (nice icons in gnome3) rhbz#741231
  - Resolves: #741231 #730887


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.7-1
changelog:
  - new version
  - added support for bodhi (preview)
  - dropped unused patches
  - reporter-bugzilla/rhts: add code to prevent duplicate reporting. Closes rhbz#727494 (dvlasenk@redhat.com)
  - wizard: search thru all items + tabbed details rhbz#748457 (jmoskovc@redhat.com)
  - wizard: add "I don't know what caused this problem" checkbox. Closes rhbz#712508 (dvlasenk@redhat.com)
  - reporter-bugzilla: add optional 'Product' parameter. Closes rhbz#665210 (dvlasenk@redhat.com)
  - rhbz#728190 - man pages contain suspicious version string (npajkovs@redhat.com)
  - reporter-print: expand leading ~/ if present. Closes rhbz#737991 (dvlasenk@redhat.com)
  - reporter-rhtsupport: ask rs/problems endpoint before creating new case. (working on rhbz#677052) (dvlasenk@redhat.com)
  - reporter-mailx: use Bugzilla's output format. Closes rhbz#717321. (dvlasenk@redhat.com)
  - report-newt: add option to display version (rhbz#741590) (mlichvar@redhat.com)
  - Resolves: #727494 #748457 #712508 #665210 rhbz#728190 #737991 #677052 #717321 #741590


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-1
changelog:
  - new version
  - added bodhi plugin rhbz#655783
  - one tab per file on details page rhbz#751833
  - search box search thru all data (should help with privacy) rhbz#748457
  - fixed close button position rhbz#741230
  - rise the attachment limit to 4kb rhbz#712602
  - fixed make check (rpath problem)
  - save chnages in editable lines rhbz#710100
  - ignore backup files rhbz#707959
  - added support for proxies rhbz#533652
  - Resolves: 753183 748457 737991 723219 712602 711986 692274 636000 631856 655783 741257 748457 741230 712602 753183 748457 741230 712602 710100 707959 533652


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.8-2
changelog:
  - fixed crash in bodhi plugin
  - re-upload better backtrace if available
  - fixed dupe finding for selinux
  - don't duplicate comments in bugzilla
  - fixed problem with empty release


author: Nikola Pajkovsky <npajkovs@redhat.com> 2.0.8-4
changelog:
  - 768647 - [abrt] libreport-plugin-bugzilla-2.0.8-3.fc16: libreport_xatou:
             Process /usr/bin/reporter-bugzilla was killed by signal 11 (SIGSEGV)


author: Jakub Filak <jfilak@redhat.com> 2.0.12-1
changelog:
  - new upstream release
  - trac#642: run the next event if the current one finished without errors
  - trac#641: don't allow event chain to continue, if user don't want to steal a directory
  - trac#640: report-gtk replaces 'Forward' button with 'Close' button on finished reporting
  - Fix bugs uncovered by Coverity. Closes rhbz#809416
  - Resolves: #809416


author: Jakub Filak <jfilak@redhat.com> 2.0.12-2
changelog:
  - report-gtk: fixed bug in automatic running of next event
  - don't try to delete dump dir which doesn't exist rhbz#799909
  - Resolves: #799909


author: Jakub Filak <jfilak@redhat.com> 2.0.12-3
changelog:
  - wizard: small changes to message texts and one function name
  - trac#623: dd_opendir() fails if time file doesn't contain valid time stamp
  - trac#660: report-cli asks for premission to send sensitive data
  - trac#660: report-gtk asks for permission to send sensitive data
  - trac#660: report-gtk: introduce generic ask_yes_no() function for options
  - trac#660: add support for sendining-sensitive-data event option
  - Do not check for analyzer == "Kerneloops" when appending "TAINTED" msg
  - fix leaks in list_possible_events()


author: Jakub Filak <jfilak@redhat.com> 2.0.12-4
changelog:
  - rhbz#846389: generate koops description according to rhbz std template
  - trac#556: skip not provided bz bug description template fields
  - report-gtk: don't log THANKYOU message
  - added internal_libreport.h into POTFILES.in rhbz#801255
  - updated po files
  - Resolves: #801255, #846389


author: Jakub Filak <jfilak@redhat.com> 2.0.12-5
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - show message from the server for known uReports
  - trac#678: reporter-bugzilla: do not attach empty files
  - Resolves: #741255


author: Jakub Filak <jfilak@redhat.com> 2.0.13-1
changelog:
  - rhbz#741255: don't autodetect executable for sealert reports
  - reporter-ureport: save backtrace hash to reported_to
  - trac#683: show the description file in bugzilla comment 0
  - trac#684: report-gtk saves only loaded files
  - reporter-ureport: allow sending attachments
  - event_config_dialog: make it resizable; tweak Uploader hint
  - add python binding for problem_data_send_to_abrt
  - reporter-ureport: attach bug ID from reported_to
  - reporter-ureport: make configurable only URL to a server
  - Resolves: #741255


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.14-1
changelog:
  - added error callback to get notification about download failure rhbz#786640
  - rhbz#767186: show a link to a page describing the ABRT configuration
  - spec: silence rpmdiff rhbz#857425
  - don't show the credential in logs rhbz#856960
  - rhbz#852165: warn if adding commands without any rule condition
  - rhbz#851855: process ureport server errors correctly
  - reporter-bugzilla: fix adding users to CC. (Partially?) closes rhbz#841338
  - Resolves: #786640, #767186, #857425, #856960, #852165, #851855, #841338


author: Jakub Filak <jfilak@redhat.com> 2.0.15-1
changelog:
  - remove unnecessary flag from words highlighting functions
  - report-gtk: rework forbidden words highlighting
  - add xmalloc_fopen_fgetline_fclose helper for reading one-line files
  - update GUI before highlighting of forbidden words
  - clear warnings after switching to a next page
  - tweak conditions in show next forbidden word functions
  - reporter-ureport: respect chrooted os_release
  - Fix typos.
  - rhbz#861679: report-gtk: immediately release dump directory lock
  - add a few helpers for reading files as one malloced block


author: Jakub Filak <jfilak@redhat.com> 2.0.16-1
changelog:
  - expand events from a chain and process expanded events separately
  - report-gtk: move selection of event to a right place
  - fix a crash while report-gtk startup (use the correct variable)
  - wizard: allow "non-reportable" reporting for experts; disallow it for non-experts
  - fix typo in function name, remove unnecessary forward declaratioins
  - wizard: fix a thinko in last commit (thanks Jakub)
  - wizard: check for NON_REPORTABLE file, stop if it exists.FILE
  - wizard: remove unnecessary if (1) {...} block. No code changes
  - don't update the selected event while processing it
  - check D-Bus err name without leaking nor crashing
  - ureport: always include offset
  - add Makefile target release-fix
  - Resolves: #864803, #864803, #863595


author: Jakub Filak <jfilak@redhat.com> 2.0.17-1
changelog:
  - update CWD after stealing of a dump directory
  - get product/version from system configuration
  - shorten bz summary if its length exceeds 255 chars
  - add full kerneloops to the uReport
  - reporter-bz: require bz version match when searching for dups. Closes rhbz#849833
  - reporter-bz: eliminate bugzilla_struct::b_product - use auto var instead
  - Move struct bugzilla_struct to its only user, reporter-bugzilla.c
  - reporter-bz: do not needlessly open dd if -f; assorted small fixes
  - added relro to reportclient.so and _pyreport.so rhbz#812283
  - bz reporter: include ROOTDIR, OS_RELEASE_IN_ROOTDIR, EXECUTABLE elements
  - Fix report-newt segfault
  - Resolves: #741647, #812283, #849833, #867118, #869032


author: Jakub Filak <jfilak@redhat.com> 2.0.18-1
changelog:
  - reporter-bz: tighten up checking that BZ server gave us its version; fix recently broken settings parsing
  - reporter-bz: make selinux-policy special case controllable from config file
  - reporter-bz: if we create a new bug but cross-version dup exists, add a note
  - reporter-bz: make rhbz_search_duphash static, use it more widely


author: Jakub Filak <jfilak@redhat.com> 2.0.19-1
changelog:
  - introduce a new formating feature for Bugzilla plugin
  - use gtk_show_uri() instead of own launcher
  - update kerneloops urls
  - don't force the minimal rating trac#854
  - add support for forwarding of report client requests
  - fix i18n in event client communication protocol
  - add event name to the error message - can't get secret item
  - switch all load_conf_file() calls to use skipKeysWithoutValue=false
  - hide the spinner when the event processing is finishes trac#852
  - add a method for loading of configuration of a single event
  - unlock secret collection only on meaningful demand
  - fix secret item look up for gnome-keyring


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.20-1
changelog:
  - New version 2.0.20
  - updated po files
  - add abrt-screencast to POTFILES.in
  - added screen casting support to the wizard
  - fix memory leaks in workflow code
  - report_problem_in_dir(): make LIBREPORT_DEL_DIR work
  - add Yes/No dialog saving answer
  - refactor: move ask_yes_no_save_result from wizard to libreport-gtk
  - added anaconda workflows rhbz#885690
  - report-python: export dd_delete_item too
  - report-python: export DD_OPEN_READONLY too
  - strtrimch: optimize it a bit
  - show only workflows applicable to actual problem directory
  - report-gtk: destroy global text cache only once
  - change rules for FILENAME_NOT_REPORTABLE to always include trailing period.
  - ask for BZ login/BZ pwd if Login attempt failed
  - ask for BZ login/BZ password if not provided by conf
  - remove new line from ask/ask_password responses
  - add ask_yes_no_yesforever() to Python client API
  - make client API independent on translation
  - run_event: use client functions for the communication callbacks
  - clean the workflow buttons when refreshing the event page
  - Fix a bug - inverted check for failed rename() call
  - wrap the not_reportable label .trac#908
  - don't show events without configuration in preferences .trac#881
  - - implemented saving/loading configuratio for workflows - related to trac#822
  - reporter-bz: add AVC's description added to BZ comment
  - add microseconds to dump dir name (problem ID)
  - teach reporter-bugzilla to read BZ ID from reported_to element
  - teach reporter-bugzilla to add reporter to CC
  - introduce a function deleting dd's element
  - introduce a function getting no. of Bytes of dd's element
  - make event config name immutable
  - fixed segv in the last commit
  - made struct workflow private related to trac#822
  - don't show the spinner if the problem is not reportable trac#852
  - made the config_item_info structure private
  - added workflows trac#822
  - added x,--expert cmdline option to enable expert mode
  - switch comment and event selector page
  - use get_ and set_ functions to access event_config_t
  - reporter-bz: don't return NULL on %non_existing_item% - use "" instead
  - refactoring the xml and conf loader code related to trac#822
  - reporter-bugzilla: add a --debug option
  - reporter-bz: fix a summary line formatting bug
  - let logging_callback and post_run_callback members be None
  - expose make_run_event_state_forwarding() in Python API
  - reporter-bz: change syntax of bugzilla_format_*.conf to require "text::", not "text:"
  - reporter-bz: add support for line continuation and simple text in bugzilla_format*.conf


author: Jakub Filak <jfilak@redhat.com> 2.1.0-1
changelog:
  - dd: unify error handling in save_binary_file()
  - dd_sanitize: don't sanitize symlinks
  - rpm: preserve old configuration for <F17 and <REHL7
  - configure: change defaults to be compliant with /var/tmp/abrt
  - configure: fix dump dir mode help string
  - dd: always sanitize mode of saved file
  - rhbz: replace obsolete methods by their substitutes
  - reporter-rhtsupport: improve error detection and logging
  - mailx: remove extra trailing newline in help text
  - spec: add requires section for pygobject3
  - reporter-rhtsupport: retain " Beta" suffix in version. Closes rhbz#896090
  - Fix bugs discoverent by Coverity
  - bz: swap 'bug id' arg with 'item name' arg in attach fn call
  - dd: move dir accessibility check from abrt to libreport
  - don't overwrite "type" rhbz#902828
  - move chown functionality from ABRT DBus to libreport
  - expose configure cmd options for dump dir mode and ownership
  - cli: guard against user ^Z-ing editor and being stuck
  - report-cli: don't close tty fd too early
  - report-cli: switch terminal's fg process group to editor's one; and back
  - dd: open symlinks on request
  - minor fix to the pkg-config file
  - reporter-rhtsupport: extract error message from Strata-Message: header
  - add build time condition for dump dir ownership schema
  - reporter-bz: post a comment to dup bug, if we found a dup. version 2.
  - report-cli: use Client API
  - report-cli: add event name prefix before question
  - run_event: default callbacks for logging and errors
  - make default dump dir mode configurable at build time
  - Stop reading text files one byte at a time
  - make dd_delete_item check that dd is locked
  - never follow symlinks rhbz#887866
  - Revert "reporter-bz: post a comment to dup bug, if we found a dup."
  - wizard: make radio-button text wrap
  - reporter-bz: post a comment to dup bug, if we found a dup.
  - added missing article
  - make the dependency on recordmydesktop soft - related to rhbz#891512
  - cli: use !ec_skip_review as indicator that the event is a reporter
  - Add and use "report-cli" event instead of removed "report-cli -r" option
  - cli: remove superfluous problem_data_free() call
  - uReport: add more explanatory message when upload fails
  - report-cli rework
  - don't require recordmydesktop on RHEL rhbz#891512
  - fixed the relro flags rhbz#812283
  - bugzilla_format_kernel.conf: Attach dmesg element. Closes rhbz#826058
  - bugzilla_format_kernel.conf: fix %summary
  - Make get_dirsize_find_largest_dir less talkative.
  - Minor fixes: robustify start_command(), fix style, fix English in msgs
  - Fix typo, remove c-format from a not c-formatted message
  - Resolves: #826058, #902828


author: Jakub Filak <jfilak@redhat.com> 2.1.1-1
changelog:
  - move 'reporter-mailx' from post-create event to notify(-dup) event
  - reporter-bugzilla: use base64 XMLRPC type for encoded data instead of string type
  - ureport: fix extra quoting when reporting error messages
  - Resolves: #908210


author: Jakub Filak <jfilak@redhat.com> 2.1.2-1
changelog:
  - always treat os-release as textual related to rhbz#922433
  - is_text_file(): bump allowable non-ASCII chars from 2% to 10%. Closes rhbz#922433
  - report-gtk: don't clear warnings after reporting is finished
  - report-gtk: show tabs only in verbose expert mode
  - report-gtk: prettify the workflow buttons rhbz#917694
  - report-gtk: add a button to report reporting failures
  - uReport: do not show URL twice in error output
  - uReport: detect missing type field at client side
  - uReport: add more explanatory message when upload fails
  - uReport: improve messages. Closes #579
  - workflows: a less confusing event name for reporting to Fedora infrastructure
  - workflows: correct an event name for reporting to Fedora in anaconda config
  - fixed workflow localization closes #137
  - run_event_state: expose children_count in python wrapper
  - add the proxy options to the addvanced section of event configurations
  - don't suid before running yum related to rhbz#759443
  - update translation
  - ss: stop reconnecting to the session bus
  - ss: destroy all timeout GSources attached to the main context
  - ss: add a timeout to the waiting for the Completed signal
  - dd: convert time at lock time
  - spawn_next_command: make process group creation optional
  - fork_execv_on_steroids: fix close/move order of fds, move getpwuid out of fork
  - problem API: generate UUID if is missing instead of DUPHASH
  - fix logic of 'Dont ask me again' dialogues (stop returning true for all options)
  - make [p]error_msg[_and_die] more fork-in-multithreaded-app safe
  - Make forking code paths more robust.
  - curl_debug: fix use of "%.*s" (need to pass an int, not size_t)
  - curl_debug: prettify debug output
  - Resolves: #871126, #885055, #890778, #901467, #916389, #917684, #917694, #919536, #922433, #923117


author: Jakub Filak <jfilak@redhat.com> 2.1.3-1
changelog:
  - rhbz: get id of duplicate from correct field
  - change the "exited with" message with something less technical closes #143
  - Integration with satyr
  - dump_dir_accessible_by_uid(): clear errno if error didn't occur
  - reporter-rhtsupport: improve logging
  - reporter-rhtsupport: upload file to BigFileURL if it is large
  - dd: document used errno values in dump_dir_accessible_by_uid()
  - add rhel package with appropriate workflow definitions
  - add workflow definitions for RHEL
  - improve is_text_file() to not treat valid Unicode as bad_chars
  - reporter-rhtsupport: fix double-free error
  - reporter-upload: move file upload function to lib/
  - reporter-upload: factor out HTTP PUT upload
  - reporter-rhtsupport: skip hints check if uploaded data is really large
  - reporter-rhtsupport: make -t[CASE_ID] work without FILEs. Closes #140
  - reporter-rhtsupport: factor out tarball creation
  - RHTS support: regularize order of functions and comments
  - fread_with_reporting: make progress indicator less noisy
  - report-gtk: update excluded elements check boxes before emergency analysis event
  - Resolves: #921941


