# changelog

author: Neal Gompa <ngompa13@gmail.com> - 2.41-1
changelog:
  - Release 2.41 to Fedora (RH#1722957)
  - Add proposed patches to gracefully degrade on cgroups v2 (RH#1438079)
  - Add support for EL8


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.42
   - tests: disable {contacts,calendar}-service tests on debian-sid
   - tests/main/snap-run: disable strace test cases on Arch
   - cmd/system-shutdown: include correct prototype for die
   - snap/naming: add test for hook name connect-plug-i2c
   - cmd/snap-confine: allow digits in hook names
   - gadget: do not fail the update when old gadget snap is missing
     bare content
   - tests: disable {contacts,calendar}-service tests on Arch Linux
   - tests: move "centos-7" to unstable systems
   - interfaces/docker-support,kubernetes-support: misc updates for
     strict k8s
   - packaging: remove obsolete usr.lib.snapd.snap-confine in
     postinst
   - tests: add test that ensures our snapfuse binary actually works
   - packaging: use snapfuse_ll to speed up snapfuse performance
   - usersession/userd: make sure to export DBus interfaces before
     requesting a name
   - data/selinux: allow snapd to issue sigkill to journalctl
   - store: download propagates options to delta download
   - wrappers: allow snaps to install icon theme icons
   - debug: state-inspect debugging utility
   - sandbox/cgroup: introduce cgroup wrappers package
   - snap-confine: fix return value checks for udev functions
   - cmd/model: output tweaks, add'l tests
   - wrappers/services: add ServicesEnableState + unit tests
   - tests: fix newline and wrong test name pointed out in previous PRs
   - tests: extend mount-ns test to handle mimics
   - run-checks, tests/main/go: allow gofmt checks to be skipped on
     19.10
   - tests/main/interfaces-{calendar,contacts}-service: disable on
     19.10
   - tests: part3 making tests work on ubuntu-core-18
   - tests: fix interfaces-timeserver-control on 19.10
   - overlord/snapstate: config revision code cleanup and extra tests
   - devicestate: allow remodel to different kernels
   - overlord,daemon: adjust startup timeout via EXTEND_TIMEOUT_USEC
     using an estimate
   - tests/main/many: increase kill-timeout to 5m
   - interfaces/kubernetes-support: allow systemd-run to ptrace read
     unconfined
   - snapstate: auto transition on experimental.snapd-snap=true
   - tests: retry checking until the written file on desktop-portal-
     filechooser
   - tests: unit test for a refresh failing on configure hook
   - tests: remove mount_id and parent_id from mount-ns test data
   - tests: move classic-ubuntu-core-transition* to nightly
   - tests/mountinfo-tool: proper formatting of opt_fields
   - overlord/configstate: special-case "null" in transaction Changes()
   - snap-confine: fallback gracefully on a cgroup v2 only system
   - tests: debian sid now ships new seccomp, adjust tests
   - tests: explicitly restore after using LXD
   - snapstate: make progress reporting less granular
   - bootloader: little kernel support
   - fixme: rename ubuntu*architectures to dpkg*architectures
   - tests: run dbus-launch inside a systemd unit
   - channel: introduce Resolve and ResolveLocked
   - tests: run failing tests on ubuntu eoan due to is now set as
     unstable
   - systemd: detach rather than unmount .mount units
   - cmd/snap-confine: add unit tests for sc_invocation, cleanup memory
     leaks in tests
   - boot,dirs,image: introduce boot.MakeBootable, use it in image
     instead of ad hoc code
   - cmd/snap-update-ns: clarify sharing comment
   - tests/overlord/snapstate: refactor for cleaner test failures
   - cmd/snap-update-ns: don't propagate detaching changes
   - interfaces: allow reading mutter Xauthority file
   - cmd/snap-confine: fix /snap duplication in legacy mode
   - tests: fix mountinfo-tool filtering when used with rewriting
   - seed,image,o/devicestate: extract seed loading to seed/seed16.go
   - many: pass the rootdir and options to bootloader.Find
   - tests: part5 making tests work on ubuntu-core-18
   - cmd/snap-confine: keep track of snap instance name and the snap
     name
   - cmd: unify die() across C programs
   - tests: add functions to make an abstraction for the snaps
   - packaging/fedora, tests/lib/prepare-restore: helper tool for
     packing sources for RPM
   - cmd/snap: improve help and error msg for snapshot commands
   - hookstate/ctlcmd: fix snapctl set help message
   - cmd/snap: don't append / to snap name just because a dir exists
   - tests: support fastly-global.cdn.snapcraft.io url on proxy-no-core
     test
   - tests: add --quiet switch to retry-tool
   - tests: add unstable stage for travis execution
   - tests: disable interfaces-timeserver-control on 19.10
   - tests: don't guess in is_classic_confinement_supported
   - boot, etc: simplify BootParticipant (etc) usage
   - tests: verify retry-tool not retrying missing commands
   - tests: rewrite "retry" command as retry-tool
   - tests: move debug section after restore
   - cmd/libsnap-confine-private, cmd/s-c: use constants for
     snap/instance name lengths
   - tests: measure behavior of the device cgroup
   - boot, bootloader, o/devicestate: boot env manip goes in boot
   - tests: enabling ubuntu 19.10-64 on spread.yaml
   - tests: fix ephemeral mount table in left over by prepare
   - tests: add version-tool for comparing versions
   - cmd/libsnap: make feature flag enum 1<<N style
   - many: refactor boot/boottest and move to bootloader/bootloadertest
   - tests/cross/go-build: use go list rather than shell trickery
   - HACKING.md: clarify where "make fmt" is needed
   - osutil: make flock test more robust
   - features, overlord: make parallel-installs exported, export flags
     on startup
   - overlord/devicestate:  support the device service returning a
     stream of assertions
   - many: add snap model command, add /v2/model, /v2/model/serial REST
     APIs
   - debian: set GOCACHE dir during build to fix FTBFS on eoan
   - boot, etc.: refactor boot to have a lookup with different imps
   - many: add the start of Core 20 extensions support to the model
     assertion
   - overlord/snapstate: revert track-risk behavior change and
     validation on install
   - cmd/snap,image,seed:  move image.ValidateSeed to
     seed.ValidateFromYaml
   - image,o/devicestate,seed: oops, make sure to clear seedtest
     helpers
   - tests/main/snap-info: update check.py for test-snapd-tools 2.0
   - tests: moving tests to nightly suite
   - overlord/devicestate,seed:  small step, introduce
     seed.LoadAssertions and use it from firstboot
   - snapstate: add comment to checkVersion vs strutil.VersionCompare
   - tests: add unit tests for cmd_whoami
   - tests: add debug section to interfaces-contacts-service
   - many: introduce package seed and seedtest
   - interfaces/bluez: enable communication between bluetoothd and
     meshd via dbus
   - cmd/snap: fix snap switch message
   - overlord/snapstate: check channel names on install
   - tests: check snap_daemon user and group on system-usernames-
     illegal test are not created
   - cmd/snap-confine: fix group and permission of .info files
   - gadget: do not error on gadget refreshes with multiple volumes
   - snap: use deterministic paths to find the built deb
   - tests: just build snapd commands on go-build test
   - tests: re-enable mount-ns test on classic
   - tests: rename fuse_support to fuse-support
   - tests: move restore-project-each code to existing function
   - tests: simplify interfaces-account-control test
   - i18n, vendor, packaging: drop github.com/ojii/gettext.go, use
     github.com/snapcore/go-gettext
   - tests: always say 'restore: |'
   - tests: new test to check the output after refreshing/reverting
     core
   - snapstate: validate all system-usernames before creating them
   - tests: fix system version check on listing test for external
     backend
   - tests: add check for snap_daemon user/group
   - tests: don't look for lxcfs in mountinfo
   - tests: adding support for arm devices on ubuntu-core-device-reg
     test
   - snap: explicitly forbid trying to parallel install from seed
   - tests: remove trailing spaces from shell scripts
   - tests: remove locally installed revisions of core
   - tests: fix removal of snaps on ubuntu-core
   - interfaces: support Tegra display drivers
   - tests: move interfaces-contacts-service to /tmp
   - interfaces/network-manager: allow using
     org.freedesktop.DBus.ObjectManager
   - tests: restore dpkg selections after upgrade-from-2.15 test
   - tests: pass --remove to userdel on core
   - snap/naming: simplify SnapSet somewhat
   - devicestate/firstboot: check for missing bases early
   - httputil: rework protocol error detection
   - tests: unmount fuse connections only if not initially mounted
   - snap: prevent duplicated snap name and snap files when parsing
     seed.yaml
   - tests: re-implement user tool in python
   - image: improve/tweak some warning/error messages
   - cmd/libsnap-confine-private: add checks for parallel instances
     feature flag
   - tests: wait_for_service shows status after actual first minute
   - sanity: report proper errror when fuse is needed but not available
   - snap/naming: introduce SnapRef, Snap, and SnapSet
   - image: support prepare-image --classic for snapd snap only
     imagesConsequently:
   - tests/main/mount-ns: account for clone_children in cpuset cgroup
     on 18.04
   - many:  merging asserts.Batch Precheck with CommitTo and other
     clarifications
   - devicestate: add missing test for remodeling possibly removing
     required flag
   - tests: use user-tool to remove test user in the non-home test
   - overlord/configstate: sort patch keys to have deterministic order
     with snap set
   - many: generalize assertstate.Batch to asserts.Batch, have
     assertstate.AddBatch
   - gadget, overlord/devicestate: rename Position/Layout
   - store, image, cmd: make 'snap download' leave partials
   - httputil: improve http2 PROTOCOL_ERROR detection
   - tests: add new "user-tool" helper and use in system-user tests
   - tests: clean up after NFS tests
   - ifacestate: optimize auto-connect by setting profiles once after
     all connects
   - hookstate/ctlcmd: snapctl unset command
   - tests: allow test user XDG_RUNTIME_DIR to phase out
   - tests: cleanup "snap_daemon" user in system-usernames-install-
     twice
   - cmd/snap-mgmt: set +x on startup
   - interfaces/wayland,x11: allow reading an Xwayland Xauth file
   - many: move channel parsing to snap/channel
   - check-pr-title.py: allow {} in pr prefix
   - tests: spam test logs less while waiting for systemd unit to stop
   - tests: remove redundant activation check for snapd.socket
     snapd.service
   - tests: trivial snapctl test cleanup
   - tests: ubuntu 18.10 removed from the google-sru backend on the
     spread.yaml
   - tests: add new cases into arch_test
   - tests: clean user and group for test system-usernames-install-
     twice
   - interfaces: k8s worker node updates
   - asserts: move Model to its own model.go
   - tests: unmount binfmt_misc on cleanup
   - tests: restore nsdelegate clobbered by LXD
   - cmd/snap: fix snap unset help string
   - tests: unmount fusectl after testing
   - cmd/snap: fix remote snap info for parallel installed snaps


