# changelog

author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.12.13-1
changelog:
  - Update to 0.12.13
  - The package has changed vignette builder from "highlight" to "knitr"
  - The R-knitr package is not available in Fedora, so --ignore-vignettes was
    added to the R CMD check command
  - Removed the build requires used only by the vignette checks


author: Tom Callaway <spot@fedoraproject.org> - 3.5.0-1
changelog:
  - update to 3.5.0
  - update xz bundle (rhel6 only)
  - disable tests on armv7hl
  - disable info builds on rhel 6


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.41.6-1
changelog:
  - Update to 1.41.6
  - Add BuildRequires on R-testthat for Fedora (not available in EPEL)
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove license macro definition
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: José Matos <jamatos@fedoraproject.org> - 1.7.12-1
changelog:
  - update to 1.7-12
  - update license to GPL2 or GPL3
  - remove conditional statment that is true for all supported versions
    of Fedora and EPEL
  - add -devel subpackage


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-5
changelog:
  - fix deadlock in dumpmaps.
  - dont use array for path when not necessary.
  - fix prefix option handling in expand_entry().
  - fix sublink option not set from defaults.
  - fix error return in do_nfs_mount().


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.2.0-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Germano Massullo <germano.massullo@gmail.com> - 7.8.4-4
changelog:
  - systemd unit file: changed from Type=forking to Type=simple and removed --daemon --start_delay 1 from ExecStart


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.4.1-7
changelog:
  - Python 2 binary package renamed to python2-bro
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Derek Ditch <derek@rocknsm.io> - 2.5.3-1
changelog:
  - Security fix for binpac, bump to 2.5.3 (rhbz#1493520)
  - Remove linux capabilities from service file. Didn't work.
  - Fixes permissions on spool and log dirs
  - Adds net_admin, net_raw, and sys_nice caps to service file.
  - Adds bro system user and group in broctl \%post script
  - Fixes bug in broccoli \%post scriplets to run ldconfig
  - Moved licenses from doc to license
  - Removed jemalloc in favor of gperftools to fix crash
  - Added plugin configure option for bro-devel package
  - Fixed bro-devel package for use with plugins
  - Update to latest upstream version 2.5.1
  - Removed logrotate configuration; handled by broctl
  - Split out bro-core package for standlone bro installations
  - Create bro-devel package
  - Patched bro sphinx ext for epel7


author: Lars Kellogg-Stedman <lars@oddbit.com> - 0.6.0-8
changelog:
  - fixes from review (rhbz#1553999): remove defattr
  - correct typo in URL
  - stop mixing spaces and tabs


author: Ben Cotton <bcotton@fedoraproject.org> - 8.6.2-1
changelog:
  - Update to latest upstream 8.6.2
  - Drop patch glexec_privsep_helper.patch which was incorporated upstream


author: Dan Walsh <dwalsh@redhat.com> - 2:1.9.2-1.gitb066a83
changelog:
  - sandbox: fix sandbox logPath when crio restarts
  - syscontainers, rhel: add ADDTL_MOUNTS
  - Adapt to recent containers/image API updates
  - container_create: only bind mount /etc/hosts if not provided by k8s


author: Dan Walsh <dwalsh@redhat.com> - 2:1.9.3-1.git63ea1dd
changelog:
  - Update containers/image and containers/storage
  -   Pick up lots of fixes in image and storage library


author: Dan Walsh <dwalsh@redhat.com> - 2:1.9.4-1.git28c7dee
changelog:
  - imageService: cache information about images
  - container_create: correctly set user
  - system container: add /var/tmp as RW


author: Dan Walsh <dwalsh@redhat.com> - 2:1.9.7-1.gita98f9c9
changelog:
  - Merge pull request #1357 from runcom/netns-fixes
  - sandbox_stop: close/remove the netns _after_ stopping the containers
  - sandbox net: set netns closed after actaully closing it


author: Dominic Cleal <dominic@cleal.org> - 2.9.0-2
changelog:
  - Fix make call to use parallel flag macro
  - Fix default values of EA/BRs when macros aren't defined