author: Jakub Filak <jfilak@redhat.com> 2.1.4-1
changelog:
  - support /etc/os-release
  - added flag to not retry locking the incomplete problem dir
  - ureport: save solutions in not-reportable item
  - wizard: make value column click-sortable too
  - wizard: fix clickability of the item list column header
  - wizard: eliminate evd->error_msg member
  - wizard: remove a bunch of evd->foo members
  - debuginfo downloader should enable repos matching *debug* closes #138
  - Replace "THANKYOU" with EXIT_STOP_EVENT_RUN exit code (70)
  - debuginfo downloader: fix DebugInfoDownload::download() error paths.
  - report-gtk: handle user cancellation gracefully
  - logging: refine errors reporting
  - emit a message when searching bugzilla for duplicates closes #151
  - reporter-upload: create tarball with the name based on directory's name
  - reporter-rhtsupport: generate archive name from problem dir name
  - added report-cli event for anaconda should help with rhbz#950544
  - ss: skip option holding NULL values
  - spec: added new event for anaconda reporting rhbz#926916
  - distinguish the event configuration by problem type in the UI closes #149
  - report-gtk: show Next Step btn at workflow start
  - curl upload helper: upload data with "application/octet-stream" content type
  - reporter-rhtsupport: fix hint query to use correct URL


author: Jakub Filak <jfilak@redhat.com> 2.1.5-1
changelog:
  - make the uploader event available for all report types
  - ureport: add conversion from abrt vmcore type to ureport KERNELOOPS type
  - fixed relro flags rhbz#812283
  - rhbz: don't pass NULL in platform argument
  - add function getting information about dump dir for uid
  - anaconda: add proper configuration
  - rhbz: do not try to attach empty files
  - try to delete dump dirs using abrtd in the first step
  - workflow config: use scrollbars instead of enormous window size
  - Resolves: #971117, #958961


author: Jakub Filak <jfilak@redhat.com> 2.1.6-1
changelog:
  - add related packages version in emergency event
  - replace functions deprecated in Gtk-3.10 with their substitutes
  - fixed the bugzilla private group names rhbz#985881
  - workflows: add Anaconda work flow for RHEL
  - add missing manual pages for configuration files, binaries and scripts
  - added options to create private bz tickets rhbz#803772
  - skip the workflow selection if there is only 1 available closes #167
  - added missing workflows for Fedora rhbz#866027
  - spec: double up percent signs in chagelog entries
  - spec: make anaconda package description more generic
  - spec: install RHEL anaconda work flow
  - spec: added new workflow files rhbz#866027
  - spec: build only workflow subpkg relevant for host's OS
  - spec: install all manual pages
  - spec: install only documentation files
  - spec: drop unnecessary Obsoletes and Provides
  - spec: add manual pages to packages
  - spec: specify all config files
  - spec: replace btparser with satyr
  - move non-conf XML files from /etc/libreport/ to /usr/share/libreport/
  - Update satyr support, drop btparser compatibility
  - fixed typo in config file related #866027
  - resize the config window upon collapsing Advanced section
  - rhbz: test xmlrpc env for errors in abrt_xmlrpc_call_params()
  - rhbz: test rhbz_new_bug() return value for errors
  - wizard: show accurate messages
  - spec: add dependency on fros rhbz#958979
  - use fros instead of hard dependency on recordmydesktop rhbz#958979
  - Resolves: #965937, #973167


author: Jakub Filak <jfilak@redhat.com> 2.1.7-1
changelog:
  - Fix problem_item_format() to work properly after 2038 on x32. #691
  - Use proper json-c requirement in libreport-web.pc.
  - abrt-cli info: even -s 10 should show one-liners. #690
  - add checks for existing dumpdir items - closes #164
  - Create helper functions for sha1-hashing strings. #694
  - can now use custom repo filters for enabling repos, related abrt/abrt#688
  - add docstrings, remove global variable - related #171
  - fixed exception handling - closes #173
  - added checks for locked dump directory to dd_* functions, closes #133
  - fixed the symlinks handling in get_file_list abrt/abrt#686
  - make the build in the the build directory to not pollute the source tree
  - fixed debugInfoDownload so that it can process local repos - closes #48
  - Increase text size limit from 1Mb to 8 MB. rhbz#887570.
  - print warning when there is not engough free space for debuginfos, closes #170
  - autogen.sh: improve dependency parser
  - ignore directories without type element - rhbz#958968
  - abrt_xmlrpc: increase XML_SIZE_LIMIT to 4 mbytes. rhbz#961520.
  - ask user to create a private report if it contains sensitive data - rhbz#960549
  - updated translation rhbz#860555
  - updated transifex url
  - do not leak file rhbz#997871
  - in KDE session open URLs in kde-open
  - report-gtk: use wrapped text for warning labels
  - spec: remove abrt-screencast
  - remove obsoleted abrt-screencast
  - Fix create_symlink_lockfile() to not emit ENOENT when asked not to.
  - do not store potentially big data in /tmp
  - New public function create_symlink_lockfile()
  - Resolves: #958968, #981271


author: Jakub Filak <jfilak@redhat.com> 2.1.7-2
changelog:
  - Enable reporting to Red Hat Bugzilla for Anaconda bugs
  - Enable reporting to Red Hat Customer Portal for Anaconda bugs
  - Resolves: #1015554


author: Jakub Filak <jfilak@redhat.com> 2.1.7-4
changelog:
  - Use the RHEL-specific FAF URL by default
  - Load a config file from several directories
  - Resolves: #1031701


author: Jakub Filak <jfilak@redhat.com> 2.1.11-1
changelog:
  - Update translations
  - map_string_t: fix overflow detection in "to int conversion"
  - add type agnostic functions for map_string_t
  - %description spelling fix.
  - remove left over debug stmts from conf files fns
  - spec: remove RHEL files from non-RHEL builds
  - update titles of RHTS workflows
  - spec: add a package which ships Anaconda RHEL BZ WFS
  - add Anaconda Bugzilla reporting workflows for RHEL
  - spec: add a package which ships RHEL Bugzilla workflows
  - add Bugzilla reporting workflows for RHEL
  - remove file options not matching any setting
  - Resolves: #1015093, #1035352, #1035377, #1050152


author: Jakub Filak <jfilak@redhat.com> 2.1.11-2
changelog:
  - define D-Bus configuration interfaces
  - add Java Reporting workflows
  - remove Workflows tab in Preferences
  - Resolves: #1054713, #1055610, #1055633


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - report-cli: use the Client API for communication to user
  - workflow_RHELvmcore: run analyze_VMcore too
  - Resolves: #1058845, #1059651


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-6
changelog:
  - turn off Bugzilla for Anaconda bugs in GA releases
  - Provide SYSLOG_FACILITY when logging through journal
  - KB article URL as a link to help for ABRT configuration
  - load the user list of ignored words
  - localization: properly handle locales with encoding suffix
  - event configuration: load default values from configuration directory
  - Resolves: #1029438, #1062135, #1063320, #1063339, #1063804, #1064261


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - send an ureport before creating a customer case
  - correct name of RH Customer Portal in Anaconda
  - fix suggestion text for screen casting programs
  - fix typos in error messages
  - translation updates
  - Resolves: #1064961, #1069111, #1069340


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - do not export empty configuration options as environment variables
  - translation updates
  - Resolves: #1062498, #1073610


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-12
changelog:
  - localization fixes
  - update man pages
  - provide workflows for logger, mailx, reportuploader
  - uploader: correct capitalization of the event name
  - rhtsupport: re-prompt for credentials
  - rhtsupport: submit ureport
  - uploader: allow secure password/credentials input for crash upload
  - make_description: user-friendly order and add reason to the list
  - make_description: add not_reportable to the list
  - python-report: parse release/version from os-release
  - ureport: Attach portal cases
  - ureport: Add authentication support when sending attachments
  - ureport: Add option to include hostname and machine id in uReport    2014-09-19
  - ureport: Add entitlement HTTP headers when using RHSM certificate authorization  2014-09-19
  - fix: huge debug log messages causing libreport to SEGV   2014-09-22
  - augeas: exclude bugzilla format configurations
  - bugzilla: add comment to closed bugs too
  - SELinux AVC: include 'package' in bugzilla bug reports
  - gui: close dialogues on Enter key
  - gui: fix: collapsing Advanced section in configuration doesn't change size of window
  - gui: allow users to reconfigure libreport and retry reporting
  - Resolves: #965963, #1087866, #1014788, #1104313, #1066486, #1067440, #1101240, #1139987, #1140044, #1067143, #1094203, #1142380, #1139922, #1139557, #1140224, #1087861, #1069917, #1066520, #1075452, #1067123, #1056101, #1084028, #1087866


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-13
changelog:
  - rhtsupport: attach contact email to uReport
  - rhtsupport: send ureport before creating description
  - ureport: fix a bug in the response parser
  - ureport: update the man page
  - uploader: accept empty string as password
  - Resolves: #1150388
  - Related: #1139987, #1066486


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-14
changelog:
  - ureport: don not fail with multiple entitlement certs
  - ureport: don not use uReport_URL in reporter-rhtsupport
  - Related: #1139987, #1140224


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212098, #1217483, #1217500


author: Richard Marko <rmarko@redhat.com> - 2.1.11-24
changelog:
  - ureport: add functionality to use consumer certificate
  - report-python: fix getVersion_fromOSRELEASE
  - RHTSupport: include reported_to in Support cases
  - Resolves: #1223805, #1198551, #1197108


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - don't warn about missing 'type' if the locking fails
  - don't spit unnecessary debug messages
  - Related: #1243280, #1243280


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39.el7.centos
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Paul Wouters <pwouters@redhat.com> - 3.21-2
changelog:
  - Resolves: rhbz#1499845 libreswan does not establish IKE with xauth enabled but modecfg disabled
  - Resolves: rhbz#1497158 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)


author: Paul Wouters <pwouters@redhat.com> - 3.22-2
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
changelog:
  - Update to a git snapshot that builds against standalone gdk-pixbuf
  - Drop librsvg3 package
  - Drop svg theme engine


author: Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
changelog:
  - fix crash in rsvg-gobject.c:instance_dispose function
    (https://bugzilla.gnome.org/show_bug.cgi?id=623383)


author: Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
changelog:
  - Fix including rsvg.h always causing a deprecated warning, as this breaks
    apps compiling with -Werror


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.1.2-0.fdr.1
changelog:
  - Update to 0.1.2.
  - Use "make install DESTDIR=...", disable dependency tracking.
  - Run tests during build.
  - Drop fftw-devel build dep, it's only for an optional part of the test suite.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.1.2-5
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Long long due rebuild with new gcc for FC-5, it seems this may have already
    been done, since the last rebuild was of March 16 and the Rebuild Request
    bug of March 19? Rebuilding anyway to be sure (bug 185876)
  - Fix (remove) use of rpath


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use /usr/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-21
changelog:
  - Add systemd_contexts support
  - Do substitutions on a local sub followed by a dist sub
  Resolves: #971425


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  - Merged dbase_file_flush patch from Dan Walsh.
  - This removes any mention of specific tools (e.g. semanage)
  - from the comment header of the auto-generated files,
  - since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
  - Merged optimizations from Stephen Smalley.
  -    do not set all booleans upon commit, only those whose values have changed
  -    only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Revert hard linking of files between tmp/active/previous.
  - Enable configuration of bzip behavior from Stephen Smalley.
  -   bzip-blocksize=0 to disable compression and decompression support.
  -   bzip-blocksize=1..9 to set the blocksize for compression.
  -   bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.44-1
changelog:
  - Update to upstream
  	* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
  	  glibc < 2.9 does not support binary mode ('b') for fmemopen'd
  	  streams.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Update to upstream
  	* Add enable/disable patch support from Dan Walsh.
  	* Add usepasswd flag to semanage.conf to disable genhomedircon using
  	  passwd from Dan Walsh.
  	* regenerate swig wrappers


author: David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
changelog:
  - big reworking of the support-multiple-python-builds patch to deal with
  PEP 3149: the latest Python 3.2 onwards uses include paths and library names
  that don't fit prior naming patterns, and so we must query python3-config for
  this information.  To complicate things further, python 2's python-config
  doesn't understand all of the options needed ("--extension-suffix").  I've
  thus added new Makefile variables as needed, to be supplied by the specfile by
  invoking the appropriate config tool (or by hardcoding the old value for
  "--extension-suffix" i.e. ".so")
  - rework python3 manifest for PEP 3149, and rebuild for newer python3


author: Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
changelog:
  - Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module 
  indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
  ship active modules in rpm.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-1
changelog:
  -Update to upstream
  2.1.2 2011-08-17
  	* print error debug info for buggy fc
  	* introduce semanage_set_root and friends
  	* throw exceptions in python rather than return
  	* python3 support.
  	* patch for MCS/MLS in user files

  2.1.1 2011-08-01
  	* Remove generated files, expand .gitignore
  	* Use -Werror and change a few prototypes to support it


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  	* Create a new preserve_tunables flag
  	* tree: default make target to all not
  	* fix semanage_store_access_check calling arguments


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Upgrade to upstream
  	* regenerate .pc on VERSION change
  	* maintain mode even if umask is tighter
  	* semanage.conf man page
  	* create man5dir if not exist


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* Alternate path for semanage.conf
  	* do not link against libpython, this is considered bad in Debian
  	* Allow to build for several ruby version
  	* fallback-user-level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* remove build warning when build swig c files
  	* additional makefile support for rubywrap
  	* ignore 80 column limit for readability
  	* semanage_store: fix snprintf length argument by using asprintf
  	* Use default semanage.conf as a fallback
  	* use after free in python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
changelog:
  - Attempt to allocate memory for selinux_binary_policy_path and free memory 
  - allocated by asprintf.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* do boolean name substitution
  	* Fix segfault for building standard policies.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
changelog:
  - Fix handling of missing semanage permissive -d foo, not failing correctly
  - Previous to this fix the first module beginning with foo would get deleted.


author: Dan Walsh <dwalsh@redhat.com> 2.1.9-3
changelog:
  - Update to latest patches from eparis/Upstream
  -    libsemanage: fixes from coverity
  -    libsemange: redo genhomedircon minuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Add sefcontext_compile to compile regex everytime policy is rebuilt
  	* Cleanup/fix enable/disable/remove module.
  	* redo genhomedircon minuid
  	* fixes from coverity
  	* semanage_store: do not leak memory in semanage_exec_prog
  	* genhomedircon: remove useless conditional in get_home_dirs
  	* genhomedircon: double free in get_home_dirs
  	* fcontext_record: do not leak on error in semanage_fcontext_key_create
  	* genhomedircon: do not leak on failure in write_gen_home_dir_context
  	* semanage_store: do not leak fd 
  	* genhomedircon: do not leak shells list
  	* semanage_store: do not leak on strdup failure 
  	* semanage_store: rewrite for readability


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-6
changelog:
  - Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #1018840


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update to latest from NSA
    * Merged endianness and compute_av patches from Darrel Goeddel (TCS).
    * Merged range_transition support from Darrel Goeddel (TCS).
    * Added sepol_genusers function.


author: Dan Walsh <dwalsh@redhat.com> 1.3.6-1
changelog:
  - Update to latest from NSA
    * Changed sepol_genusers to also use getline and correctly handle
      EOL.