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.42-1
changelog:
  - Release snapd 2.42 to Fedora
  - Drop libtool patch
  - Drop cgroupv2 patch, changes are available in the release


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.42.1
   - interfaces: de-duplicate emitted update-ns profiles
   - packaging: tweak handling of usr.lib.snapd.snap-confine
   - interfaces: allow introspecting network-manager on core
   - tests/main/interfaces-contacts-service: disable on openSUSE
     Tumbleweed
   - tests/lib/lxd-snapfuse: restore mount changes introduced by LXD
   - snap: fix default-provider in seed validation
   - tests: update system-usernames test now that opensuse-15.1 works
   - overlord: set fake sertial in TestRemodelSwitchToDifferentKernel
   - gadget: rename "boot{select,img}" -> system-boot-{select,image}
   - tests: listing test, make accepted snapd/core versions consistent


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.42.2
   - interfaces/lxd-support: Fix on core18
   - tests/main/system-usernames: Amazon Linux 2 comes with libseccomp
     2.4.1 now
   - snap-seccomp: add missing clock_getres_time64
   - cmd/snap-seccomp/syscalls: update the list of known
     syscalls
   - sandbox/seccomp: accept build ID generated by Go toolchain
   - interfaces: allow access to ovs bridge sockets


author: Neal Gompa <ngompa13@gmail.com> - 1.43-1
changelog:
  - Update to 1.43
  - New APIs for getting snaps asynchronously
  - New APIs for getting system info and publisher info
  - Deprecated async client list APIs
  - Fix small memory leak
  - Fix compile warnings


author: Neal Gompa <ngompa13@gmail.com> - 1.44-1
changelog:
  - Update to 1.44
  - Reconnect to snapd if disconnected while trying to send the request
  - Handle short writes to snapd


author: Richard Hughes <rhughes@redhat.com> - 1.45-1
changelog:
  - Update to 1.45
  - Support base snap field
  - Support filtering apps
  - Support maintenance information returned from snapd