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-1
changelog:
  - Update to latest from NSA
          * Cleaned up error handling in sepol_genusers and sepol_genbools.


author: Dan Walsh <dwalsh@redhat.com> 1.5.2-1
changelog:
  - Update to latest from NSA
    * Added man page for sepol_check_context.
    * Added man page for sepol_genusers function.
    * Merged man pages for genpolusers and chkcon from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_ prefix to Flask types to avoid 
      namespace collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-2
changelog:
  - Upgrade to latest from NSA
    * Added sepol_genbools_policydb and sepol_genusers_policydb for
      audit2why.


author: Dan Walsh <dwalsh@redhat.com> 1.5.10-1
changelog:
  - Fix reset booleans warning message
  - Upgrade to latest from NSA
    * License changed to LGPL v2.1, see COPYING.


author: Dan Walsh <dwalsh@redhat.com> 1.7.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
    * Merged genbools debugging message cleanup from Red Hat.


author: Dan Walsh <dwalsh@redhat.com> 1.7.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
    * Removed genpolbools and genpolusers utilities.
    * Merged hierarchy check fix from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged context reorganization, memory leak fixes, 
      port and interface loading, replacements for genusers and
      genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
    * Merged uninitialized variable bugfix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.7.9-1
changelog:
  - Upgrade to latest from NSA
    * Enabled further compiler warning flags and fixed them.
    * Merged user, context, port records patch from Ivan Gyurdiev.
    * Merged key extract function patch from Ivan Gyurdiev.
    * Merged mls_context_to_sid bugfix from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.7.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.13-1
changelog:
  - Upgrade to latest from NSA
    * Improved memory use by SELinux by both reducing the avtab 
      node size and reducing the number of avtab nodes (by not
      expanding attributes in TE rules when possible).  Added
      expand_avtab and expand_cond_av_list functions for use by
      assertion checker, hierarchy checker, compatibility code,
      and dispol.  Added new inline ebitmap operators and converted
      existing users of ebitmaps to the new operators for greater 
      efficiency.
      Note:  The binary policy format version has been incremented to 
      version 20 as a result of these changes.


author: Dan Walsh <dwalsh@redhat.com> 1.7.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed empty list test in cond_write_av_list.  Bug found by
      Coverity, reported by Serge Hallyn (IBM).
    * Merged patch to policydb_write to check errors 
      when writing the type->attribute reverse map from
      Serge Hallyn (IBM).  Bug found by Coverity.
    * Fixed policydb_destroy to properly handle NULL type_attr_map
      or attr_type_map.


author: Dan Walsh <dwalsh@redhat.com> 1.7.19-1
changelog:
  - Upgrade to latest from NSA
    * Changed to treat all type conflicts as fatal errors.
    * Merged several error handling fixes from 
      Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.20-1
changelog:
  - Upgrade to latest from NSA
    * Merged more fixes for resource leaks on error paths 
      from Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.22-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for memory leak in sepol_context_to_sid from
    Jason Tang (Tresys).
    * Merged fixes for resource leaks on error paths and
      change to scope_destroy from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.24-1
changelog:
  - Upgrade to latest from NSA
    * Fixed symtab_insert return value for duplicate declarations.
    * Merged fix for memory error in policy_module_destroy from
    Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed expand_avtab and expand_cond_av_list to keep separate
    entries with identical keys but different enabled flags.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged stddef.h patch and debug conversion patch from 
    Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged boolean record and memory leak fix patches from Ivan
    Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.8-1
changelog:
  - Upgrade to latest from NSA
    * Merged pointer typedef elimination patch from Ivan Gyurdiev.
    * Merged user list function, new mls functions, and bugfix patch
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged iterate patch from Ivan Gyurdiev.
    * Merged MLS in modules patch from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for check_assertions handling of no assertions
    from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed use of policydb_from_image/to_image to ensure proper
    init of policydb.
    * Isolated policydb internal headers under <sepol/policydb/*.h>.
    These headers should only be used by users of the static libsepol.
    Created new <sepol/policydb.h> with new public types and interfaces
    for shared libsepol.
    Created new <sepol/module.h> with public types and interfaces moved
    or wrapped from old module.h, link.h, and expand.h, adjusted for
    new public types for policydb and policy_file.
    Added public interfaces to libsepol.map.
    Some implementation changes visible to users of the static libsepol:
    1) policydb_read no longer calls policydb_init.
    Caller must do so first.
    2) policydb_init no longer takes policy_type argument.
    Caller must set policy_type separately.
    3) expand_module automatically enables the global branch.  
    Caller no longer needs to do so.
    4) policydb_write uses the policy_type and policyvers from the 
    policydb itself, and sepol_set_policyvers() has been removed.


author: Dan Walsh <dwalsh@redhat.com> 1.9.17-1
changelog:
  - Upgrade to latest from NSA
    * Hid sepol_module_package type definition, and added get interfaces.
    * Merged new callback-based error reporting system from Ivan
    Gyurdiev.
    * Merged support for require blocks inside conditionals from
    Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditional expression mapping fix in the module linking
    code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.19-1
changelog:
  - Upgrade to latest from NSA
    * Reworked link_packages, link_modules, and expand_module to use
    callback-based error reporting system rather than error buffering.


author: Dan Walsh <dwalsh@redhat.com> 1.9.21-1
changelog:
  - Upgrade to latest from NSA
    * Changed sepol_module_package_set_file_contexts to copy the
      file contexts data since it is internally managed.
    * Added sepol_policy_file_set_handle interface to associate
      a handle with a policy file.
    * Added handle argument to policydb_from_image/to_image.
    * Added sepol_module_package_set_file_contexts interface.
    * Dropped sepol_module_package_create_file interface.
    * Reworked policydb_read/write, policydb_from_image/to_image, 
      and sepol_module_package_read/write to use callback-based error
      reporting system rather than DEBUG.


author: Dan Walsh <dwalsh@redhat.com> 1.9.23-1
changelog:
  - Upgrade to latest from NSA
    * Added check flag to expand_module() to control assertion
      and hierarchy checking on expansion.
    * Reworked check_assertions() and hierarchy_check_constraints()
      to take handles and use callback-based error reporting.
    * Changed expand_module() to call check_assertions() and 
      hierarchy_check_constraints() prior to returning the expanded
      policy.


author: Dan Walsh <dwalsh@redhat.com> 1.9.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged users cleanup patch from Ivan Gyurdiev.
    * Merged user record memory leak fix from Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.

  - Need to check for /sbin/telinit


author: Dan Walsh <dwalsh@redhat.com> 1.9.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged context interface cleanup, record conversion code, 
      key passing, and bug fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.30-1
changelog:
  - Upgrade to latest from NSA
    * Removed processing of system.users from sepol_genusers and
      dropped delusers logic.
    * Removed policydb_destroy from error path of policydb_read,
      since create/init/destroy/free of policydb is handled by the
      caller now.
    * Fixed sepol_module_package_read to handle a failed policydb_read
      properly.
    * Merged query/exists and count patches from Ivan Gyurdiev.
    * Merged fix for pruned types in expand code from Joshua Brindle.
    * Merged new module package format code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.32-1
changelog:
  - Upgrade to latest from NSA
    * Added further checking and error reporting to 
      sepol_module_package_read and _info.
    * Merged sepol handle passing, DEBUG conversion, and memory leak
      fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.34-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, record bugfix, and set_roles patches 
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.35-1
changelog:
  - Upgrade to latest from NSA
    * Added src/dso.h and src/*_internal.h.
      Added hidden_def for exported symbols used within libsepol.
      Added hidden for symbols that should not be exported by
      the wildcards in libsepol.map.


author: Dan Walsh <dwalsh@redhat.com> 1.9.36-1
changelog:
  - Upgrade to latest from NSA
    * Merged context_to_string interface change patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.38-1
changelog:
  - Upgrade to latest from NSA
    * Removed sepol_port_* from libsepol.map, as the port interfaces
      are not yet stable.


author: Dan Walsh <dwalsh@redhat.com> 1.9.39-1
changelog:
  - Upgrade to latest from NSA
    Prepare for removal of booleans* and *.users files.
    * Cleaned up sepol_genbools to not regenerate the image if
      there were no changes in the boolean values, including the
      degenerate case where there are no booleans or booleans.local
      files.
    * Cleaned up sepol_genusers to not warn on missing local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.9.40-1
changelog:
  - Upgrade to latest from NSA
    * Merged module function and map file cleanup from Ivan Gyurdiev.
    * Merged MLS and genusers cleanups from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.2-2
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - support ordering of records in compare function
      - enable port interfaces
      - add interfaces for context validity and range checks
      - add include guards


author: Dan Walsh <dwalsh@redhat.com> 1.11.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged bugfix for sepol_port_modify from Russell Coker.
    * Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
    * Merged port ordering patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged further fixes from Russell Coker, specifically:
      - av_to_string overflow checking
      - sepol_context_to_string error handling
      - hierarchy checking memory leak fixes and optimizations
      - avrule_block_read variable initialization
    * Marked deprecated code in genbools and genusers.


author: Dan Walsh <dwalsh@redhat.com> 1.11.7-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Fixed hierarchy checker to only check allow rules.


author: Dan Walsh <dwalsh@redhat.com> 1.11.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged cond_expr mapping and package section count bug fixes
      from Joshua Brindle.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.  
    * Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged assertion copying bugfix from Joshua Brindle.
    * Merged sepol_av_to_string patch from Joshua Brindle.
    * Merged clone record on set_con patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.13-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged fix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Added a defined flag to level_datum_t for use by checkpolicy.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged node_expand_addr bugfix and node_compare* change from
      Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12-2
changelog:
  - Upgrade to latest from NSA
    * Updated version for release.
    * Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
    * Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
    * Merged sepol_policydb_mls_enabled interface and error handling
      changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.3-1
changelog:
  - Upgrade to latest from NSA
    * Fixed attr_convert_callback and expand_convert_type_set
      typemap bug.


author: Dan Walsh <dwalsh@redhat.com> 1.12.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for leak of optional package sections from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.6-1
changelog:
  - Upgrade to latest from NSA
    * Fixed cond_normalize to traverse the entire cond list at link time.


author: Dan Walsh <dwalsh@redhat.com> 1.12.9-1
changelog:
  - Upgrade to latest from NSA
    * Dropped tests from all Makefile target.
    * Merged fix warnings patch from Karl MacMillan.
    * Merged libsepol test framework patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.12.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
      Reworked to use calloc in the first place, and converted some other
      malloc/memset pairs to calloc calls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.12-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_policydb_compat_net() interface for testing whether
      a policy requires the compatibility support for network checks
      to be enabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
      based on bug report and suggested fix by Cedric Roux.
    * Merged sens_copy_callback, check_role_hierarchy_callback,
      and node_from_record fixes from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.17-1
changelog:
  - Upgrade to latest from NSA
    * Revert 1.12.16.
    * Merged cleaner fix for bool_ids overflow from Karl MacMillan,
      replacing the prior patch.
    * Merged fixes for several memory leaks in the error paths during
      policy read from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.19-1
changelog:
  - Upgrade to latest from NSA
    * Lindent.
    * Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.12.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged helpful hierarchy check errors patch from Joshua Brindle.
    * Merged semodule_deps patch from Karl MacMillan.
      This adds source module names to the avrule decls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol unit tests from Joshua Brindle.
    * Merged symtab datum patch from Karl MacMillan.
    * Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditionally expand neverallows patch from Jeremy Mowery.
    * Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged range transition enhancements and user format changes
      Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
    * Merged mls user and range_transition support in modules
      from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for version comparison that was preventing range
      transition rules from being written for a version 5 base policy
      from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl MacMillan for a segfault when linking
      non-MLS modules with users in them.


author: Dan Walsh <dwalsh@redhat.com> 1.15.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libselinux.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol segfault fix from Stephen Smalley for when
      sensitivities are required but not present in the base.
    * Merged patch to add errcodes.h to libsepol by Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl to remap booleans at expand time to 
      avoid holes in the symbol table.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 2.0.5-1
changelog:
  - Upgrade to latest from NSA
       * Fix sepol_context_clone to handle a NULL context correctly.
            This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
      to set the file context entry to "<<none>>".
  - Apply patch from Joshua Brindle to disable dontaudit rules


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Upgrade to latest from NSA
    * Eliminate unaligned accesses from policy reading code from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
    * Fixed module_package_read_offsets bug introduced by the prior patch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for the handle_unknown policydb flag from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Reject self aliasing at link time from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
    * Fixed bug in require checking from Stephen Smalley.
    * Added user hierarchy checking from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Upgrade to latest from NSA
    * clarify and reduce neverallow error reporting from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.18-1
changelog:
  - Upgrade to latest from NSA
    * Added support for policy capabilities from Todd Miller.
    * Prevent generation of policy.18 with MLS enabled from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.19-1
changelog:
  - Upgrade to latest from NSA
    * Add support for consuming avrule_blocks during expansion to reduce
      peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Upgrade to latest from NSA
    * Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.21-1
changelog:
  - Upgrade to latest from NSA
    * Fix invalid memory allocation in policydb_index_others() from Jason Tang.


author: Dan Walsh <dwalsh@redhat.com> 2.0.23-1
changelog:
  - Upgrade to latest from NSA
    * Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
    * Add support for open_perms policy capability from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Upgrade to latest from NSA
    * Drop unused ->buffer field from struct policy_file.
    * Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
    * Belatedly merge test for policy downgrade from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.30-1
changelog:
  - Upgrade to latest from NSA
    * Fix endianness bug in the handling of network node addresses from Stephen Smalley.
      Only affects big endian platforms.
      Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.32-1
changelog:
  - Upgrade to latest from NSA
    * Allow require then declare in the source policy from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Upgrade to latest from NSA
    * Add bounds support from KaiGai Kohei.
    * Fix invalid aliases bug from Joshua Brindle.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
changelog:
  * Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
  - Upgrade to latest from NSA
          * Fix alias field in module format, caused by boundary format change
            from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-3
changelog:
  - Apply Eparis Patch
    This patch add libsepol support for filename_trans rules.  These rules
  allow on to make labeling decisions for new objects based partially on
  the last path component.  They are stored in a list.  If we find that
  the number of rules grows to an significant size I will likely choose to
  store these in a hash, both in libsepol and in the kernel.  But as long
  as the number of such rules stays small, this should be good.


author: Dan Walsh <dwalsh@redhat.com> 2.0.44-1
changelog:
  -Update to upstream
  	* Fixes for new role_transition class field by Eric Paris.
  	* Add libsepol support for filename_trans rules by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  - Update to upstream 
  	* Only call role_fix_callback for base.p_roles during expansion.
  	* use mapped role number instead of module role number


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  -Update to upstream
  	* Skip writing role attributes for policy.X and
  	* Indicate when boolean is indeed a tunable.
  	* Separate tunable from boolean during compile.
  	* Write and read TUNABLE flags in related
  	* Copy and check the cond_bool_datum_t.flags during link.
  	* Permanently discard disabled branches of tunables in
  	* Skip tunable identifier and cond_node_t in expansion.
  	* Create a new preserve_tunables flag
  	* Preserve tunables when required by semodule program.
  	* setools expects expand_module_avrules to be an exported
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-2
changelog:
  -The filename_trans code had a bug where duplicate detection was being
  done between the unmapped type value of a new rule and the type value of
  rules already in policy.  This meant that duplicates were not being
  silently dropped and were instead outputting a message that there was a
  problem.  It made things hard because the message WAS using the mapped
  type to convert to the string representation, so it didn't look like a
  dup!


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  - Update to upstream 
  	* regenerate .pc on VERSION change
  	* Move ebitmap_* functions from mcstrans to libsepol
  	* expand: do filename_trans type comparison on mapped representation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
changelog:
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
changelog:
  - Fix off by one error that is causing file_name transition rules to be expanded- incorrectly on i686 machines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* reserve policycapability for redhat testing of ptrace child
  	* cosmetic changes to make the source easier to read
  	* prepend instead of append to filename_trans list
  	* Android/MacOS X build support
  	* allocate enough space to hold filename in trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* fix neverallow checking on attributes
  	* Move context_copy() after switch block in ocontext_copy_*().
  	* check for missing initial SID labeling statement.
  	* Add always_check_network policy capability
  	* role_fix_callback skips out-of-scope roles during expansion.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-7
changelog:
  - Don't generate the gtk-doc docs, and use the ones in the tarball
    to avoid having different files in different builds, fixes
    multilib problems (#342361)


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Dmitry V. Levin <ldv@fandra.org>
changelog:
  - filtering out -fno-rtti and -fno-exceptions options from $RPM_OPT_FLAGS
  - minor install section cleanup


author: Denis Leroy <denis@poolshark.org> - 2.2.4.1-1
changelog:
  - Update to upstream 2.2.4.1
  - Added devhelp book and necessary BRs
  - Split documentation into new subpackage
  - Moved documentation to gtk-doc dir


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Peter Jones <pjones@redhat.com> - 2.3.3-6
changelog:
  - Pull in all the coverity fixes we sent upstream.  I had thought these
    made it in to this release; they did not, but the 2.4.0 release they are
    in is also the python 3 switchover, so we need these as patches.
    Related: rhbz#1463329


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Jeremy Katz <katzj@redhat.com> 0.7.4-3
changelog:
  - fix to not try to include non-existent doc files and remove all 
    unwanted files from the build
  - include api docs 
  - don't build the apache module


author: Jeremy Katz <katzj@redhat.com> 0.7.9-3
changelog:
  - better lib64 patch
  - fix building of libwsdl-build to use libtool so that it gets built 
    with -fPIC as needed


author: Jeremy Katz <katzj@redhat.com> 1.99.17-1
changelog:
  - rename package to libsoup
  - update to 1.99.17
  - don't obsolete soup for now, it's parallel installable


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-1
changelog:
  - update from 2.2.1 to 2.2.2
  - add explicit devel requirements on glib2-devel, pkgconfig, gtk-doc, gnutls-devel and libxml2-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.2.5-1
changelog:
  - 2.2.5
  - Removed gnome-bug-306877-soup-connection-ntlm.c.patch (#160071) as this is 
    now in upstream tarball


author: Matthew Barnes <mbarnes@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Bump glib2 requirement to >= 2.15.3.
  - Clean up some redundant dependencies.
  - Remove patch for RH bug #327871 (fixed in glibc).