author: Neal Gompa <ngompa13@gmail.com> - 1.47-1
changelog:
  - Update to 1.47
  - New API: snapd_channel_get_released_at
  - New API: SNAPD_ERROR_DNS_FAILURE
  - Fix tests breaking due to undefined order of results
  - Remove generated MOC file from tarball


author: Neal Gompa <ngompa13@gmail.com> - 1.48-1
changelog:
  - Update to 1.48
  - Many new APIs added
  - Allow searching via common-id
  - Add a description markdown parser
  - Replace SnapdConnection with SnapdPlugRef and SnapdSlotRef
  - Support updated connections API (/v2/connections)
  - Support updated /v2/interfaces&select= API
  - Support snap configuration API
  - Add Qt interface attribute API
  - Make snapd_client_set_socket_path revert to the default when NULL passed.
  - Fix C99 mode not being enabled on older versions of GCC


author: Neal Gompa <ngompa13@gmail.com> - 1.49-1
changelog:
  - Update to 1.49
  - New APIs for getting connections and deprecating older variants
  - Fix memory leaks
  - Use C99 variable style


author: Neal Gompa <ngompa13@gmail.com> - 1.54-1
changelog:
  - Update to 1.54
  - Add API to get snap website
  - Add purge option to remove
  - Switch build system to Meson
  - Fix Qt build with optimisation disabled
  - Fix tests breaking on json-glib < 1.2.4
  - Use C99 style variable definitions


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Jan Friesse <jfriesse@redhat.com> - 20180321-1
changelog:
  - Remove exlusivearch for VMGuestLib.
  - Add copr branch with enhanced spec file which tries to automatically
    detect what build options should be used (systemd/vmguestlib).


author: Jan Friesse <jfriesse@redhat.com> - 20190319-1
changelog:
  - Add AUTHORS and COPYING
  - Fix version number in specfile
  - Use install -p to preserve timestamps
  - Use set_build_flags macro
  - Rebase to new version


author: Kalev Lember <klember@redhat.com> - 0.9.0-2
changelog:
  - Split new baratinoo and kali modules out into separate subpackages
  - Install man pages
  - Update the source URL


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.1-1
changelog:
  - New upstream release
  - Disable celt 0.5.1 support, Opus support has been there for 4 years, so
    celt should no longer be needed


author: Tom Callaway <spot@fedoraproject.org> - 2.8.17-28
changelog:
  - bring in all the good fixes from suse and debian
    ... including the one that resolves the FTBFS since Fedora 26. yikes.


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.8-1
changelog:
  - new version 4.8
  - Resolves: #1727745 - squid: CVe-2019-13345 squid: XSS via user_name or auth
    parameter in cachemgr.cgi


author: Christopher Engelhard <ce@lcts.de> 2.4.0-9
changelog:
  - add bundled provides for fnv and simclist
  - add systemd dependency
  - fix changelog formatting
  - patch & use upstream service file
  - revert 05037d7b - disallow building on rhel < 6
  - make package own /usr/libexec/sshguard


author: Christopher Engelhard <ce@lcts.de> 2.4.0-10
changelog:
  - add missing dependencies
  - move examples to (docdir)/examples subfolder
  - prefix directories with %dir in %files
  - use complete & commented config files
  - add white/blacklisting


author: Paul Wouters <pwouters@redhat.com> - 5.6.2-5
changelog:
  - Resolves rhbz#1574939 IKEv2 VPN connections fail to use DNS servers provided by the server
  - Resolves rhbz#1449875 Strongswan on epel built without the sql plugin but with the sqlite plugin


author: Mikhail Zabaluev <mikhail.zabaluev@gmail.com> - 5.6.3-3
changelog:
  - Add plugin bypass-lan, disabled by default
  - Resolves rhbz#1554479 Update to strongswan-charon-nm fails


author: Radovan Sroka <rsroka@redhat.com> 1.8.25-1
changelog:
  - rebase sudo to latest stawble version
  - install /etc/dnf/protected.d/sudo instead of /etc/yum/protected.d/sudo (1626968)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28-1
changelog:
  - rebase to 1.8.28
  Resolves: rhbz#1761533
  - fixes CVE-2019-14287
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1761584


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.18-4
changelog:
  - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758).
  - Include all upstream patches since 5.1.18.


author: Pete Walter <pwalter@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop opengl-game-wrapper.sh use
  - Update URL
  - Spec file cleanup
  - Remove ExcludeArch: ppc64le


author: Steve Grubb <sgrubb@redhat.com> - 4.0.6-1
changelog:
  - New upstream bugfix release
  - Fixes CVE-2018-18956 Segmentation fault in the ProcessMimeEntity function


author: Stefan Berger <stefanb@linux.ibm.com> - 0.1.0-0.20181106git05d8160
changelog:
  - Follow improvements in swtpm repo
  - Remove ownership change of swtpm_setup.sh; have root own the file as required


author: Xavier Bachelot <xavier@bachelot.org> 6.2.44-2
changelog:
  - Don't package OChangeLog and ONEWS. Saves 5MB.
  - Move developers documentation to devel-doc sub-package.
  - Compute an accurate License: tag.


author: Xavier Bachelot <xavier@bachelot.org> 6.2.44-3
changelog:
  - Don't build for ix86 on EL6.
  - Re-order some parts of spec for better readability.
  - Use bcond_with macro instead of custom macros.


author: Xavier Bachelot <xavier@bachelot.org> 6.2.46-1
changelog:
  - Update to 6.2.46.
  - Unbundle foundation-icons font.
  - Add dependency on LWP::Protocol::https (RHBZ#1753111).
  - Don't unbundle js-respond on EL8 (yet).


author: Xavier Bachelot <xavier@bachelot.org> 6.2.48-2
changelog:
  - Don't require optional perl modules unavailable on EL8.
  - Disable httpd and lighttpd support for EL8 until missing bits are available.
  - Change sympa localstatedir owner/group to sympa:sympa. Fixes RHBZ#1761455.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-6.git9f3aed1
changelog:
  - Fix a local vulnerability from a race condition in chown-recursive (CVE-2018-15687, #1639076)
  - Fix a local vulnerability from invalid handling of long lines in state deserialization (CVE-2018-15686, #1639071)
  - Fix a remote vulnerability in DHCPv6 in systemd-networkd (CVE-2018-15688, #1639067)
  - The DHCP server is started only when link is UP
  - DHCPv6 prefix delegation is improved
  - Downgrade logging of various messages and add loging in other places
  - Many many fixes in error handling and minor memory leaks and such
  - Fix typos and omissions in documentation
  - Typo in %_environmnentdir rpm macro is fixed (with backwards compatiblity preserved)
  - Matching by MACAddress= in systemd-networkd is fixed
  - Creation of user runtime directories is improved, and the user
    manager is only stopped after 10 s after the user logs out (#1642460 and other bugs)
  - systemd units systemd-timesyncd, systemd-resolved, systemd-networkd are switched back to use DynamicUser=0
  - Aliases are now resolved when loading modules from pid1. This is a (redundant) fix for a brief kernel regression.
  - "systemctl --wait start" exits immediately if no valid units are named
  - zram devices are not considered as candidates for hibernation
  - ECN is not requested for both in- and out-going connections (the sysctl overide for net.ipv4.tcp_ecn is removed)
  - Various smaller improvements to unit ordering and dependencies
  - generators are now called with the manager's environment
  - Handling of invalid (intentionally corrupt) dbus messages is improved, fixing potential local DOS avenues
  - The target of symlinks links in .wants/ and .requires/ is now ignored. This fixes an issue where
    the unit file would sometimes be loaded from such a symlink, leading to non-deterministic unit contents.
  - Filtering of kernel threads is improved. This fixes an issues with newer kernels where hybrid kernel/user
    threads are used by bpfilter.
  - "noresume" can be used on the kernel command line to force normal boot even if a hibernation images is present
  - Hibernation is not advertised if resume= is not present on the kernenl command line
  - Hibernation/Suspend/... modes can be disabled using AllowSuspend=,
    AllowHibernation=, AllowSuspendThenHibernate=, AllowHybridSleep=
  - LOGO= and DOCUMENTATION_URL= are documented for the os-release file
  - The hashmap mempool is now only used internally in systemd, and is disabled for external users of the systemd libraries
  - Additional state is serialized/deserialized when logind is restarted, fixing the handling of user objects
  - Catalog entries for the journal are improved (#1639482)
  - If suspend fails, the post-suspend hooks are still called.
  - Various build issues on less-common architectures are fixed


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-7.git9f3aed1
changelog:
  - Hibernation checks for resume= are rescinded (#1645870)
  - Various patches:
    - memory issues in logind, networkd, journald (#1653068), sd-device, etc.
    - Adaptations for newer meson, lz4, kernel
    - Fixes for misleading bugs in documentation
  - net.ipv4.conf.all.rp_filter is changed from 1 to 2


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-8.gite339eae
changelog:
  - systemd-journald and systemd-journal-remote reject entries which
    contain too many fields (CVE-2018-16865, #1664973) and set limits on the
    process' command line length (CVE-2018-16864, #1664972)
  - Fix out-of-bounds read when parsing a crafted syslog message in systemd-journald
    (CVE-2018-16866, #1664975)
  - A signal is again used to stop user sessions instead of dbus (#1664491)


author: Adam Williamson <awilliam@redhat.com> - 239-9.gite339eae
changelog:
  - Requires(post) openssl-libs to fix live image build machine-id issue
    See: https://pagure.io/dusty/failed-composes/issue/960


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-10.git4dc7dce
changelog:
  - Fix large memory usage by systemd-journald (#1665931)
  - Some minor fixes to systemd-nspawn, udevadm, documentation and logging


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-12.git8bca462
changelog:
  - Prevent buffer overread in systemd-udevd
  - Properly validate dbus paths received over dbus (#1678394, CVE-2019-6454)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-13.gitf4afb95
changelog:
  - Fix systemd-mount with CIFS (#1708996)
  - Minor build and documentation fixes
  - Fix udev rule for Parallels video adapter (#1712842)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-14.git33ccd62
changelog:
  - Security issue: unprivileged users were allowed to change DNS
    servers configured in systemd-resolved.
  - hwdb entries for keyboards are updated to the latest version (#1725717)


author: Aaron Merey <amerey@redhat.com> - 4.2-0.20190827
changelog:
  - PR23879,PR24875 - fix task finder vma on f29
  - PR24904 - support linux 5.2 stacktrace.c changes
  - PR24904 - support linux 5.2 stacktrace.c changes with -DDEBUG_UNWIND too


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-1
changelog:
  - New version 4.9.3
  - Fixes CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452, CVE-2018-16300, CVE-2018-16228, CVE-2019-15166, CVE-2019-15167


author: Luigi Toscano <luigi.toscano@tiscali.it> - 3.1.2-1
changelog:
  - Update to 3.1.2
  - Adapt the spec file to the base requirements (Qt5/KF5)
  - Add two new dependencies (libcdio and libcsv) and remove the old
    tcp_wrapper dependency


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-74
changelog:
  - Resolves: #1606506 - telnet: FTBFS in Fedora rawhide
  - Resolves: #1505954 - telnet failing to parse .telnetrc due to strncpy used on overlaping buffers


author: Conrad Meyer <cemeyer@uw.edu> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - Buildsystem has changed to use meson.  Adapt, following https://fedoraproject.org/wiki/Packaging:Meson .


author: Tom Callaway <spot@fedoraproject.org> - 7:20180414-28
changelog:
  - do not try to ls /usr/share/texlive/fmtutil.cnf.d, it can be empty, 
    and that makes for noisy errors in scripts (bz1650935)
    Thanks to Villy Kruse.
  - fix pkgconfig cleanup sed to use %{source_date} instead of %{version}
    which is overridden with subpackage specific data at that point. (bz1426622)


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.35-1
changelog:
  - Fix for CVE-2018-16737, CVE-2018-16738 and CVE-2018-16758 
  - Update to new upstream version 1.0.35


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.8-2
changelog:
  - fixes rhbz #1652128 CVE-2018-19387
  - tmux: NULL Pointer Dereference in format_cb_pane_tabs in format.c


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.9a-2
changelog:
  - update to version 2.9a, fixes rhbz #1692933
  - ChangeLog https://raw.githubusercontent.com/tmux/tmux/2.9/CHANGES
  - removed upstreamed patch


author: David Timms <iinet.net.au@dtimms> - 1.4.14-1
changelog:
  - Update to release 1.4.14.
  - Includes security fixes for CVE-2017-6307, CVE-2017-6308,
    CVE-2017-6309, CVE-2017-6310.


author: David Timms <iinet.net.au@dtimms> - 1.4.14-2
changelog:
  - Update -dolphin to use the kf5 services directory.
  - Remove rpm clean section since it's taken care of automatically.