author: Matthias Clasen <mclasen@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - See http://mail.gnome.org/archives/gnome-announce-list/2010-February/msg00059.html


author: Chris Weyl <cweyl@alumni.drew.edu> 1.2.4-1
changelog:
  - update to 1.2.4
  - drop old patch0
  - be more aggressive about keeping .deps from intruding into -docs


author: Kamil Dudka <kdudka@redhat.com> 1.2.7-1
changelog:
  - update to 1.2.7 (#632916)
  - avoid multilib conflict on libssh2-docs
  - avoid build failure in mock with SELinux in the enforcing mode (#558964)


author: Paul Howarth <paul@city-fan.org> 1.3.0-3
changelog:
  - make docs package noarch where possible
  - example includes arch-specific bits, so move to devel package
  - use patch rather than scripted iconv to fix character encoding
  - don't make assumptions about SELinux context types used for the ssh server
    in the test suite
  - skip the ssh test if /dev/tty isn't present, as in some versions of mock
  - make the %files list more explicit
  - use tabs for indentation


author: Paul Howarth <paul@city-fan.org> 1.4.0-1
changelog:
  - update to 1.4.0
    - added libssh2_session_supported_algs()
    - added libssh2_session_banner_get()
    - added libssh2_sftp_get_channel()
    - libssh2.h: bump the default window size to 256K
    - sftp-seek: clear EOF flag
    - userauth: provide more informations if ssh pub key extraction fails
    - ssh2_exec: skip error outputs for EAGAIN
    - LIBSSH2_SFTP_PACKET_MAXLEN: increase to 80000
    - knownhost_check(): don't dereference ext if NULL is passed
    - knownhost_add: avoid dereferencing uninitialized memory on error path
    - OpenSSL EVP: fix threaded use of structs
    - _libssh2_channel_read: react on errors from receive_window_adjust
    - sftp_read: cap the read ahead maximum amount
    - _libssh2_channel_read: fix non-blocking window adjusting 
  - add upstream patch fixing undefined function reference in libgcrypt backend
  - BR: /usr/bin/man for test suite


author: Paul Howarth <paul@city-fan.org> 1.4.0-2
changelog:
  - fix libssh2 failing key re-exchange when write channel is saturated (#804156)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 1.4.0-3
changelog:
  - Don't try to use openssl's AES-CTR functions
    (http://www.libssh2.org/mail/libssh2-devel-archive-2012-03/0111.shtml)


author: Paul Howarth <paul@city-fan.org> 1.4.1-1
changelog:
  - Update to 1.4.1
    - Build error with gcrypt backend
    - Always do "forced" window updates to avoid corner case stalls
    - aes: the init function fails when OpenSSL has AES support
    - transport_send: finish in-progress key exchange before sending data
    - channel_write: acknowledge transport errors
    - examples/x11.c: make sure sizeof passed to read operation is correct
    - examples/x11.c: fix suspicious sizeof usage
    - sftp_packet_add: verify the packet before accepting it
    - SFTP: preserve the original error code more
    - sftp_packet_read: adjust window size as necessary
    - Use safer snprintf rather then sprintf in several places
    - Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    - sftp_write: cannot return acked data *and* EAGAIN
    - sftp_read: avoid data *and* EAGAIN
    - libssh2.h: add missing prototype for libssh2_session_banner_set()
  - Drop upstream patches now included in release tarball


author: Paul Howarth <paul@city-fan.org> 1.4.2-1
changelog:
  - Update to 1.4.2
    - Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    - userauth.c: fread() from public key file to correctly detect any errors
    - configure.ac: add option to disable build of the example applications
    - added 'Requires.private:' line to libssh2.pc
    - SFTP: filter off incoming "zombie" responses
    - gettimeofday: no need for a replacement under cygwin
    - SSH_MSG_CHANNEL_REQUEST: default to want_reply
    - win32/libssh2_config.h: remove hardcoded #define LIBSSH2_HAVE_ZLIB


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-3
changelog:
  - Fix basic functionality of libssh2 in FIPS mode
  - Skip SELinux-related quirks on recent distros to prevent a test-suite failure


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-4
changelog:
  - examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
  - Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


author: Tony Asleson <tasleson@redhat.com> 0.0.9-1
changelog:
  - Initial checkin of lio plug-in
  - System filtering via URI (smispy)
  - Error code mapping (ontap)
  - Fixed build so same build tarball is used for all binaries


author: Tony Asleson <tasleson@redhat.com> - 0.0.20-1
changelog:
  - New upstream release
  - Separate package for python libraries
  - Make timestamps match on version.py in library
  - Add python-paramiko requirement for IBM plug-in


author: Tony Asleson <tasleson@redhat.com> 0.0.21-1
changelog:
  - New upstream release
  - Put plug-ins in separate sub packages
  - Don't include IBM plug-in on RHEL > 6, missing paramiko


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Use new systemd rpm macros
    https://bugzilla.redhat.com/show_bug.cgi?id=1149010
  - Place config file in correct tmpfiles.d directory
    https://bugzilla.redhat.com/show_bug.cgi?id=1122087


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-4
changelog:
  - Fix rpmdiff, error for path names
    https://bugzilla.redhat.com/show_bug.cgi?id=1149368
  - Fix rpmdiff, multilib regressions
    https://bugzilla.redhat.com/show_bug.cgi?id=1149371


author: Tony Asleson <tasleson@redhat.com> 1.2.3-1
changelog:
  - New upstream release
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
      * libstoragemgmt-hpsa-plugin
  - Add bash-completion script for lsmcli
  - Replace the hardcoded udev path with /usr/lib/udev/rules.d.
  - Mark /run/lsm and /run/lsm/ipc as %ghost folder.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.


author: Tony Asleson <tasleson@redhat.com> 1.2.3-3
changelog:
  - Megaraid fixes
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238554
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238582
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238566
  - Command line exit code fix:
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238737


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Doug Ledford <dledford@redhat.com> - 2.0.0-3
changelog:
  - Split the library and devel files out to libsysfs and leave the utils
    in sysfsutils.  This is for multilib arch requirements.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.5-7
changelog:
  - Let rpmbuild strip binaries, make build more verbose.
  - Resolves rhbz#669477 - libtalloc 2.0.5-6 binaries not stripped,
  -                        empty -debuginfo
  - Original patch by Ville SkyttÃ¤ <ville.skytta@iki.fi>


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.2.11-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a bunch of patches from Debian, which build a .so instead of a .a
    and fix a bunch of memory leaks.
  - Reinstate a proper devel package as we now build a .so


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> 0:0.2.5-0.fdr.1
changelog:
  - updated to 0.2.5
  - changed license to LGPL
  - rearranged %check to reflect execution order
  - minor cosmetical changes


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.3-1
changelog:
  - updated to 1.3 (#426488, #431334)
  - use wrapper around libtasn1-config which should make it multilib
    safe (#342411); this implies an untagged 'Requires: pkgconfig' for
    -devel now
  - conditionalized BR of valgrind (#401041)


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.9-1
changelog:
  - New upstream bugfix release
  - Adds a new tdbrestore utility
  - Convert to new WAF build-system
  - Add python bindings in new python-tdb subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.9-7
changelog:
  - Let rpmbuild strip binaries, make build more verbose.
  - Original patch by Ville SkyttÃ¤ <ville.skytta@iki.fi>


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-15
changelog:
  - New upstream release 1.2.10
  - Remove upstreamed patches
  - Provides functionality for the upcoming Samba 4 beta


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jiri Pirko <jpirko@redhat.com> - 1.9-1
changelog:
  - Rebase to 1.9
  - libteamdctl: remove false lib dependencies
  - teamdctl: use new port config get function
  - libteamdctl: introduce support for port config get
  - libteamdctl: cache reply strings into list
  - teamd: introduce PortConfigDump control method
  - teamd: make teamd_get_port_by_ifname ifname argument const
  - Minor improvements to style and language.
  - do not install example binaries
  - minor man page(s) correction(s) and lintianisation
  - teamdctl: print error message if ifindex cannot be obtained
  - fix cflags path in pc files
  Resolves: rhbz#1028138
  Resolves: rhbz#1013640
  Resolves: rhbz#1029186


author: Jiri Pirko <jpirko@redhat.com> - 1.9-3
changelog:
  - man teamdctl: Minor improvements to style and language [1055940]
  - man teamd.conf: Minor improvements to style and language [1055940]
  - fix comment typo in ifdown-Team scripts [1035173]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-8
changelog:
  - teamd: fixed couple comments [1067851]
  - teamd: update hwaddr when changing team's macaddr [1067851]
  - redhat: fix boolean types in example 2 [1067851]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-13
changelog:
  - teamdctl: add command for easy port presention checking [1081214]
  - initscripts: do not try to re-add port if it is already there [1081214]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-14
changelog:
  - teamd_link_watch: allow to send ARP probes if no source_host is specified [1078993]
  - bond2team: do not guess source_host option [1079059]
  - teamd_link_watch: specify "missed_max" option default value [1079059]
  - man: correct type of "*_host" options [1078993]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.15-1
changelog:
  - New upstream release 0.9.15
  - Properly re-sets the nested.level flag in the ev.ctx when reinitializing
    after a fork()
  - Allow tevent_signal events to be freed during their handler


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.16-1
changelog:
  - New upstream release 0.9.16
  - Adds tevent_*_trace_*() and tevent_context_init_ops()
  - Move tevent.py to the arch-specific directory


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Apply a patch from upstream to fix tevent_poll's additional_flags
    on 32bit architectures
  - Resolves: rhbz#975490


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.18-3
changelog:
  - Make the dependency requirements arch-specific
  - Remove ancient, unused patches
  - Remove python variables that are not needed on modern systems


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-1
changelog:
  - Initial package based on package by Supphachoke Suntiwichaya
    and Kamthorn Krairaksa for the OLPC.


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-2
changelog:
  - Apply comments from Matthias Clasen (#222611) 
  - devel summary improvement
  - devel require pkgconfig
  - configure --disable-static
  - Add comments about the voodoo
  - Install docs in the right place


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0beta2-2
changelog:
  - Put Obsoletes/Provides theora-exp-devel in the -devel package instead of in
    the -tools package (oops)
  - Install png2theora (bz 349951)


author: Hans de Goede <hdegoede@redhat.com> 1:1.0-1
changelog:
  - 1.0 final release
  - need epoch because we were not using the special pre-release
    version-release scheme used now a days in Fedora :(


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Petr Hracek <phracek@redhat.com> - 4.0.3-15
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Karsten Hopp <karsten@redhat.com> 0.2.1-7.1
changelog:
  - replace Requires(devel) with a simple Requires as the new rpm
    aborts otherwise with "Bad Requireflags: qualifiers: Requires(devel)"


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - disable the --cache-file passing to ltconfig; this breaks the older
    ltconfig scripts found around.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - explicitly disable per-arch libraries (#2210)
  - undo hard links and remove zero length file (#2689)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch to use mktemp to create the tempdir
  - use %configure after defining __libtoolize to /bin/true


author: Jens Petersen <petersen@redhat.com> 1.4.2-3
changelog:
  - test quoting patch should be on ltmain.in not ltmain.sh (#53276)
  - use file_magic for Linux ELF (#54887)
  - allow link against an archive when building a shared library (#54887)
  - include ltdl.m4 in manifest (#56671)


author: Jens Petersen <petersen@redhat.com> 1.4.2-5
changelog:
  - revert filemagic and archive-shared patches following cvs (#54887)
  - don't change "&& test" to "-a" in ltmain.in


author: Jens Petersen <petersen@redhat.com> 1.4.2-8
changelog:
  - add old patch from aoliva to fix relinking when installing into a buildroot
  - backport dup-deps fix from cvs stable branch


author: Jens Petersen <petersen@redhat.com> 1.4.2-11
changelog:
  - don't hardcode "configure.in" in libtoolize (#70864)
    [reported by bastiaan@webcriminals.com]
  - make check, but not on ia64


author: Jens Petersen <petersen@redhat.com> 1.4.3-1
changelog:
  - update to 1.4.3
  - remove obsolete patches (test-quote, dup-deps, libtoolize-configure.ac)
  - apply the multilib patch to just the original config files
  - update x86_64/s390 patch and just apply to original config files
  - use automake-1.4 in "make check" for demo-make.test to pass!
  - remove info dir file that is not installed
  - make autoreconf update missing


author: Jens Petersen <petersen@redhat.com> 1.4.3-2
changelog:
  - define SED in ltmain.sh for historic ltconfig files
  - define macro AUTOTOOLS to hold automake-1.4 and aclocal-1.4, and use it
  - leave old missing file for now
  - general spec file cleanup
    - don't copy install files to demo nor mess with installed ltdl files
    - don't need to run make in doc
    - force removal of info dir file
    - don't need to create install prefix dir
    - don't bother gzipping info files ourselves


author: Jens Petersen <petersen@redhat.com>
changelog:
  - add --without check build option to allow disabling of "make check"
  - exclude info dir file rather than removing


author: Jens Petersen <petersen@redhat.com> 1.4.3-3
changelog:
  - fix mktemp to work when running mktemp fails (#76602)
    [reported by (Oron Peled)]
  - remove info dir file, don't exclude it
  - fix typo in -libs description (#79619)
  - use buildroot instead of RPM_BUILD_ROOT


author: Florian La Roche <Florian.LaRoche@redhat.de> - 1.4.3-5
changelog:
  - add config.guess and config.sub, otherwise old versions of
    these files can creep into /usr/share/libtool/


author: Jens Petersen <petersen@redhat.com> - 1.5-1
changelog:
  - update to 1.5
  - no longer override config.{guess,sub} for rpmbuild %configure,
    redhat-rpm-config owns those now
  - update and rename libtool-1.4.2-s390_x86_64.patch to
    libtool-1.5-libtool.m4-x86_64.patch since s390 now included
  - buildrequire autoconf and automake, no longer automake14
  - skip make check on s390 temporarily
  - no longer skip demo-nopic.test on x86_64, s390 and s390x
  - from Owen Taylor
    - add libtool-1.4.2-expsym-linux.patch (#55607) [from James Henstridge]
    - add quoting in mktemp patch
    - add libtool-1.5-readonlysym.patch
    - add libtool-1.5-testfailure.patch workaround
    - no longer need libtool-1.4.2-relink-58664.patch


author: Jens Petersen <petersen@redhat.com> - 1.5-3
changelog:
  - don't use %configure since target options caused libtool to assume
    i386-redhat-linux-gcc instead of gcc for CC (reported by Joe Orton)
  - add libtool-1.5-relink-libdir-order-91110.patch to fix order of lib dirs
    searched when relinking (#91110) [patch from Joe Orton]


author: Jens Petersen <petersen@redhat.com> - 1.5-4
changelog:
  - remove the quotes around LD in AC_PROG_LD_GNU (#97608)
    [reported by twaugh]
  - use -nostdlib also when linking with g++ and non-GNU ld in
    _LT_AC_LANG_CXX_CONFIG [reported by fnasser, patch by aoliva]
  - use %configure with CC and CXX set


author: Jens Petersen <petersen@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2 bugfix release
  - update libtool-1.5-libtool.m4-x86_64.patch
  - nolonger need libtool-1.5-mktemp.patch, libtool-1.5-expsym-linux.patch,
    libtool-1.5-readonlysym.patch, libtool-1.5-relink-libdir-order-91110.patch,
    libtool-1.5-AC_PROG_LD_GNU-quote-v-97608.patch and libtool-1.5-nostdlib.patch


author: Jens Petersen <petersen@redhat.com> - 1.5.4-1
changelog:
  - 1.5.4 bugfix release
  - improve libtool-1.4.2-multilib.patch (Albert Chin) and only apply to
    libtool.m4
  - use bootstrap instead of autoreconf to update configuration
  - update libtool-1.4.3-ltmain-SED.patch to libtool-1.5.4-ltmain-SED.patch


author: Daniel Reed <djr@redhat.com> 1.5.10-1
changelog:
  - update to the 1.5.10 bugfix release
    - obsoletes libtool-1.4-nonneg.patch
    - obsoletes libtool-1.5-libtool.m4-x86_64.patch
    - obsoletes libtool-1.4.2-multilib.patch
    - obsoletes libtool-1.4.2-demo.patch
    - obsoletes libtool-1.5-testfailure.patch


author: Daniel Reed <djr@redhat.com> 1.5.12.multilib2-3.4.3
changelog:
  - update to the 1.5.12 bugfix release
    - Makes use of $datarootdir, which is necessary for Autoconf >= 2.60.
    - Correctly skip hppa, x86_64, and s390* in tests/demo-nopic.test.
    - Interpret `include' statements in toplevel ld.so.conf file.
    - While "parsing" /etc/ld.so.conf, skip comments.
  - add dependency on gcc version; /usr/bin/libtool hardcodes paths into gcc's internal directories
  - replace "libtool-libs" with "libtool-ltdl" and "libtool-ltdl-devel"


author: Florian La Roche <laroche@redhat.com>
changelog:
  - add version-release to the Provides: and fix our own
    Requires: line to the current naming scheme


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Karsten Hopp <karsten@redhat.com> 1.5.22-7
changelog:
  - update config.guess, config.sub with newer files from automake-1.10
  - skip over lines in /etc/ld.so.conf.d/* which don't look like absolute paths
    (p.e. files from kernel-xen). This avoids having unwanted relative paths in
    lib_search_path


author: Karsten Hopp <karsten@redhat.com> 1.5.22-11
changelog:
  - use ./configure so that config.{sub,guess} will not be replaced with ancient
    version of those files (#234778)


author: Karsten Hopp <karsten@redhat.com> 2.2.6b-1
changelog:
  - update to 2.2.6b, fixes CVE-2009-3736:
    libltdl may load and execute code from a library in the current directory


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-9
changelog:
  - fix fedora-review warnings: s/RPM_BUILD_ROOT/buildroot/, remove trailing
    white-spaces, move libltdl.so to ltdl sub-package, remove unnecessary BR
  - remove unnecessary newlines
  - fix the BuildRequire ~> Require only (#79467 related)
  - fix weird build circumstances (don't call ./bootstrap, don't call autoconf
    manually, do not touch configure script)
  - remove 'tee' invocation for copying testsuite output (the file
    'test-suite.log' is good enough)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-10
changelog:
  - temporarily disable the 'gcj' tests (#869578) -- this is just to (1) allow
    build under f18+ and RHEL-7.0 and (2) don't through out upstream testsuite.
    Added patch must be removed once the 'ecj' utility is fixed
  - libtool-ltdl shouldn't own /usr/share/libtool/ directory
  - move the .so file without version back to devel package (sorry for that)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.1.2-2.el7
changelog:
  - Fix crash when loop-deleting non-loop device (#1036076)
  - Fix some thread safety issues (#1036099)
  - Fix lingering mount after CD-ROM drive is ejected (#835120)
  - Fix some uninitializes variables (#1056580)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Roozbeh Pournader <roozbeh@gmail.com> - 20080409-1
changelog:
  - Update to upstream 20080409: Unicode 5.1 support
  - Change package versioning scheme
  - Update summary and description
  - Add DistTag
  - Remove copy of GPL from RPM: the only file it applies to is not shipped


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-7
changelog:
  - merge review spec fixes (#226053)
  - create -static subpackage to ship static libs separately
  - don't use auto* stuff, drop automake, libtool deps
  - BuildRequire openjade, fix Requires


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-10
changelog:
  - optimize usb_find_devices() and use openat() instead of open()
   (#273901), thanks to Ulrich Drepper
  - BR gawk


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-12
changelog:
  - remove unnecessary 1ms wakeups while USB transfers are in progress,
    thanks to Scott Lamb (#408131)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-1
changelog:
  - New libusbx package, replacing libusb1
  - Switching to libusbx upstream as that actually does releases (hurray)
  - Drop all patches (all upstream)
  - Drop -static subpackage (there are no packages using it)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-2
changelog:
  - Fix URL to actually point to libusbx
  - Improve description to explain the relation between libusbx and libusb
  - Build the examples (to test linking, they are not packaged)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Doug Ledford <dledford@redhat.com> - 1.1.0.237-2
changelog:
  - Some of the scripts are missing the execute bit, fix that
  - Clean up the check script to be more appropriate for in-box use
  - Resolves: bz1182413, bz1182417


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Jarod Wilson <jarod@redhat.com>
changelog:
  - Drop libusnic_verbs from package, obsoleted by rdma-core
  - Update to usnic-tools v1.1.2.0 upstream release
  - Fix upgrade paths with rdma-core
  - Resolves: rhbz#1507612


author: Dmitry V. Levin <ldv@altlinux.ru> 0.5.2-alt3
changelog:
  - Specfile cleanup.
  - Owl-compatible changes:
    + added utempter group;
    + utempter binary moved to {_libdir}/utempter.d,
      owned by group utempter with 710 permissions.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.0-alt1
changelog:
  - Rewritten the code completely.
  - Renamed to libutempter.
  - Corrected the package description.
  - FHSificated (yes, there are no more {_sbindir}/utempter).
  - Libificated.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.3-alt1
changelog:
  - Added compatibility declarations to ease upgrade of old applications.
  - Added small README file.
  - Corrected provides.


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Hans de Goede <hdegoede@redhat.com> 0.8.2-2
changelog:
  - Change tarbal to official upstream 0.8.2 release
  - This fixes multiple Makefile issues pointed out in the review (#671883)
  - Add ir-keytable config files
  - Explicitly specify CXXFLAGS so that qv4l2 gets build with rpm_opt_flags too


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Simone Caronni <negativo17@gmail.com> - 0.6-2
changelog:
  - Enable documentation by default.
  - Clean up spec file a bit; remove el5 tags.
  - Let %doc find the proper location for the documentation.


author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-2
changelog:
  - Make sure qemu can access kernel/initrd (bug #516034)
  - Set perms on /var/lib/libvirt/boot to 0711 (bug #516034)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5
changelog:
  - Add PCI host device hotplug support
  - Allow PCI bus reset to reset other devices (#499678)
  - Fix stupid PCI reset error message (bug #499678)
  - Allow PM reset on multi-function PCI devices (bug #515689)
  - Re-attach PCI host devices after guest shuts down (bug #499561)
  - Fix list corruption after disk hot-unplug
  - Fix minor 'virsh nodedev-list --tree' annoyance


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-0.2.gitfac3f4c
changelog:
  - Update to newer snapshot of 0.7.1
  - Stop libvirt using untrusted 'info vcpus' PID data (#520864)
  - Support relabelling of USB and PCI devices
  - Enable multipath storage support
  - Restart libvirtd upon RPM upgrade


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - Upstream release of 0.7.1
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-8
changelog:
  - Disable sound backend, even when selinux is disabled (#524499)
  - Re-label qcow2 backing files (#497131)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-10
changelog:
  - Create /var/log/libvirt/{lxc,uml} dirs for logrotate
  - Make libvirt-python dependon on libvirt-client
  - Sync misc minor changes from upstream spec


author: Mark McLoughlin <markmc@redhat.com> - 0.7.1-11
changelog:
  - Fix libvirtd memory leak during error reply sending (#528162)
  - Add several PCI hot-unplug typo fixes from upstream


author: Daniel Veillard <veillard@redhat.com> - 0.7.2-1
changelog:
  - Upstream release of 0.7.2
  - Allow to define ESX domains
  - Allows suspend and resulme of LXC domains
  - API for data streams
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.4-1
changelog:
  - upstream release of 0.7.4
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.5-1
changelog:
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  - upstream release of 0.7.6
  - Use QEmu new device adressing when possible
  - Implement CPU topology support for QEMU driver
  - Implement SCSI controller hotplug/unplug for QEMU
  - Implement support for multi IQN
  - a lot of fixes and improvements


author: Adam Jackson <ajax@redhat.com> 0.7.6-2
changelog:
  - libvirt-0.7.6-add-needed.patch: Fix FTBFS from --no-add-needed
  - Add BuildRequires: xmlrpc-c-client for libxmlrpc_client.so


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support
  - async job handling
  - virtio channel
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - assorted bug fixes and lots of cleanups


author: Cole Robinson <crobinso@redhat.com> - 0.7.7-2.fc14
changelog:
  - Fix USB devices by product with security enabled (bz 574136)
  - Set kernel/initrd in security driver, fixes some URL installs (bz 566425)


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - Upstream release 0.8.0
  - Snapshotting support (QEmu/VBox/ESX)
  - Network filtering API
  - XenAPI driver
  - new APIs for domain events
  - Libvirt managed save API
  - timer subselection for domain clock
  - synchronous hooks
  - API to update guest CPU to host CPU
  - virDomainUpdateDeviceFlags new API
  - migrate max downtime API
  - volume wiping API
  - and many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-1
changelog:
  - Upstream release 0.8.1
  - Starts dnsmasq from libvirtd with --dhcp-hostsfile
  - Add virDomainGetBlockInfo API to query disk sizing
  - a lot of bug fixes and cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.8.2-1
changelog:
  - Upstream release 0.8.2
  - phyp: adding support for IVM
  - libvirt: introduce domainCreateWithFlags API
  - add 802.1Qbh and 802.1Qbg switches handling
  - Support for VirtualBox version 3.2
  - Init script for handling guests on shutdown/boot
  - qemu: live migration with non-shared storage for kvm


author: Daniel P. Berrange <berrange@redhat.com> - 0.8.2-2
changelog:
  - CVE-2010-2237 ignoring defined main disk format when looking up disk backing stores
  - CVE-2010-2238 ignoring defined disk backing store format when recursing into disk
    image backing stores
  - CVE-2010-2239 not setting user defined backing store format when creating new image
  - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for
    obtaining privileged resources on the host


author: Daniel Veillard <veillard@redhat.com> - 0.8.5-1
changelog:
  - Enable JSON and netdev features in QEMU >= 0.13
  - framework for auditing integration
  - framework DTrace/SystemTap integration
  - Setting the number of vcpu at boot
  - Enable support for nested SVM
  - Virtio plan9fs filesystem QEMU
  - Memory parameter controls
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.7-1
changelog:
  - Preliminary support for VirtualBox 4.0
  - IPv6 support
  - Add VMware Workstation and Player driver driver
  - Add network disk support
  - Various improvements and bug fixes
  - from 0.8.6:
  - Add support for iSCSI target auto-discovery
  - QED: Basic support for QED images
  - remote console support
  - support for SPICE graphics
  - sysinfo and VMBIOS support
  - virsh qemu-monitor-command
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.8-1
changelog:
  - expose new API for sysinfo extraction
  - cgroup blkio weight support
  - smartcard device support
  - qemu: Support per-device boot ordering
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.0-1
changelog:
  - Support cputune cpu usage tuning
  - Add public APIs for storage volume upload/download
  - Add public API for setting migration speed on the fly
  - Add libxenlight driver
  - qemu: support migration to fd
  - libvirt: add virDomain{Get,Set}BlkioParameters
  - setmem: introduce a new libvirt API (virDomainSetMemoryFlags)
  - Expose event loop implementation as a public API
  - Dump the debug buffer to libvirtd.log on fatal signal
  - Audit support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.1-1
changelog:
  - support various persistent domain updates
  - improvements on memory APIs
  - Add virDomainEventRebootNew
  - various improvements to libxl driver
  - Spice: support audio, images and stream compression
  - Various improvements and bug fixes


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.1-3
changelog:
  - Add upstream patches:
      0001-json-Avoid-passing-large-positive-64-bit-integers-to.patch
      0001-qemudDomainMemoryPeek-change-ownership-selinux-label.patch
      0002-remote-remove-bogus-virDomainFree.patch
    so that users can try out virt-dmesg.
  - Change /var/cache mode to 0711.


author: Daniel Veillard <veillard@redhat.com> - 0.9.2-1
changelog:
  - Framework for lock manager plugins
  - API for network config change transactions
  - flags for setting memory parameters
  - virDomainGetState public API
  - qemu: allow blkstat/blkinfo calls during migration
  - Introduce migration v3 API
  - Defining the Screenshot public API
  - public API for NMI injection
  - Various improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.2-2
changelog:
  - add rule to require netcf-0.1.8 during build so that new transactional
    network change APIs are included.
  - document that CVE-2011-2178 has been fixed (by virtue of rebase
    to 0.9.2 - see https://bugzilla.redhat.com/show_bug.cgi?id=709777)


author: Daniel Veillard <veillard@redhat.com> - 0.9.3-1
changelog:
  - new API virDomainGetVcpupinInfo
  - Add TXT record support for virtual DNS service
  - Support reboots with the QEMU driver
  - New API virDomainGetControlInfo API
  - New API virNodeGetMemoryStats
  - New API virNodeGetCPUTime
  - New API for send-key
  - New API virDomainPinVcpuFlags
  - support multifunction PCI device
  - lxc: various improvements
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.4-1
changelog:
  - network bandwidth QoS control
  - Add new API virDomainBlockPull*
  - save: new API to manipulate save file images
  - CPU bandwidth limits support
  - allow to send NMI and key event to guests
  - new API virDomainUndefineFlags
  - Implement code to attach to external QEMU instances
  - bios: Add support for SGA
  - various missing python binding
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.5-1
changelog:
  - many snapshot improvements (Eric Blake)
  - latency: Define new public API and structure (Osier Yang)
  - USB2 and various USB improvements (Marc-André Lureau)
  - storage: Add fs pool formatting (Osier Yang)
  - Add public API for getting migration speed (Jim Fehlig)
  - Add basic driver for Microsoft Hyper-V (Matthias Bolte)
  - many improvements and bug fixes


author: Laine Stump <laine@redhat.com> - 0.9.6-2
changelog:
  - Make PCI multifunction support more manual - Bug 742836
  - F15 build still uses cgconfig - Bug 738725


author: Daniel Veillard <veillard@redhat.com> - 0.9.8-1
changelog:
  - Add support for QEMU 1.0
  - Add preliminary PPC cpu driver
  - Add new API virDomain{Set, Get}BlockIoTune
  - block_resize: Define the new API
  - Add a public API to invoke suspend/resume on the host
  - various improvements for LXC containers
  - Define keepalive protocol and add virConnectIsAlive API
  - Add support for STP and VLAN filtering
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.9-1
changelog:
  - Add API virDomain{S,G}etInterfaceParameters
  - Add API virDomain{G, S}etNumaParameters
  - Add support for ppc64 qemu
  - Support Xen domctl v8
  - many improvements and bug fixes


author: Cole Robinson <crobinso@redhat.com> - 0.9.11.3-1
changelog:
  - Rebased to version 0.9.11.3
  - Abide URI username when connecting to hypervisor (bz 811397)
  - Fix managed USB mode (bz 814866)
  - Fix crash connecting to ESX host (bz 811891)


author: Daniel Veillard <veillard@redhat.com> - 0.9.12-1
changelog:
  - qemu: allow snapshotting of sheepdog and rbd disks
  - blockjob: add new APIs
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.13-1
changelog:
  - S390: support for s390(x)
  - snapshot: implement new APIs for esx and vbox
  - snapshot: new query APIs and many improvements
  - virsh: Allow users to reedit rejected XML
  - nwfilter: add DHCP snooping
  - Enable driver modules in libvirt RPM
  - Default to enable driver modules for libvirtd
  - storage backend: Add RBD (RADOS Block Device) support
  - sVirt support for LXC domains inprovement
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.10.0-1
changelog:
  - upstream release of 0.10.0
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - driver for parallels hypervisor
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Cole Robinson <crobinso@redhat.com> - 0.10.1-3
changelog:
  - Fix libvirtd segfault with old netcf-libs (bz 853381)
  - Drop unneeded dnsmasq --filterwin2k
  - Fix unwanted connection closing, needed for boxes


author: Daniel Veillard <veillard@redhat.com> - 0.10.2-1
changelog:
  - Upstream release 0.10.2
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - parallels: add support of containers to the driver
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Richard W.M. Jones <rjones@redhat.com> - 0.10.2-3
changelog:
  - Re-add Use-qemu-system-i386-as-binary-instead-of-qemu.patch
    NB: This patch is Fedora-specific and not upstream.
  - Add upstream patches: don't duplicate environment variables (RHBZ#859596).


author: Cole Robinson <crobinso@redhat.com> - 0.10.2.1-1
changelog:
  - Rebased to version 0.10.2.1
  - Fix lvm volume creation when alloc=0 (bz #866481)
  - Clarify virsh send-keys man page example (bz #860004)
  - Fix occasional deadlock via virDomainDestroy (bz #859009)
  - Fix LXC deadlock from ctrl-c (bz #848119)
  - Fix occasional selinux denials with macvtap (bz #798605)
  - Fix multilib conflict with systemtap files (bz #831425)
  - Don't trigger keytab warning in system logs (bz #745203)
  - Fix qemu domxml-2-native NIC model out (bz #636832)
  - Fix error message if not enough space for lvm vol (bz #609104)


author: Jiri Denemark <jdenemar@redhat.com> - 1.0.5-2
changelog:
  - virInitctlRequest: Don't hardcode 384 bytes size
  - network: Fix network driver startup for qemu:///session
  - virInitctlRequest: Unbreak make syntax check
  - virInitctlRequest: Unbreak make syntax check
  - build: Always include sanitytest in tarball
  - qemu: Fix stupid typos in VFIO cgroup setup/teardown
  - build: Always include libvirt_lxc.syms in tarball
  - build: Clean up stray files found by 'make distcheck'
  - spec: Proper soft static allocation of qemu uid
  - Fix F_DUPFD_CLOEXEC operation args
  - build: Fix mingw build of virprocess.c
  - Fix potential use of undefined variable in remote dispatch code
  - build: Avoid non-portable cast of pthread_t
  - Fix release of resources with lockd plugin
  - Fixup rpcgen code on kFreeBSD too
  - Make detect_scsi_host_caps a function on all architectures
  - qemu: Allocate network connections sooner during domain startup
  - tests: Files named '.*-invalid.xml' should fail validation
  - conf: Don't crash on a tpm device with no backends
  - Don't mention disk controllers in generic controller errors
  - iscsi: Don't leak portal string when starting a pool
  - util: Fix virFileOpenAs return value and resulting error logs