author: Marcel Härry <mh+fedora@scrit.ch> - 0.3.2.10-1
changelog:
  - Update to latest version. Security-Fixes TROVE-2018-001, TROVE-2018-002,
    TROVE-2018-003 and TROVE-2018-004


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Sun Yunying <yunying.sun@intel.com> - 2.0.1-1
changelog:
  - Update to 2.0.1 release
  - Remove the tcti SONAME patch since it's already included in 2.0.1
  - Update dependency of tpm2-abrmd-selinux to fixed version instead dynamic one


author: Sun Yunying <yunying.sun@intel.com> - 2.0.2-1
changelog:
  - Update to 2.0.2 release
  - Add patch to fix configure error, also add autoreconf to update configure


author: Sun Yunying <yunying.sun@intel.com> - 2.0.3-1
changelog:
  - Update to 2.0.3 release
  - Remove gdbus related patch and autoreconf scriptlet as it's included in 2.0.3


author: Yunying Sun <yunying.sun@intel.com> - 3.1.0-1
changelog:
  - Update Requires version of tpm2-tss to 2.0.0
  - Remove BuildRequires for tcti-abrmd since it is optional
  - Remove BuildRequires for tcti-{device,mssim} as it is now dynamically loaded
  - Update to 3.1.0 release


author: Javier Martinez Canillas <javierm@redhat.com> - 3.1.2-1
changelog:
  - Update to 3.1.2 release
  - Restore TCTI configuration environment for tools
  - Restore tpm2_getcap tool properties output
    Resolves: rhbz#1625647


author: Javier Martinez Canillas <javierm@redhat.com> - 1.4.0-1
changelog:
  - Update URLs to point to the new project location
  - Add README.md CHANGELOG.md to %files directive
  - Update to 1.4.0 release (RHBZ#1508870)


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 release (RHBZ#1508870)
  - Remove patch file 60-tpm-udev.rules, use upstream tpm-udev.rules instead
  - Disable ESAPI to fix build errors caused by dependency to libgcrypt 1.6.0
  - Add scriptlet to fix Rpath errors
  - Update file installation paths and names accordingly


author: Yunying Sun <yunying.sun@intel.com> - 2.0.0-2
changelog:
  - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora
  - Bump release version to 2.0.0-2


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry James <loganjerry@gmail.com> - 1.8-1
changelog:
  - New upstream version
  - Drop upstreamed -uio patch
  - Add -net-protocols patch to fix bz 1514786
  - Add -autofs patch to fix compilation under kernel 4.14+


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: Peter Robinson <pbrobinson@fedoraproject.org> 2018.09-0.4.rc3
changelog:
  - 2018.09 RC3
  - Enable nanopi_neo_plus2, pine_h64, rock960-rk3399, a64-olinuxino
  - Build against new upstream AllWinner ATF support
  - Use firmware provided DT on Raspberry Pi
  - Support for Pine64-LTS


author: Pablo Greco <pablo@fliagreco.com.ar>
changelog:
  - Added conditional to enable devtoolset-7-gcc for .el7 build (Arrfab)
  - Added conditional BR, python2-pyelftools is python-pyelftools in .el7 (Arrfab)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-15
changelog:
  - Pull in FTBFS fix for exiv2-0.27 (#1671153)
  - use %make_build %make_install macros
  - FTBFS related to openmp support on f30+, workaround with --disable-openmp (for now)


author: Sérgio Basto <sergio@serjux.com> - 0.23-0.1
changelog:
  - The latest commits of ufraw made after 0.22 and some fixes found over the
    internet.
  - Re-enable openmp.


author: Jeremy Newton <alexjnewt AT hotmail DOT com> 1.0-2.20190403git1139876
changelog:
  - Update to newer git, fixes install issues and all patches upstreamed
  - Add missing static provides for devel


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Jakub Martisko <jamartis@redhat.com> - 6.0-42
changelog:
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: Christian Kellner <ckellner@redhat.com> - 0.99.9-1
changelog:
  - New upstream release
  - Drop unneccessary patch to fix udev events access
  - Fix daemon lockdown issues (keyboard backlight, AC status changes)
  - Out-of-tree build fixes and documentation fixes


author: Christian Kellner <ckellner@redhat.com> - 0.99.10-1
changelog:
  - New upstream release with the following changes:
  - Set 'pending-charge' for DisplayDevice if at least one battery is in
    the 'pending-charge' state
  - Map pending-charge to fully-charged when charge is 100%


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-4
changelog:
  - Modernize and generalize building of Python subpackages:
    - replace python with python2
    - use appropriate macros for when refering to Python 3
    - prefix Python-dependent plugins with the version of Python they are built
      with
  - Also build Python 3 subpackages for the other Python 3 version in EPEL7


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-5
changelog:
  - Build Python 3 version(s) of gevent plugin on Fedora and EPEL7
  - Build Python 3 version of greenlet plugin on Fedora and EPEL7
  - Build Python 2 version of greenlet plugin on EPEL7
  - Always build Python 3 version of tornado plugin when building with Python 3
    (drop python3_tornado build conditional)


author: Carl George <carl@george.computer> - 2.0.17.1-1
changelog:
  - Latest upstream (rhbz#1549354)
  - Enable uwsgi-plugin-coroae on EL7
  - Use systemd tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303)
  - Use /var/run/uwsgi when not using systemd
  - Build with versioned python command
  - Remove %config from systemd unit file
  - Disable greenlet plugin on EL7


author: Carl George <carl@george.computer> - 2.0.17.1-2
changelog:
  - Make python2-uwsgidecorators own the right files (rhbz#1600721)
  - Be more explicit with uwsgidecorators files


author: Tadej Janež <tadej.j@nez.si> - 2.0.17.1-3
changelog:
  - Re-enable greenlet plugin on EL7:
    - Python 3 version is always built
    - Python 2 version is only built on x86_64