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.0-2
changelog:
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - Fix crash when multiple event callbacks were registered (CVE-2013-2230)
  - Paused domain should remain paused after migration (rhbz#981139)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-2
changelog:
  - spec: Change --enable-werror handling to match upstream
  - Delete obsolete / unused python test files (rhbz#884103)
  - Remove reference to python/tests from RPM %doc (rhbz#884103)
  - spec: Explicitly claim ownership of channel subdir (rhbz#884103)
  - Add APIs for formatting systemd slice/scope names (rhbz#980929)
  - Add support for systemd cgroup mount (rhbz#980929)
  - Cope with races while killing processes (rhbz#980929)
  - Enable support for systemd-machined in cgroups creation (rhbz#980929)
  - Ensure LXC/QEMU APIs set the filename for errors (rhbz#991348)
  - Avoid crash if NULL is passed for filename/funcname in logging (rhbz#991348)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-3
changelog:
  - RPC: Don't accept client if it would overcommit max_clients (rhbz#981729)
  - Introduce max_queued_clients (rhbz#981729)
  - conf: Add default USB controller in qemu post-parse callback (rhbz#819968)
  - qemu: Rename some functions in qemu_command.c (rhbz#819968)
  - qemu: Eliminate almost-duplicate code in qemu_command.c (rhbz#819968)
  - qemu: Enable auto-allocate of all PCI addresses (rhbz#819968)
  - qemu: Add pcie-root controller (rhbz#819968)
  - qemu: Add dmi-to-pci-bridge controller (rhbz#819968)
  - qemu: Fix handling of default/implicit devices for q35 (rhbz#819968)
  - qemu: Properly set/use device alias for pci controllers (rhbz#819968)
  - qemu: Enable using implicit sata controller in q35 machines (rhbz#819968)
  - qemu: Improve error reporting during PCI address validation (rhbz#819968)
  - qemu: Refactor qemuDomainCheckDiskPresence for only disk presence check (rhbz#910171)
  - qemu: Add helper functions for diskchain checking (rhbz#910171)
  - qemu: Check presence of each disk and its backing file as well (rhbz#910171)
  - conf: Add startupPolicy attribute for harddisk (rhbz#910171)
  - qemu: Support to drop disk with 'optional' startupPolicy (rhbz#910171)
  - Split TLS test into two separate tests (rhbz#994158)
  - Avoid re-generating certs every time (rhbz#994158)
  - Change data passed into TLS test cases (rhbz#994158)
  - Fix validation of CA certificate chains (rhbz#994158)
  - Fix parallel runs of TLS test suites (rhbz#994158)
  - tests: Fix parallel runs of TLS test suites (rhbz#994158)
  - Add a man page for virtlockd daemon (rhbz#991494)
  - Add an example config file for virtlockd (rhbz#991494)
  - Properly handle -h / -V for --help/--version aliases in virtlockd/libvirtd (rhbz#991494)
  - Make check for /dev/loop device names stricter to avoid /dev/loop-control (rhbz#924815)
  - Ensure securityfs is mounted readonly in container (rhbz#872642)
  - Add info about access control checks into API reference (rhbz#700443)
  - Record the where the auto-generated data comes from (rhbz#700443)
  - Add documentation for access control system (rhbz#700443)
  - virsh-domain: Flip logic in cmdSetvcpus (rhbz#996552)
  - Honour root prefix in lxcContainerMountFSBlockAuto (rhbz#924815)
  - util: Add virGetUserDirectoryByUID (rhbz#988491)
  - Introduce a virt-login-shell binary (rhbz#988491)
  - build: Fix compilation of virt-login-shell.c (rhbz#988491)
  - Fix double-free and broken logic in virt-login-shell (rhbz#988491)
  - Address missed feedback from review of virt-login-shell (rhbz#988491)
  - Ensure that /dev exists in the container root filesystem (rhbz#924815)
  - remote: Fix a segfault in remoteDomainCreateWithFlags (rhbz#994855)
  - build: Avoid -lgcrypt with newer gnutls (rhbz#951637)
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#994158)
  - build: Fix missing max_queued_clients in augeas test file for libvirtd.conf (rhbz#981729)
  - virsh-domain: Fix memleak in cmdCPUBaseline (rhbz#997798)
  - Fix typo in domain name in polkit acl example (rhbz#700443)
  - Update polkit examples to use 'lookup' method (rhbz#700443)
  - Add bounds checking on virDomainMigrate*Params RPC calls (CVE-2013-4292) (rhbz#1002667)
  - Add bounds checking on virDomainGetJobStats RPC call (rhbz#1002667)
  - Add bounds checking on virDomain{SnapshotListAllChildren, ListAllSnapshots} RPC calls (rhbz#1002667)
  - Add bounds checking on virConnectListAllDomains RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllStoragePools RPC call (rhbz#1002667)
  - Add bounds checking on virStoragePoolListAllVolumes RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNetworks RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllInterfaces RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNodeDevices RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllNWFilters RPC call (rhbz#1002667)
  - Add bounds checking on virConnectListAllSecrets RPC call (rhbz#1002667)
  - Prohibit unbounded arrays in XDR protocols (rhbz#1002667)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997906)
  - virbitmaptest: Fix function header formatting (rhbz#997906)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997906)
  - virsh-domain: Fix memleak in cmdUndefine with storage (rhbz#999057)
  - virsh: Modify vshStringToArray to duplicate the elements too (rhbz#999057)
  - virsh: Don't leak list of volumes when undefining domain with storage (rhbz#999057)
  - Fix URI connect precedence (rhbz#999323)
  - tests: Add URI precedence checking (rhbz#999323)
  - Don't free NULL network in cmdNetworkUpdate (rhbz#1001094)
  - virsh: Fix debugging (rhbz#1001628)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1002669)
  - Set security label on FD for virDomainOpenGraphics (rhbz#999925)
  - virsh: Free the caps list properly if one of them is invalid (rhbz#1001957)
  - virsh: Free the formatting string when listing pool details (rhbz#1001957)
  - virsh-pool.c: Don't jump over variable declaration (rhbz#1001957)
  - virsh: Free the list from ListAll APIs even for 0 items (rhbz#1001957)
  - virsh: Free messages after logging them to a file (rhbz#1001957)
  - Reverse logic allowing partial DHCP host XML (rhbz#1001078)
  - virsh: Print cephx and iscsi usage (rhbz#1000155)
  - qemu_conf: Fix broken logic for adding passthrough iscsi lun (rhbz#1000159)
  - Report secret usage error message similarly (rhbz#1000168)
  - docs: Update the formatdomain disk examples (rhbz#1000169)
  - docs: Update formatsecrets to include more examples of each type (rhbz#1000169)
  - docs: Update iSCSI storage pool example (rhbz#1000169)
  - docs: Reformat <disk> attribute description in formatdomain (rhbz#1000169)
  - qemuBuildNicDevStr: Add mq=on for multiqueue networking (rhbz#651941)
  - migration: Do not restore labels on failed migration (rhbz#822052)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1001143)
  - docs: Discourage users to set hard_limit (rhbz#1001143)
  - docs: Clean 09adfdc62de2b up (rhbz#1001143)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1001143)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)
  - qemuDomainAttachHostPciDevice: Fall back to mem balloon if there's no hard_limit (rhbz#1001143)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-4
changelog:
  - Don't crash in qemuBuildDeviceAddressStr (rhbz#1003526)
  - Fix leaks in python bindings (rhbz#1003828)
  - Process virtlockd.conf instead of libvirtd.conf (rhbz#1003685)
  - test_virtlockd.aug.in: Use the correct file (rhbz#1003685)
  - qemu: Make domain renaming work during migration (rhbz#999352)
  - qemu: Handle huge number of queues correctly (rhbz#651941)
  - conf: Remove the actual hostdev when removing a network (rhbz#1003537)
  - conf: Don't deref NULL actual network in virDomainNetGetActualHostdev() (rhbz#1003537)
  - python: Fix a PyList usage mistake (rhbz#1002558)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004364)
  - Always specify qcow2 compat level on qemu-img command line (rhbz#997977)
  - selinux: Distinguish failure to label from request to avoid label (rhbz#924153)
  - selinux: Enhance test to cover nfs label failure (rhbz#924153)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-5
changelog:
  - Pass AM_LDFLAGS to driver modules too (rhbz#1006299)
  - virsh domjobinfo: Do not return 1 if job is NONE (rhbz#1006864)
  - Fix polkit permission names for storage pools, vols & node devices (rhbz#700443)
  - Fix naming of permission for detecting storage pools (rhbz#700443)
  - security: Provide supplemental groups even when parsing label (CVE-2013-4291) (rhbz#1006513)
  - virFileNBDDeviceAssociate: Avoid use of uninitialized variable (CVE-2013-4297)
  - Rename "struct interface_driver" to virNetcfDriverState (rhbz#983026)
  - netcf driver: Use a single netcf handle for all connections (rhbz#983026)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006722)
  - Add test for the nodemask double free crash (rhbz#1006722)
  - qemu: Fix checking of guest ABI compatibility when reverting snapshots (rhbz#1006886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-6
changelog:
  - Also store user & group ID values in virIdentity (rhbz#1006272)
  - Ensure system identity includes process start time (rhbz#1006272)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)
  - Free slicename in virSystemdCreateMachine (rhbz#1008619)
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1008340)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1008340)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1008340)
  - qemu: Avoid dangling job in qemuDomainSetBlockIoTune (rhbz#700443)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-7
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - LXC: Don't mount securityfs when user namespace enabled (rhbz#872648)
  - Move array of mounts out of lxcContainerMountBasicFS (rhbz#872648)
  - Ensure root filesystem is recursively mounted readonly (rhbz#872648)
  - qemu: Fix seamless SPICE migration (rhbz#1010861)
  - qemu: Use "ide" as device name for implicit SATA controller on Q35 (rhbz#1008903)
  - qemu: Only parse basename when determining emulator properties (rhbz#1010617)
  - qemu: Recognize -machine accel=kvm when parsing native (rhbz#1010617)
  - qemu: Don't leave shutdown inhibited on attach failure (rhbz#1010617)
  - qemu: Don't leak vm on failure (rhbz#1010617)
  - Fix typo in identity code which is pre-requisite for CVE-2013-4311 (rhbz#1006272)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-8
changelog:
  - conf: Don't crash on invalid chardev source definition of RNGs and other (rhbz#1012196)
  - rpc: Increase bound limit for virDomainGetJobStats (rhbz#1012818)
  - qemu: Free all driver data in qemuStateCleanup (rhbz#1011330)
  - qemu: Don't leak reference to virQEMUDriverConfigPtr (rhbz#1011330)
  - qemu: Eliminate redundant if clauses in qemuCollectPCIAddress (rhbz#1003983)
  - qemu: Allow some PCI devices to be attached to PCIe slots (rhbz#1003983)
  - qemu: Replace multiple strcmps with a switch on an enum (rhbz#1003983)
  - qemu: Support ich9-intel-hda audio device (rhbz#1003983)
  - qemu: Turn if into switch in qemuDomainValidateDevicePCISlotsQ35 (rhbz#1003983)
  - qemu: Prefer to put a Q35 machine's dmi-to-pci-bridge at 00:1E.0 (rhbz#1003983)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-9
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014503)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014503)
  - qemu: Check actual netdev type rather than config netdev type during init (rhbz#1012824)
  - Fix crash in libvirtd when events are registered & ACLs active (CVE-2013-4399) (rhbz#1011429)
  - Remove virConnectPtr arg from virNWFilterDefParse* (rhbz#1015108)
  - Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (rhbz#1015108)
  - Remove use of virConnectPtr from all remaining nwfilter code (rhbz#1015108)
  - Don't set netdev offline in container cleanup (rhbz#1014604)
  - Avoid reporting an error if veth device is already deleted (rhbz#1014604)
  - Avoid deleting NULL veth device name (rhbz#1014604)
  - Retry veth device creation on failure (rhbz#1014604)
  - Use 'vnet' as prefix for veth devices (rhbz#1014604)
  - Free cmd in virNetDevVethDelete (rhbz#1014604)
  - Free cmd in virNetDevVethCreate (rhbz#1014604)
  - LXC: Fix handling of RAM filesystem size units (rhbz#1015689)
  - build: Add lxc testcase to dist list (rhbz#1015689)
  - tests: Work with older dbus (rhbz#1018730)
  - virdbus: Add virDBusHasSystemBus() (rhbz#1018730)
  - virsystemd: Don't fail to start VM if DBus isn't available or compiled in (rhbz#1018730)
  - DBus: Introduce virDBusIsServiceEnabled (rhbz#1018730)
  - Change way we fake dbus method calls (rhbz#1018730)
  - Fix virsystemdtest for previous commit (rhbz#1018730)
  - LXC: Workaround machined uncleaned data with containers running systemd. (rhbz#1018730)
  - Allow use of a private dbus bus connection (rhbz#998365)
  - Add a method for closing the dbus system bus connection (rhbz#998365)
  - Make LXC controller use a private dbus connection & close it (rhbz#998365)
  - Fix flaw in detecting log format (rhbz#927072)
  - Fix exit status of lxc controller (rhbz#927072)
  - Improve error reporting with LXC controller (rhbz#927072)
  - nwfilter: Don't fail to start if DBus isn't available (rhbz#927072)
  - Don't ignore all dbus connection errors (rhbz#927072)
  - LXC: Check the existence of dir before resolving symlinks (rhbz#927072)
  - Ensure lxcContainerMain reports errors on stderr (rhbz#927072)
  - Ensure lxcContainerResolveSymlinks reports errors (rhbz#927072)
  - Improve log filtering in virLXCProcessReadLogOutputData (rhbz#927072)
  - Initialize threading & error layer in LXC controller (rhbz#1018725)
  - qemu_migration: Avoid crashing if domain dies too quickly (rhbz#1018267)
  - Convert uuid to a string before printing it (rhbz#1019023)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-10
changelog:
  - qemu_process: Make qemuProcessReadLog() more versatile and reusable (rhbz#1001738)
  - qemu: monitor: Add infrastructure to access VM logs for better err msgs (rhbz#1001738)
  - qemu: monitor: Produce better errors on monitor hangup (rhbz#1001738)
  - qemu: Wire up better early error reporting (rhbz#1001738)
  - qemu: process: Silence coverity warning when rewinding log file (rhbz#1001738)
  - qemu: hostdev: Refactor PCI passhrough handling (rhbz#1001738)
  - qemu: hostdev: Fix function spacing and header formatting (rhbz#1001738)
  - qemu: hostdev: Add checks if PCI passthrough is available in the host (rhbz#1001738)
  - qemu: Prefer VFIO for PCI device passthrough (rhbz#1001738)
  - qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (rhbz#1001738)
  - Fix max stream packet size for old clients (rhbz#950416)
  - Adjust legacy max payload size to account for header information (rhbz#950416)
  - rpc: Correct the wrong payload size checking (rhbz#950416)
  - qemu: Simplify calling qemuDomainHostdevNetConfigRestore (rhbz#1005682)
  - qemu: Move qemuDomainRemoveNetDevice to avoid forward reference (rhbz#1005682)
  - qemu: Fix removal of <interface type='hostdev'> (rhbz#1005682)
  - remote: Fix regression in event deregistration (rhbz#1020376)
  - qemu: managedsave: Add support for compressing managed save images (rhbz#1017227)
  - qemu: snapshot: Add support for compressing external snapshot memory (rhbz#1017227)
  - Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#1015215)
  - qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (rhbz#1015215)
  - qemu_conf: Introduce "migration_address" (rhbz#1015215)
  - qemu: Include listenAddress in debug prints (rhbz#1015215)
  - docs: Expand description of host-model CPU mode (rhbz#1014682)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1019237)
  - qemu: Make migration port range configurable (rhbz#1019237)
  - qemu: Fix augeas support for migration ports (rhbz#1019237)
  - Fix perms for virConnectDomainXML{To, From}Native (CVE-2013-4401)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-11
changelog:
  - Add helpers for getting env vars in a setuid environment (rhbz#1015247)
  - Only allow 'stderr' log output when running setuid (CVE-2013-4400)
  - Close all non-stdio FDs in virt-login-shell (CVE-2013-4400)
  - Don't link virt-login-shell against libvirt.so (CVE-2013-4400)
  - build: Fix linking virt-login-shell (rhbz#1015247)
  - build: Fix build of virt-login-shell on systems with older gnutls (rhbz#1015247)
  - Set a sane $PATH for virt-login-shell (rhbz#1015247)
  - spec: Fix rpm build when lxc disabled (rhbz#1015247)
  - Move virt-login-shell into libvirt-login-shell sub-RPM (rhbz#1015247)
  - Make virCommand env handling robust in setuid env (rhbz#1015247)
  - Remove all direct use of getenv (rhbz#1015247)
  - Block all use of getenv with syntax-check (rhbz#1015247)
  - Only allow the UNIX transport in remote driver when setuid (rhbz#1015247)
  - Don't allow remote driver daemon autostart when running setuid (rhbz#1015247)
  - Add stub getegid impl for platforms lacking it (rhbz#1015247)
  - Remove (nearly) all use of getuid()/getgid() (rhbz#1015247)
  - Block all use of libvirt.so in setuid programs (rhbz#1015247)
  - spec: Clean up distribution of ChangeLog (and others) (rhbz#1024393)
  - Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (rhbz#1024393)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-12
changelog:
  - virpci: Don't error on unbinded devices (rhbz#1019387)
  - network: Fix connections count in case of allocate failure (rhbz#1020135)
  - qemu: Clean up migration ports when migration cancelled (rhbz#1019237)
  - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (rhbz#1022393)
  - Allow root directory in filesystem source dir schema (rhbz#1028107)
  - Use a port from the migration range for NBD as well (rhbz#1025699)
  - qemu: Avoid double free of VM (rhbz#1018267)
  - util: Use size_t instead of unsigned int for num_virtual_functions (rhbz#1025397)
  - pci: Properly handle out-of-order SRIOV virtual functions (rhbz#1025397)
  - conf: Do better job when comparing features ABI compatibility (rhbz#1008989)
  - schema: Rename option 'hypervtristate' to 'featurestate' (rhbz#1008989)
  - conf: Mark user provided strings in error messages when parsing XML (rhbz#1008989)
  - cpu: Add support for loading and storing CPU data (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (rhbz#1008989)
  - cpu: x86: Rename struct cpuX86Data as virCPUx86Data (rhbz#1008989)
  - cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (rhbz#1008989)
  - Ensure 'arch' is always set in cpuArchNodeData (rhbz#1008989)
  - cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (rhbz#1008989)
  - cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (rhbz#1008989)
  - cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (rhbz#1008989)
  - cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (rhbz#1008989)
  - cpu: x86: Use whitespace to clarify context and use consistent labels (rhbz#1008989)
  - cpu: x86: Clean up error messages in x86VendorLoad() (rhbz#1008989)
  - cpu: Export few x86-specific APIs (rhbz#1008989)
  - cpu: x86: Parse the CPU feature map only once (rhbz#1008989)
  - cpu_x86: Refactor storage of CPUID data to add support for KVM features (rhbz#1008989)
  - qemu: Add monitor APIs to fetch CPUID data from QEMU (rhbz#1008989)
  - cpu: x86: Add internal CPUID features support and KVM feature bits (rhbz#1008989)
  - conf: Refactor storing and usage of feature flags (rhbz#1008989)
  - qemu: Add support for paravirtual spinlocks in the guest (rhbz#1008989)
  - qemu: process: Validate specific CPUID flags of a guest (rhbz#1008989)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-13
changelog:
  - virsh-domain: Mark --live and --config mutually exclusive in vcpucount (rhbz#1024245)
  - virSecurityLabelDefParseXML: Don't parse label on model='none' (rhbz#1028962)
  - qemuMonitorIO: Don't use @mon after it's unrefed (rhbz#1018267)
  - qemu: Allow hotplug of multiple SCSI devices (rhbz#1031062)
  - qemu: Call qemuSetupHostdevCGroup later during hotplug (rhbz#1025108)