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.1.RC1
changelog:
  - Remove patches to prebuild files and always ./autogen.sh.
  - Only ever build primary arch. Put tools under libexec.
  - Update to upstream 3.15.0-RC1.
  - Drop all upstreamed patches.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.2.RC1
changelog:
  - Add valgrind-3.15.0-s390x-get-startregs-constraint.patch
  - Add valgrind-3.15.0-missing-a-c.patch
  - Add valgrind-3.15.0-libstdc++-supp.patch
  - Add valgrind-3.15.0-dhat-x86.patch
  - Add valgrind-3.15.0-gdb-output1.patch
  - Add valgrind-3.15.0-gdb-output2.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.3.RC1
changelog:
  - Enable full regtest on all fedora arches.
  - Make sure that patched a.c is not newer than cgout-test.
  - Update valgrind-3.15.0-gdb-output1.patch to upstream version.
  - Add valgrind-3.15.0-filter-libc-futex.patch.
  - Add valgrind-3.15.0-mmap-32bit.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.4.RC2
changelog:
  - Update to 3.15.0.RC2.
  - Drop upstreamed patches:
    - valgrind-3.15.0-s390x-get-startregs-constraint.patch
    - valgrind-3.15.0-missing-a-c.patch
    - valgrind-3.15.0-libstdc++-supp.patch
    - valgrind-3.15.0-dhat-x86.patch
    - valgrind-3.15.0-gdb-output1.patch
    - valgrind-3.15.0-gdb-output2.patch
  - Update valgrind-3.15.0-mmap-32bit.patch to upstream version.
  - gdb on f30 and rawhide is currently broken, don't run_full_regtest.
  - Any glibc-devel version is.
  - Drop rhel5 special case for tools-devel.
  - Use /bin/true --help as sanity test.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.5.RC2
changelog:
  - No openmpi support on old s390x rhel.
  - Disable s390x z13 support on rhel6 (too old binutils).
  - Use an explicit ExclusiveArch, don't rely on %valgrind_arches.
  - Drop close_fds, it is no longer needed.
  - Include any gdbserver_tests diffs for failing regtest.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.8.RC2
changelog:
  - Adding of stack-protector flag should only be done with newer gcc.
  - Older rpm macros didn't provide build_ldflags.
  - Add valgrind-3.15.0-arm64-Ity_F16.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-1
changelog:
  - On ppc64[be] -fexceptions is troublesome.
  - valgrind-3.15.0 final
    Remove upstreamed patches
    - valgrind-3.15.0-arm64-Ity_F16.patch
    - valgrind-3.15.0-filter-libc-futex.patch
    - valgrind-3.15.0-mmap-32bit.patch


author: Martin Gansser <martinkg@fedoraproject.org> - 2.4.0-1
changelog:
  - Dropped dvbsddevice and rcu plugins
  - SPEC File cleanup
  - Dropped patch9  vdr-1.7.29-hlcutter-0.2.3.diff
  - Dropped patch14 0001-Fix-build-with-systemd-230.patch
  - Dropped patch19 vdr-2.2.0-menuselection.patch
  - Dropped Patch20 %{name}-2.3.2-unsignedtosigned.diff
  - Dropped Patch21 %{name}-gcc7-fix.patch
  - Add %{name}-2.4.0-01-fix-svdrp-modt-recflag.diff
  - Add skincurses-log-errors.patch
  - Add 12_osdbase-maxitems.patch


author: Martin Gansser <martinkg@fedoraproject.org> - 2.4.1-1
changelog:
  - Dropped Patch5 vdr-2.4.0-01-fix-svdrp-modt-recflag.diff
  - Ccustomized Patch6 vdr-2.4.1-skincurses-log-errors.patch
  - Add vdr-2.4.0-lcn-support-v2.patch.gz
  - Add vdr-2.4.1-editrecording.patch.gz
  - Fix systemd-tmpfiles migration warning, rundir from %{_var}/run/vdr to /run/vdr


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.1-2
changelog:
  - Add BR gcc-c++
  - Add BR pkgconfig(freetype2)
  - License is GPLv2+ not GPL+
  - Convert HISTORY file to utf-8


author: Martin Gansser <martinkg@fedoraproject.org> - 0.2.48-2
changelog:
  - Use %{version} for SOURCE tag
  - Use %bcond_with/without for debugging flag
  - Mark COPYING as %license file
  - Use korrekt license GPLv2+
  - take ownership of unowned directory %{vdr_configdir}/plugins/osd2web/


author: Martin Gansser <martinkg@fedoraproject.org> - 0.7.0-8
changelog:
  - Fix FTBFS due missing BR gcc gcc-c++
  - Move rules file to %{_udevrulesdir} (RHBZ 1226698)
  - Add BR systemd


author: Martin Gansser <martinkg@fedoraproject.org> - 0.6.1-0.18.gitb84b7d85
changelog:
  - Rebuild for vdr-2.4.0
  - Update to 0.6.1-0.18.gitb84b7d8
  - Add 0001-Fixed-compilation-for-vdr-2.3.7.diff


author: Filipe Rosset <rosset.filipe@gmail.com> - 3.920-1
changelog:
  - 3.920 bump
  - Disabled tests until upstream fixes the issue
  - Added BR to fix EPEL7 build
  - Fixes rhbz #1250122 and rhbz #1494887


author: Scott Tsai scottt.tw@gmail.com - 3.922-5
changelog:
  - Remove duplicate copies of 'examples' in /usr/share/doc
  - https://bugzilla.redhat.com/show_bug.cgi?id=1592057#c3


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 20180129-1
changelog:
  - update to 20180129
  - drop openjpeg2 patch, as it was buggy and openjpeg2 support is now integrated


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1-3.20170830gitafc8ea9
changelog:
  - change license tag to GPLv2
  - fix warning _FORTIFY_SOURCE requires compiling with optimization (-O)


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.1.0-1.1
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

   * Sun Jul 01 2018 Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.1.0-1
  - Update to v2.1.0


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.1.0-2.1
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

   * Sat Sep 15 2018 Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.1.0-2
  - Actually use 2.1.0 sources
  - Add performance patch for xserver


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 1.6-2
changelog:
  - Source tarball has no prebuilt manpages, so buildrequires python3-docutils
    for rst2man
  - Now run make check in parallel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.3.rc0
changelog:
  - Update the "check if NID is defined" patch
  - Improve compatibility with the kerberos gssapi header file
  - Rebuild for gsoap 2.8.48 (Fedora 27)


author: Artur Iwicki <fedora@svgames.pl> 1.3-1
changelog:
  - Update to new upstream version
  - Use tag/name-tag.tar.gz as Source0 instead of tag.tar.gz#/name-tag.tar.gz


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.10-2
changelog:
  - backport some fixes for test failures from upstream git
  - run tests in parallel and double timeout to prevent failures on armv7hl


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1755644)
  - drop obsolete patch
  - disable regress/regress-30.txt until fixed for python3
  - fix running test/wasm2c/spec tests under python3


author: Dmitri Smirnov <dmitri@smirnov.ee> - 1.0.6-6
changelog:
  - Added install hint and native messaging host files for Chromium
  - Minor whitespace consistency changes in spec file


author: Eike Rathke <erack@redhat.com> - 2.24.1-1
changelog:
  - Update to 2.24.1
  - Merged from F30 for consistency:
  - Switch to Ninja
  - Switch to python3
  - Switch to using pkgconfig build requires
  - Switch to enchant-2


author: Kalev Lember <klember@redhat.com> - 1.14.5-3
changelog:
  - Add missing dbus-devel and readline-devel BRs for optional features
  - Fix dejavu font unbundling
  - Drop obsolete sazanami-gothic and wqy-zenhei font deps


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-1
changelog:
  - New version 2.6.2
  - Contains fixes for CVE-2018-14339, CVE-2018-14340, CVE-2018-14341, CVE-2018-14342, CVE-2018-14343, CVE-2018-14344, CVE-2018-14367, CVE-2018-14368, CVE-2018-14369, CVE-2018-14370


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.5-1
changelog:
  - New version 2.6.5
  - Contains fixes for CVE-2018-19622, CVE-2018-19623,  CVE-2018-19624, CVE-2018-19625, CVE-2018-19626, CVE-2018-19627, CVE-2018-19628


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.6-1
changelog:
  - New version 2.6.6 
  - Contains fixes for CVE-2019-5716, CVE-2019-5717, CVE-2019-5718, CVE-2019-5719


author: Michal Ruprich <mruprich@redhat.com> - 1:3.0.1-1
changelog:
  - New version 3.0.1
  - Fixes CVE-2019-10894, CVE-2019-10895, CVE-2019-10896, CVE-2019-10897, CVE-2019-10898, CVE-2019-10899, CVE-2019-10900, CVE-2019-10901, CVE-2019-10902, CVE-2019-10903


author: Ben Cotton <bcotton@fedoraproject.org> - 0.7.1-1
changelog:
  - Update to latest upstream release
  - Remove unneeded dependences, which allows us more build arches
  - Split the X11 version into an optional subpackage


author: Chris King <bunnyapocalypse@protonmail.org> - 2.26.1-1
changelog:
  - New version, added atk/bubblewrap libs for build, removed crypto patch as its
    no longer needed. Also, sobump.


author: Richard Shaw <hobbes1069@gmail.com> - 1.9.1-1
changelog:
  - Update to 1.9.1.
  - Update compile patch to deal with qt5_use_modules no longer being available in
    rawhide/f29.


author: Michal Minář <miminar@redhat.com> - 4.0.2-3
changelog:
  - New upstream version 4.0.2
  - Compatibility fix for boost 1.66
  - Depend on mariadb-connector-c-devel


author: José Matos <jamatos@fedoraproject.org> - 19.04.3-2
changelog:
  - Try fix to show disappearing text after the first page
    (https://github.com/wxMaxima-developers/wxmaxima/issues/1113)


author: José Matos <jamatos@fedoraproject.org> - 19.05.0-1
changelog:
  - update to 19.05.0
  - drop upstream patches
  - add patch to fix compilation (added to upstream after the release)


author: Mike DePaulo <mikedep333@gmail.com> - 0.5.4.14-1
changelog:
  - Update to 0.5.4.14
  - New upstream - now on GitHub
  - Use weak dependencies, and refresh the list of them for archiving commands.


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.0-10
changelog:
  - insufficient TLB flushing / improper large page mappings with AMD IOMMUs
  	[XSA-275, CVE-2018-19961, CVE-2018-19962] (#1651665)
  - x86: DoS from attempting to use INVPCID with a non-canonical addresses
  	[XSA-279, CVE-2018-19965] (#1651970)
  - xen: various flaws (#1652251)
    resource accounting issues in x86 IOREQ server handling
  	[XSA-276, CVE-2018-19963]
    x86: incorrect error handling for guest p2m page removals
  	[XSA-277, CVE-2018-19964]
    Fix for XSA-240 conflicts with shadow paging [XSA-280, CVE-2018-19966]


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.1-1
changelog:
  - update to 4.11.1
    remove patches for issues now fixed upstream
    adjust xen.use.fedora.ipxe.patch
  - only include qemutrad build requirements for platforms that use it
  - construct ovmf.bin from edk2-ovmf package (#1656651)


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.1-4
changelog:
  - xen: various flaws (#1685577)
    grant table transfer issues on large hosts [XSA-284]
    race with pass-through device hotplug [XSA-285]
    x86: steal_page violates page_struct access discipline [XSA-287]
    x86: Inconsistent PV IOMMU discipline [XSA-288]
    missing preemption in x86 PV page table unvalidation [XSA-290]
    x86/PV: page type reference counting issue with failed IOMMU update [XSA-291]
    x86: insufficient TLB flushing when using PCID [XSA-292]
    x86: PV kernel context switch corruption [XSA-293]
    x86 shadow: Insufficient TLB flushing when using PCID [XSA-294]


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.1-5
changelog:
  - Microarchitectural Data Sampling speculative side channel [XSA-297,
  	CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091]
  - additional patches so above applies cleanly
  - work around grub2 issues in dom0


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.2-1
changelog:
  - update to 4.11.2
    remove patches now fixed upstream
    adjust xen.use.fedora.ipxe.patch
    drop parts of xen.gcc9.fixes.patch


author: Michael Young <m.a.young@durham.ac.uk> - 4.11.2-2
changelog:
  - VCPUOP_initialise DoS [XSA-296, CVE-2019-18420]
  - missing descriptor table limit checking in x86 PV emulation [XSA-298,
          CVE-2019-18425]
  - Issues with restartable PV type change operations [XSA-299, CVE-2019-18421]
          (#1767726)
  - add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423]
  - passed through PCI devices may corrupt host memory after deassignment
          [XSA-302, CVE-2019-18424] (#1767731)
  - ARM: Interrupts are unconditionally unmasked in exception handlers
          [XSA-303, CVE-2019-18422]


author: Xavier Bachelot <xavier@bachelot.org> - 2.7.0-28
changelog:
  - Clean up spec.
  - Add patch for CVE-2016-4463 (RHBZ#1351469).
  - Add patch for CVE-2017-12627 (RHBZ#1551526).