  - virscsi: Hostdev SCSI AdapterId retrieval fix (rhbz#1031079)
  - storage: Returns earlier if source adapter of the scsi pool is a HBA (rhbz#1027680)
  - spec: Restrict virt-login-shell usage (rhbz#1033614)
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - Don't start a nested job in qemuMigrationPrepareAny (rhbz#1018267)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-14
changelog:
  - nodedev: Resolve Relax-NG validity error (rhbz#1035792)
  - test-lib: Make case skipping possible (rhbz#1034380)
  - tests: Don't test user config file if ran as root (rhbz#1034380)
  - Improve cgroups docs to cover systemd integration (rhbz#1004340)
  - Fix busy wait loop in LXC container I/O handling (rhbz#1032705)
  - tests: Guarantee abs_srcdir in all C tests (rhbz#1035403)
  - Introduce standard methods for sorting strings with qsort (rhbz#1035403)
  - Add virFileIsMountPoint function (rhbz#1035403)
  - Pull lxcContainerGetSubtree out into shared virfile module (rhbz#1035403)
  - Fix bug in identifying sub-mounts (rhbz#1035403)
  - LXC: Ensure security context is set when mounting images (rhbz#923903)
  - Ensure to zero out the virDomainBlockJobInfo arg (rhbz#1028846)
  - qemu: Default to vfio for nodedev-detach (rhbz#1035188)
  - daemon: Run virStateCleanup conditionally (rhbz#1033061)
  - qemu: Add "-boot strict" to commandline whenever possible (rhbz#1037593)
  - tests: Add forgotten boot-strict test files (rhbz#1037593)
  - conf: Fix XML formatting of RNG device info (rhbz#1035118)
  - qemu: Improve error when setting invalid count of vcpus via agent (rhbz#1035108)
  - Add qxl ram size to ABI stability check (rhbz#1035123)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-15
changelog:
  - spec: Don't save/restore running VMs on libvirt-client update (rhbz#1033626)
  - qemu: hotplug: Only label hostdev after checking device conflicts (rhbz#1025108)
  - qemu: hotplug: Fix double free on USB collision (rhbz#1025108)
  - qemu: hotplug: Fix adding USB devices to the driver list (rhbz#1025108)
  - docs: Enhance memoryBacking/locked documentation (rhbz#1035954)
  - util: Fix two virCompareLimitUlong bugs (rhbz#1024272)
  - cgroups: Redefine what "unlimited" means wrt memory limits (rhbz#1024272)
  - qemu: Report VIR_DOMAIN_MEMORY_PARAM_UNLIMITED properly (rhbz#1024272)
  - qemu: Fix minor inconsistency in error message (rhbz#1024272)
  - conf: Don't format memtune with unlimited values (rhbz#1024272)
  - qemu_process: Read errors from child (rhbz#1035955)
  - network: Properly update iptables rules during net-update (rhbz#1035336)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1039991)
  - screenshot: Implement multiple screen support (rhbz#1026966)
  - Switch to private redhat namespace for QMP I/O error reason (rhbz#1026966)
  - Support virtio disk hotplug in JSON mode (rhbz#1026966)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-16
changelog:
  - qemu: Check for reboot-timeout on monitor (rhbz#1042690)
  - virsh: Fix return value error of cpu-stats (rhbz#1043388)
  - tools: Fix virsh connect man page (rhbz#1043260)
  - conf: Introduce generic ISA address (rhbz#996520)
  - conf: Add support for panic device (rhbz#996520)
  - qemu: Add support for -device pvpanic (rhbz#996520)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1043864)
  - virsh: man: Mention that volumes need to be in storage pool for undefine (rhbz#1044445)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-18
changelog:
  - qemu: Ask for -enable-fips when FIPS is required (rhbz#1035474)
  - qemu: Properly set MaxMemLock when hotplugging with VFIO (rhbz#1035490)
  - qemu: Avoid duplicate security label restore on hostdev attach failure (rhbz#1035490)
  - qemu: Re-add hostdev interfaces to hostdev array on libvirtd restart (rhbz#1045002)
  - domain: Don't try to interpret <driver> as virtio config for hostdev interfaces (rhbz#1046337)
  - virBitmapParse: Fix behavior in case of error and fix up callers (rhbz#1047234)
  - qemu: Fix live pinning to memory node on NUMA system (rhbz#1047234)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1047234)
  - qemu: Range check numa memory placement mode (rhbz#1047234)
  - virkeycode: Allow ANSI_A (rhbz#1044806)
  - Fix argument order of qemuMigrationPerformJob(). (rhbz#1049338)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1048643)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - PanicCheckABIStability: Need to check for existence (rhbz#996520)
  - virsh: Improve usability of '--print-xml' flag for attach-disk command (rhbz#1049529)
  - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1049529)
  - virsh: Use inactive definition when removing disk from config (rhbz#1049529)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-19
changelog:
  - CVE-2013-6436: Fix crash in lxcDomainGetMemoryParameters (rhbz#1049137)
  - Fix crash in lxcDomainSetMemoryParameters (rhbz#1052062)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)
  - qemu: Change the default unix monitor timeout (rhbz#892273)
  - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (rhbz#996543)
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1054785)
  - virt-login-shell: Fix regressions in behavior (rhbz#1015247)
  - pci: Make reattach work for unbound devices (rhbz#1046919)
  - pci: Fix failure paths in detach (rhbz#1046919)
  - qemu: Don't detach devices if passthrough doesn't work (rhbz#1046919)
  - Fix migration with QEMU 1.6 (rhbz#1053405)
  - build: More workarounds for if_bridge.h (rhbz#1042937)
  - build: Fix build with latest rawhide kernel headers (rhbz#1042937)
  - aarch64: Disable -fstack-protector. (rhbz#1042937)
  - AArch64: Parse cputopology from /proc/cpuinfo. (rhbz#1042937)
  - virDomainEventCallbackListFree: Don't leak @list->callbacks (rhbz#1047964)
  - Fix memory leak in virObjectEventCallbackListRemoveID() (rhbz#1047964)
  - event: Filter global events by domain:getattr ACL (CVE-2014-0028)
  - Doc: Improve the document for nodesuspend (rhbz#1045089)
  - Doc: Add "note" for node-memory-tune (rhbz#1045089)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-21
changelog:
  - util: Correct the NUMA node range checking (rhbz#1045958)
  - storage: Add document for possible problem on volume detection (rhbz#726797)
  - storage: Fix autostart of pool with "fc_host" type adapter (rhbz#726797)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-22
changelog:
  - Add a read/write lock implementation (rhbz#1034807)
  - Push nwfilter update locking up to top level (rhbz#1034807)
  - utils: Introduce functions for kernel module manipulation (rhbz#1045124)
  - virCommand: Introduce virCommandSetDryRun (rhbz#1045124)
  - tests: Add test for new virkmod functions (rhbz#1045124)
  - Honor blacklist for modprobe command (rhbz#1045124)
  - qemu: Be sure we're using the updated value of backend during hotplug (rhbz#1056360)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#1061099)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1061099)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1061099)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-23
changelog:
  - Generate a valid imagelabel even for type 'none' (rhbz#1061657)
  - qemu: keep pre-migration domain state after failed migration (rhbz#1057407)
  - schema: Fix guest timer specification schema according to the docs (rhbz#1056205)
  - conf: Enforce supported options for certain timers (rhbz#1056205)
  - qemu: hyperv: Add support for timer enlightenments (rhbz#1056205)
  - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (rhbz#1062665)
  - util: Add "shareable" field for virSCSIDevice struct (rhbz#957292)
  - util: Fix the indention (rhbz#957292)
  - qemu: Don't fail if the SCSI host device is shareable between domains (rhbz#957292)
  - util: Add one argument for several scsi utils (rhbz#957292)
  - tests: Add tests for scsi utils (rhbz#957292)
  - qemu: Fix the error message for scsi host device's shareable checking (rhbz#957292)
  - util: Accept test data path for scsi device's sg_path (rhbz#957292)
  - tests: Modify the scsi util tests (rhbz#957292)
  - event: move event filtering to daemon (regression fix) (rhbz#1047964)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-24
changelog:
  - Block info query: Add check for transient domain (rhbz#1065531)
  - Fix minor typos in messages and docs (rhbz#1045643)
  - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (rhbz#1045643)
  - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (rhbz#1045643)
  - maint: fix comment typos (rhbz#1045643)
  - storage: avoid short reads while chasing backing chain (rhbz#1045643)
  - Don't block use of USB with containers (rhbz#1045643)
  - Fix path used for USB device attach with LXC (rhbz#1045643)
  - Record hotplugged USB device in LXC live guest config (rhbz#1045643)
  - Fix reset of cgroup when detaching USB device from LXC guests (rhbz#1045643)
  - Disks are always block devices, never character devices (rhbz#1045643)
  - Move check for cgroup devices ACL upfront in LXC hotplug (rhbz#1045643)
  - Add virFileMakeParentPath helper function (rhbz#1045643)
  - Add helper for running code in separate namespaces (rhbz#1045643)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (CVE-2013-6456)
  - Ignore additional fields in iscsiadm output (rhbz#1067173)
  - qemuBuildNicDevStr: Set vectors= on Multiqueue (rhbz#1066209)
  - Don't depend on syslog.service (rhbz#1032695)
  - libvirt-guests: Run only after libvirtd (rhbz#1032695)
  - virSystemdCreateMachine: Set dependencies for slices (rhbz#1032695)
  - libvirt-guests: Wait for libvirtd to initialize (rhbz#1032695)
  - virNetServerRun: Notify systemd that we're accepting clients (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-25
changelog:
  - maint: fix comma style issues: conf (rhbz#1032370)
  - Allow <source> for type=block to have no dev (rhbz#1032370)
  - Allow LUN type disks to have no source (rhbz#1032370)
  - virsh-volume: Unify strigification of volume type (rhbz#1032370)
  - conf: Refactor virDomainDiskSourcePoolDefParse (rhbz#1032370)
  - conf: Split out code to parse the source of a disk definition (rhbz#1032370)
  - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (rhbz#1032370)
  - conf: Refactor virDomainDiskSourceDefParse (rhbz#1032370)
  - storage: fix RNG validation of gluster via netfs (rhbz#1032370)
  - maint: fix comment typos. (rhbz#1032370)
  - storage: use valid XML for awkward volume names (rhbz#1032370)
  - build: Don't fail on '&lt; ' or '&gt; ' with old xmllint (rhbz#1032370)
  - storage: allow interleave in volume XML (rhbz#1032370)
  - storage: expose volume meta-type in XML (rhbz#1032370)
  - storage: initial support for linking with libgfapi (rhbz#1032370)
  - storage: document existing pools (rhbz#1032370)
  - storage: document gluster pool (rhbz#1032370)
  - storage: implement rudimentary glusterfs pool refresh (rhbz#1032370)
  - storage: add network-dir as new storage volume type (rhbz#1032370)
  - storage: improve directory support in gluster pool (rhbz#1032370)
  - storage: improve allocation stats reported on gluster files (rhbz#1032370)
  - storage: improve handling of symlinks in gluster (rhbz#1032370)
  - storage: probe qcow2 volumes in gluster pool (rhbz#1032370)
  - storage: fix typo in previous patch (rhbz#1032370)
  - conf: Export virStorageVolType enum helper functions (rhbz#1032370)
  - test: Implement fake storage pool driver in qemuxml2argv test (rhbz#1032370)
  - storage: reduce number of stat calls (rhbz#1032370)
  - storage: use simpler 'char *' (rhbz#1032370)
  - storage: refactor backing chain division of labor (rhbz#1032370)
  - storage: always probe type with buffer (rhbz#1032370)
  - storage: don't read storage volumes in nonblock mode (rhbz#1032370)
  - storage: skip selinux cleanup when fd not available (rhbz#1032370)
  - storage: use correct type for array count (rhbz#1032370)
  - storage: allow interleave in pool XML (rhbz#1032370)
  - qemuxml2argv: Add test to verify correct usage of disk type="volume" (rhbz#1032370)
  - qemuxml2argv: Add test for disk type='volume' with iSCSI pools (rhbz#1032370)
  - tests: Fix comment for fake storage pool driver (rhbz#1032370)
  - conf: Support disk source formatting without needing a virDomainDiskDefPtr (rhbz#1032370)
  - conf: Clean up virDomainDiskSourceDefFormatInternal (rhbz#1032370)
  - conf: Split out seclabel formating code for disk source (rhbz#1032370)
  - conf: Export disk source formatter and parser (rhbz#1032370)
  - snapshot: conf: Use common parsing and formatting functions for source (rhbz#1032370)
  - snapshot: conf: Fix NULL dereference when <driver> element is empty (rhbz#1032370)
  - conf: Add functions to copy and free network disk source definitions (rhbz#1032370)
  - qemu: snapshot: Detect internal snapshots also for sheepdog and RBD (rhbz#1032370)
  - conf: Add helper do clear disk source authentication struct (rhbz#1032370)
  - qemu: snapshot: Touch up error message (rhbz#1032370)
  - qemu: snapshot: Add functions similar to disk source pool translation (rhbz#1032370)
  - qemu: Refactor qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: Split out formatting of network disk source URI (rhbz#1032370)
  - qemu: Simplify call pattern of qemuBuildDriveURIString (rhbz#1032370)
  - qemu: Use qemuBuildNetworkDriveURI to handle http/ftp and friends (rhbz#1032370)
  - qemu: Migrate sheepdog source generation into common function (rhbz#1032370)
  - qemu: Split out NBD command generation (rhbz#1032370)
  - qemu: Unify formatting of RBD sources (rhbz#1032370)
  - qemu: Refactor disk source string formatting (rhbz#1032370)
  - qemu: Clear old translated pool source (rhbz#1032370)
  - qemu: snapshots: Declare supported and unsupported snapshot configs (rhbz#1032370)
  - domainsnapshotxml2xmltest: Clean up labels and use bool instead of int (rhbz#1032370)
  - domainsnapshotxml2xmltest: Allow for better testing of snapshots (rhbz#1032370)
  - domainsnapshotxml2xml: Move files with conflicting names (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add existing files as new tests (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add test case for empty driver element (rhbz#1032370)
  - qemu: Fix indentation in qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: snapshot: Fix incorrect disk type for auto-generated disks (rhbz#1032370)
  - storage: fix omitted slash in gluster volume URI (rhbz#1032370)
  - virsh: domain: Fix undefine with storage of 'volume' disks (rhbz#1032370)
  - snapshot: schema: Split out snapshot disk driver definition (rhbz#1032370)
  - storage: Add gluster pool filter and fix virsh pool listing (rhbz#1032370)
  - storage: fix bogus target in gluster volume xml (rhbz#1032370)
  - storage: Improve error message when a storage backend is missing (rhbz#1032370)
  - storage: Break long lines and clean up spaces in storage backend header (rhbz#1032370)
  - storage: Support deletion of volumes on gluster pools (rhbz#1032370)
  - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (rhbz#1032370)
  - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (rhbz#1034993)
  - qemu: Avoid crash in qemuDiskGetActualType (rhbz#1032370)
  - snapshot: Add support for specifying snapshot disk backing type (rhbz#1032370)
  - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (rhbz#1032370)
  - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (rhbz#1032370)
  - storage: Add file storage APIs in the default storage driver (rhbz#1032370)
  - storage: add file functions for local and block files (rhbz#1032370)
  - storage: Add storage file backends for gluster (rhbz#1032370)
  - qemu: Switch snapshot deletion to the new API functions (rhbz#1032370)
  - qemu: snapshot: Use new APIs to detect presence of existing storage files (rhbz#1032370)
  - qemu: snapshot: Add support for external active snapshots on gluster (rhbz#1032370)
  - storage: Fix build with older compilers afeter gluster snapshot series (rhbz#1032370)
  - storage: gluster: Don't leak private data when storage file init fails (rhbz#1032370)
  - spec: Use correct versions of libgfapi in RHEL builds (rhbz#1032370)
  - spec: Fix braces around macros (rhbz#1032370)
  - build: use --with-systemd-daemon as configure option (rhbz#1032695)
  - spec: require device-mapper-devel for storage-disk (rhbz#1032695)
  - spec: make systemd_daemon usage configurable (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-26
changelog:
  - virNetDevVethCreate: Serialize callers (rhbz#1014604)
  - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (rhbz#1071888)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-27
changelog:
  - spec: Let translations be properly updated (rhbz#1030368)
  - Update translation to supported languages (rhbz#1030368)
  - Add a mutex to serialize updates to firewall (rhbz#1074003)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-28
changelog:
  - qemu: Forbid "sgio" support for SCSI generic host device (rhbz#957292)
  - qemu: monitor: Fix invalid parentheses (rhbz#1075973)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1076503)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29
changelog:
  - nwfilter: Increase buffer size for libpcap (rhbz#1078347)
  - nwfilter: Display pcap's error message when pcap setup fails (rhbz#1078347)
  - nwfilter: Fix double free of pointer (rhbz#1071181)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.7-1
changelog:
  - Rebased to libvirt-1.2.7 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#823535, rhbz#872628, rhbz#874418, rhbz#878394, rhbz#880483
      rhbz#921094, rhbz#963817, rhbz#964177, rhbz#967493, rhbz#967494
      rhbz#972964, rhbz#983350, rhbz#985782, rhbz#985980, rhbz#990319
      rhbz#990418, rhbz#991290, rhbz#992980, rhbz#994731, rhbz#995377
      rhbz#997627, rhbz#997802, rhbz#1006700, rhbz#1007698, rhbz#1007759
      rhbz#1010885, rhbz#1022874, rhbz#1023366, rhbz#1025407, rhbz#1027076
      rhbz#1029266, rhbz#1029732, rhbz#1032363, rhbz#1033020, rhbz#1033398
      rhbz#1033704, rhbz#1035128, rhbz#1046192, rhbz#1049038, rhbz#1052114
      rhbz#1056902, rhbz#1062142, rhbz#1063837, rhbz#1066280, rhbz#1066894
      rhbz#1067338, rhbz#1069552, rhbz#1069784, rhbz#1070680, rhbz#1072141
      rhbz#1072677, rhbz#1073368, rhbz#1073506, rhbz#1074086, rhbz#1075290
      rhbz#1075299, rhbz#1076957, rhbz#1076959, rhbz#1076960, rhbz#1076962
      rhbz#1077009, rhbz#1077572, rhbz#1078590, rhbz#1079162, rhbz#1079173
      rhbz#1080859, rhbz#1081881, rhbz#1081932, rhbz#1082124, rhbz#1083345
      rhbz#1084360, rhbz#1085706, rhbz#1085769, rhbz#1086121, rhbz#1086331
      rhbz#1086704, rhbz#1087104, rhbz#1087671, rhbz#1088293, rhbz#1088667
      rhbz#1088787, rhbz#1088864, rhbz#1089179, rhbz#1089378, rhbz#1091132
      rhbz#1091866, rhbz#1092038, rhbz#1092253, rhbz#1093127, rhbz#1095035
      rhbz#1097028, rhbz#1097503, rhbz#1097677, rhbz#1097968, rhbz#1098659
      rhbz#1099978, rhbz#1100086, rhbz#1100769, rhbz#1101059, rhbz#1101510
      rhbz#1101987, rhbz#1101999, rhbz#1102426, rhbz#1102457, rhbz#1102611
      rhbz#1104992, rhbz#1104993, rhbz#1105939, rhbz#1108593, rhbz#1110198
      rhbz#1110212, rhbz#1110673, rhbz#1111044, rhbz#1112939, rhbz#1113332
      rhbz#1113668, rhbz#1113751, rhbz#1113868, rhbz#1118710, rhbz#1119206
      rhbz#1119387, rhbz#1119592, rhbz#1120474, rhbz#1122255, rhbz#1122973
  - spec: Enable qemu driver for RHEL-7 on ppc64 (rhbz#1120474)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-1
changelog:
  - Rebased to libvirt-1.2.8 (rhbz#1035158)
  - The rebase also fixes the following bugs:
      rhbz#927369, rhbz#957293, rhbz#999926, rhbz#1021703, rhbz#1043735
      rhbz#1047818, rhbz#1062142, rhbz#1064770, rhbz#1072653, rhbz#1078126
      rhbz#1095636, rhbz#1103245, rhbz#1119215, rhbz#1121837, rhbz#1121955
      rhbz#1122455, rhbz#1126329, rhbz#1126721, rhbz#1126909, rhbz#1128097
      rhbz#1128751, rhbz#1129207, rhbz#1129372, rhbz#1129998, rhbz#1130089
      rhbz#1130379, rhbz#1131306, rhbz#1131445, rhbz#1131788, rhbz#1131811
      rhbz#1131819, rhbz#1131876, rhbz#1132301, rhbz#1132305, rhbz#1132347


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-2
changelog:
  - remote: Fix memory leak on error path when deserializing bulk stats (rhbz#1136350)
  - spec: Fix preun script for daemon (rhbz#1136736)
  - security: fix DH key generation when FIPS mode is on (rhbz#1128497)
  - tests: force FIPS testing mode with new enough GNU TLS versions (rhbz#1128497)
  - Don't include non-migratable features in host-model (rhbz#1138221)
  - qemu: Rename DEFAULT_JOB_MASK to QEMU_DEFAULT_JOB_MASK (rhbz#1134154)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1134154)
  - qemu: snapshot: Acquire job earlier on snapshot revert/delete (rhbz#1134154)
  - qemu: snapshot: Fix snapshot function header formatting and spacing (rhbz#1134154)
  - qemu: snapshot: Simplify error paths (rhbz#1134154)
  - qemu: Propagate QEMU errors during incoming migrations (rhbz#1090093)
  - Refactor job statistics (rhbz#1063724)
  - qemu: Avoid incrementing jobs_queued if virTimeMillisNow fails (rhbz#1063724)
  - Add support for fetching statistics of completed jobs (rhbz#1063724)
  - qemu: Silence coverity on optional migration stats (rhbz#1063724)
  - virsh: Add support for completed job stats (rhbz#1063724)
  - qemu: Transfer migration statistics to destination (rhbz#1063724)
  - qemu: Recompute downtime and total time when migration completes (rhbz#1063724)
  - qemu: Transfer recomputed stats back to source (rhbz#1063724)
  - conf: Extend <loader/> and introduce <nvram/> (rhbz#1112257)
  - qemu: Implement extended loader and nvram (rhbz#1112257)
  - qemu: Automatically create NVRAM store (rhbz#1112257)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-3
changelog:
  - virsh: Move --completed from resume to domjobinfo (rhbz#1063724)
  - qemu_driver: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - virfile: Resolve Coverity DEADCODE (rhbz#1141209)
  - lxc: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - qemu: Resolve Coverity FORWARD_NULL (rhbz#1141209)
  - xen: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - qemu: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - virsh: Resolve Coverity NEGATIVE_RETURNS (rhbz#1141209)
  - daemon: Resolve Coverity RESOURCE_LEAK (rhbz#1141209)
  - domain_conf: Resolve Coverity COPY_PASTE_ERROR (rhbz#1141209)
  - storage_conf: Fix libvirtd crash when defining scsi storage pool (rhbz#1141943)
  - qemu: time: Report errors if agent command fails (rhbz#1142294)
  - util: storage: Copy driver type when initializing chain element (rhbz#1140984)
  - docs, conf, schema: add support for shared memory mapping (rhbz#1133144)
  - qemu: add support for shared memory mapping (rhbz#1133144)
  - rpc: reformat the flow to make a bit more sense (rhbz#927369)
  - remove redundant pidfile path constructions (rhbz#927369)
  - util: fix potential leak in error codepath (rhbz#927369)
  - util: get rid of unnecessary umask() call (rhbz#927369)
  - rpc: make daemon spawning a bit more intelligent (rhbz#927369)
  - conf: add backend element to interfaces (rhbz#1139362)
  - Wire up the interface backend options (rhbz#1139362)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - qemu: fix crash with shared disks (rhbz#1142722)
  - nvram: Fix permissions (rhbz#1026772)
  - libvirt.spec: Fix permission even for libvirt-driver-qemu (rhbz#1026772)
  - virDomainUndefineFlags: Allow NVRAM unlinking (rhbz#1026772)
  - formatdomain: Update <loader/> example to match the rest (rhbz#1026772)
  - domaincaps: Expose UEFI capability (rhbz#1026772)
  - qemu_capabilities: Change virQEMUCapsFillDomainCaps signature (rhbz#1026772)
  - domaincaps: Expose UEFI binary path, if it exists (rhbz#1026772)
  - domaincapstest: Run cleanly on systems missing OVMF firmware (rhbz#1026772)
  - conf: Disallow nonexistent NUMA nodes for hugepages (rhbz#1135396)
  - qemu: Honor hugepages for UMA domains (rhbz#1135396)
  - RHEL: Fix maxvcpus output (rhbz#1092363)
  - virsh: Add iothread to 'attach-disk' (rhbz#1101574)
  - qemu: Issue query-iothreads and to get list of active IOThreads (rhbz#1101574)
  - vircgroup: Introduce virCgroupNewIOThread (rhbz#1101574)
  - qemu_domain: Add niothreadpids and iothreadpids (rhbz#1101574)
  - qemu_cgroup: Introduce cgroup functions for IOThreads (rhbz#1101574)
  - qemu: Allow pinning specific IOThreads to a CPU (rhbz#1101574)
  - domain_conf: Add iothreadpin to cputune (rhbz#1101574)
  - vircgroup: Fix broken builds without cgroups (rhbz#1101574)
  - cputune: allow interleaved xml (rhbz#1101574)
  - qemu: Fix iothreads issue (rhbz#1101574)
  - qemu_cgroup: Adjust spacing around incrementor (rhbz#1101574)
  - qemu: Fix call in qemuDomainSetNumaParamsLive for virCgroupNewIOThread (rhbz#1101574)
  - qemu: Need to check for capability before query (rhbz#1101574)
  - qemu: Don't fail startup/attach for IOThreads if no JSON (rhbz#1101574)
  - Fixes for domains with no iothreads (rhbz#1101574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-4
changelog:
  - Fix libvirtd crash when removing metadata (rhbz#1143955)
  - Fix leak in x86UpdateHostModel (rhbz#1144303)
  - Move the FIPS detection from capabilities (rhbz#1135431)
  - qemu: raise an error when trying to use readonly sata disks (rhbz#1112939)
  - virsh-host: fix pagesize unit of freepages (rhbz#1145048)
  - nodeinfo: report error when given node is out of range (rhbz#1145050)
  - Fix typo of virNodeGetFreePages comment (rhbz#1145050)
  - nodeinfo: Prefer MIN in nodeGetFreePages (rhbz#1145050)
  - Fix bug with loading bridge name for active domain during libvirtd start (rhbz#1140085)
  - qemu: save image: Split out user provided XML checker (rhbz#1142693)
  - qemu: save image: Add possibility to return XML stored in the image (rhbz#1142693)
  - qemu: save image: Split out new definition check/update (rhbz#1142693)
  - qemu: save image: Split out checks done only when editing the save img (rhbz#1142693)
  - qemu: hook: Provide hook when restoring a domain save image (rhbz#1142693)
  - qemu: Expose additional migration statistics (rhbz#1013055)
  - qemu: Fix old tcp:host URIs more cleanly (rhbz#1013055)
  - qemu: Prepare support for arbitrary migration protocol (rhbz#1013055)
  - qemu: Add RDMA migration capabilities (rhbz#1013055)
  - qemu: RDMA migration support (rhbz#1013055)
  - qemu: Memory pre-pinning support for RDMA migration (rhbz#1013055)
  - qemu: Fix memory leak in RDMA migration code (rhbz#1013055)
  - schemas: finish virTristate{Bool, Switch} transition (rhbz#1139364)
  - conf: split out virtio net driver formatting (rhbz#1139364)
  - conf: remove redundant local variable (rhbz#1139364)
  - conf: add options for disabling segment offloading (rhbz#1139364)
  - qemu: wire up virtio-net segment offloading options (rhbz#1139364)
  - spec: Enable qemu driver for RHEL-7 on aarch64 (rhbz#1142448)
  - blkdeviotune: fix bug with saving values into live XML (rhbz#1146511)
  - security: Fix labelling host devices (rhbz#1146550)
  - qemu: Add missing goto on rawio (rhbz#1103739)
  - hostdev: Add "rawio" attribute to _virDomainHostdevSubsysSCSI (rhbz#1103739)
  - qemu: Process the hostdev "rawio" setting (rhbz#1103739)
  - util: Add function to check if a virStorageSource is "empty" (rhbz#1138231)
  - util: storage: Allow metadata crawler to report useful errors (rhbz#1138231)
  - qemu: Sanitize argument names and empty disk check in qemuDomainDetermineDiskChain (rhbz#1138231)
  - qemu: Report better errors from broken backing chains (rhbz#1138231)
  - storage: Improve error message when traversing backing chains (rhbz#1138231)
  - qemu: Always re-detect backing chain (rhbz#1144922)
  - event: introduce new event for tunable values (rhbz#1115898)
  - tunable_event: extend debug message and tweak limit for remote message (rhbz#1115898)
  - add an example how to use tunable event (rhbz#1115898)
  - Fix MinGW build (rhbz#1115898)
  - event_example: cleanup example code for tunable event (rhbz#1115898)
  - cputune_event: queue the event for cputune updates (rhbz#1115898)
  - blkdeviotune: trigger tunable event for blkdeviotune updates (rhbz#1115898)
  - Rename tunable event constants (rhbz#1115898)
  - Fix typo s/EMULATORIN/EMULATORPIN/ (rhbz#1115898)
  - Check for NULL in qemu monitor event filter (rhbz#1144920)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-5
changelog:
  - qemuPrepareNVRAM: Save domain after NVRAM path generation (rhbz#1026772)
  - Fix crash cpu_shares change event crash on domain startup (rhbz#1147494)
  - Don't verify CPU features with host-passthrough (rhbz#1147584)
  - Also filter out non-migratable features out of host-passthrough (rhbz#1147584)
  - selinux: Avoid label reservations for type = none (rhbz#1138487)
  - qemu: bulk stats: extend internal collection API (rhbz#1113116)
  - qemu: bulk stats: implement CPU stats group (rhbz#1113116)
  - qemu: bulk stats: implement balloon group (rhbz#1113116)
  - qemu: bulk stats: implement VCPU group (rhbz#1113116)
  - qemu: bulk stats: implement interface group (rhbz#1113116)
  - qemu: bulk stats: implement block group (rhbz#1113116)
  - virsh: add options to query bulk stats group (rhbz#1113116)
  - lib: De-duplicate stats group documentation for all stats functions (rhbz#1113116)
  - lib: Document that virConnectGetAllDomainStats may omit some stats fields (rhbz#1113116)
  - man: virsh: Add docs for supported stats groups (rhbz#1113116)
  - qemu: monitor: return block stats data as a hash to avoid disk mixup (rhbz#1113116)
  - qemu: monitor: Avoid shadowing variable "devname" on FreeBSD (rhbz#1113116)
  - qemu: monitor: Add helper function to fill physical/virtual image size (rhbz#1113116)
  - qemu: bulk stats: add block allocation information (rhbz#1113116)
  - qemu: json: Fix missing break in error reporting function (rhbz#1113116)
  - qemu: monitor: Avoid shadowing variable "devname" on FreeBSD. Again. (rhbz#1113116)
  - docs, conf, schema: add support for shmem device (rhbz#1126991)
  - qemu: add capability probing for ivshmem device (rhbz#1126991)
  - qemu: Build command line for ivshmem device (rhbz#1126991)
  - minor shmem clean-ups (rhbz#1126991)
  - virSecuritySELinuxSetTapFDLabel: Temporarily revert to old behavior (rhbz#1095636)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - qemu: support relative backing for RHEL 7.0.z qemu (rhbz#1150322)
  - qemu: Fix hot unplug of SCSI_HOST device (rhbz#1141732)
  - qemu: Remove need for virConnectPtr in hotunplug detach host, net (rhbz#1141732)