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.4.2-1
changelog:
  - Update to 1.4.2, fixes rhbz#1404980
  - Port to GtkApplication (this should help with keyboard shortcut issues)
  - Translation updates: Catalan, Croatian, Danish, Dutch (Flemish),
    Greek, Indonesian, Italian, Kazakh, Lithuanian, Norwegian Bokmal,
    Serbian, Thai


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-6
changelog:
  - Fix font issues (rhbz#1523624) :
   - Adjust xfig-3.2.5-urwfonts.patch for new font names in urw-base35-fonts
   - Except for the symbols font, use the old un-scalable Adobe PCF Symbol font
     for now as StandardSymbolsPS.otf from urw-base35-fonts is currently broken
   - Add a patch to deal with some fonts being scalable, while Symbol is not
   - Note the dingbats font is also broken in urw-base35-fonts, but there is no
     replacement for it, so that font is still broken, see rhbz#1534206
  - ghostscript-core no longer exists, instead require ghostscript (rhbz#1536581)
  - Remove obsolete icon-cache and desktop-database scriptlets
  - Add a patch from Debian fixing some issues with arrows


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-7
changelog:
  - Fix font issues take 2 (rhbz#1523624) :
   - It turns out the new urw fonts are completely unusuable as X11 core fonts,
     stop using them for now (see bug rhbz#1551219)
   - Add a patch to use the fallback fonts for non-scalable fonts too, so that
     we at least show something somewhat reasonable for Bookman, New Century
     Schoolbook and Palatino
   - This means that display of Zapf Chancery and Zapf Dingbats currently
     falls back to the "fixed" font, which is completely wrong for Dingbats


author: Hans de Goede <hdegoede@redhat.com> - 3.2.7a-1
changelog:
  - New upstream release 3.2.7a
  - Add Requires: transfig to make sure esp export works (rhbz#1642033)
  - Switch back to URW fonts so that Bookman, New Century Schoolbook and
    Palatino work again. This uses the old version of the URW fonts which are
    now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
  - Trim the changelog


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.7.3-2
changelog:
  - added patch which allows build xml-security-c against openssl 1.1
  - added ac_fixes patch: do not use sed to remove hardcoded compile
    options. Use patch because you will never know is such correction
    still needed (added autoconf, automake and libtool to BuildRequires)
  - added libstdc++-devel to BuildReqires and to devel Requires
  - add explicit all %configure options to prevent build by mistake package
    against nss and force use openssl
  - added --disable-debug to %configure options
  - added use %autosetup in %prep
  - do not waste IOs on remove not packaged files and add them %files
    with %exclude
  - indent and clean spec (move patch comments to the patch)


author: Miro Hrončok <mhroncok@redhat.com> - 0.8-59
changelog:
  - Subpackage python2-xmms2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tom Callaway <spot@fedoraproject.org> - 1:4.00-4
changelog:
  - tell xpdf where to find the system copy of xpdfrc
  - comment out unused urlCommand option from xpdfrc


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.11-5
changelog:
  - Make xrdp-selinux a weak dependency on versions that support them.
  - Drop xrdp-selinux dependency completely.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Adam Jackson <ajax@redhat.com> - 1:5.42-1.3
changelog:
  - Drop BuildRequires: pkgconfig(xxf86misc), X servers haven't implemented that
    extension in 10+ years.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.3-2
changelog:
  - Correct License tag (command line tool is GPLv2+)
  - Adjust Source tag to get a more descriptive tarfile name


author: Michal Ambroz <rebus at, seznam.cz> - 3.9.0-1
changelog:
  - bump to 3.9.0 release (#1680203)
  - switch from python-sphinx to python3-sphinx for generating the documentation for fc31+
  - should fix also #1660398 (CVE-2018-19974 CVE-2018-19975 CVE-2018-19976),
    but by design it might be always dangerous to run yara signatures compiled by 3rd party,
    so it is advised to re-compile yara rules instead
  - BUGFIX: Denial of service when using "dex" module. Found by the Cisco Talos team. (upstream #1023, CVE-2019-5020)
  - BUGFIX: Buffer overflow in "dotnet" module.
  - BUGFIX: Regexp regression when using nested quantifiers {x,y} for certain values of x and y. (#1018)


author: Michal Ambroz <rebus at, seznam.cz> - 3.10.0-1
changelog:
  - bump to 3.10.0 release (#1680204)
  - Harden virtual machine against malicious code.
  - BUGFIX: Regression bug in hex strings containing wildcards (upstream #1025).
  - BUGFIX: Buffer overrun in “elf” module.
  - BUGFIX: Buffer overrun in “dotnet” module.


author: Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
changelog:
  - bump to 3.11.0 release (#1760678)
  - BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
  - BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
  - BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
  - BUGFIX: Memory leak while attaching to a process fails (upstream #1070)


author: Lubomir Rintel <lkundrak@v3.sk> - 1.1.0-1
changelog:
  - Address review by Robert-André Mauchin (rh#1534545)
  - Drop the superfluous executable bits
  - Move to a released version 1.1.0


author: Hans de Goede <hdegoede@redhat.com> - 1.30-27
changelog:
  - Fix FTBFS (rhbz#1606782)
  - Add appdata
  - Fix the spaceship being unable to shoot on locales which use a comma as
    decimal separator


author: Petr Šabata <contyk@redhat.com> - 0.4.3-1
changelog:
  - 0.4.3 bump
  - Now includes more icons!
  - Based on Ankur Sinha's PR, https://src.fedoraproject.org/rpms/zathura/pull-request/1


author: Petr Šabata <contyk@redhat.com> - 0.3.1-1
changelog:
  - 0.3.1 bump
  - Don't link against the no longer provided libmupdfthird,
    see rhbz#1438824 for more info


author: Jonathan Dieter <jdieter@gmail.com> - 1.0.2-1
changelog:
  - Use hash table for finding identical chunks, speeding up process considerably
  - Add test case to verify that identical chunk checking is working


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.1-2
changelog:
  - Fix compilation on GCC 4.4.7 so it builds on EL6
  - Add missing sources
  - Also, zchunk will now automatically do all your taxes


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Switch to cmake; upstream is deprecating qmake
  - and its rule for detecting Qt >= 5.5.1 breaks on F28's Qt 5.10


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 4.1.6-11
changelog:
  - Backport patches to fix test failures in build
  - Cleanup spec a little
  - Use explicit soname version in file list


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 0-0.9gitfe0f368
changelog:
  - Require specific version of znc, to avoid unexpected breakage when znc
    updates.  (Broken deps are better than a broken server.)


author: Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
changelog:
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)


author: Kamil Dudka <kdudka@redhat.com> - 5.5-1
changelog:
  - update to latest upstream release, which fixes the following vulnerabilities:
      CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
      CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
      CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()