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2.3.0-1
changelog:
  - Resolves: rhbz#1277743 - bump to v2.3.0
  - Resolves: rhbz#1308656 - obsolete docker-registry <= 0.9.1-5


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2.6.2-1.git48294d9
changelog:
  - Resolves: #1474894 - CVE-2017-11468
  - bump to tag 2.6.2
  - built commit 48294d9
  - built with bundled dependencies


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-6
changelog:
  - Drop no longer needed bnx2x patch, the gcc false positive has been fixed
  - Drop no longer needed -Wno-error=array-bounds from CFLAGS
  - Eliminate the need for the enic patch by eliminating second -Wall from CFLAGS
  - Disable unmaintained librte_power as per upstream recommendation


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-7
changelog:
  - vhost numa code causes crashes, disable until upstream fixes
  - Generalize target/machine/etc macros to enable i686 builds


author: Panu Matilainen <pmatilai@redhat.com> - 16.04-1
changelog:
  - Update to 16.04
  - Drop all patches, they're not needed anymore
  - Drop linker script generation, its upstream now
  - Enable vhost numa support again


author: Neil Horman <nhorman@redhat.com> - 17.02-3
changelog:
  - Fix dangling symlinks (bz 156051)
  - Fix devtools->usertools conversion (bz 1526051)
  - Fix python-pyelftools requirement (bz 1526051)


author: Martin Stransky <stransky@redhat.com> - 60.0.1-3
changelog:
  - Added fix for mozbz#1436242 (rhbz#1577277) - Firefox IPC crashes.
  - Added fix for mozbz#1462640 - Sandbox disables eglGetDisplay()
    call on Wayland/EGL backend.


author: Tomas Krizek <tkrizek@redhat.com> - 4.4.3-5
changelog:
  - Fixes #1403352 - bind-dyndb-ldap: support new named.conf API in BIND 9.11
  - Fixes #1412739 - ipa-kdb: support DAL version 6.1


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.4.3-6
changelog:
  - Rebuild to pick up system-python dependency change
  - Fixes #1426847 - Cannot upgrade freeipa-client on rawhide


author: Tomas Krizek <tkrizek@redhat.com> - 4.4.3-7
changelog:
  - Fixes #1413137 CVE-2017-2590 ipa: Insufficient permission check for
    ca-del, ca-disable and ca-enable commands


author: Tomas Krizek <tkrizek@redhat.com> - 4.4.4-1
changelog:
  - Update to upstream 4.4.4 - see https://www.freeipa.org/page/Releases/4.4.4
  - Add upstream signature file for tarball


author: Tomas Krizek <tkrizek@redhat.com> 4.4.4-2
changelog:
  - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2
  - Fixes #1446744 python2-ipaclient subpackage does not own /usr/lib/python2.7/site-packages/ipaclient/plugins
  - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install`
  - Fixes #1411810 ipa-replica-install fails with 406 Client Error
  - Fixes #1405814 ipa plugins: ERROR an internal error occured


author: Tomas Krizek <tkrizek@redhat.com> - 4.4.4-3
changelog:
  - Fixes #1456607 ipa-server-certinstall mangles arguments to certutil
  - Fixes #1465472 Error at open session: 0x3 when installling IPA server in F26
  - Fixes #1462155 [python-netifaces] Incompatible change in netmask
    representation of IPv6 address


author: Devrim Gündüz <devrim@gunduz.org> - 2.1.2-6
changelog:
  - Rebuilt for proj 4.9.3
  - Fix many rpmlint warnings/errors.
  - Add a workaround for the pkg-config change in rawhide.


author: jchaloup <jchaloup@redhat.com> - 2.1.1-0.2.gitc964368
changelog:
  - Don't remove _build directory, it is used during debuginfo extracting
    At the same time don't include _build directory in devel subpackage.
    resolves: #1231486


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01.1
changelog:
  - Owesome! Httpd 2.4.7 pushed. It shoud not require any hack anymore.
  - Major update to 2.4.7-01.
  - Apache from 2.4 version have modularity structure, so many changes:
  	- Mpm may be build without apache source tree!
  	- Exclude apache sources, turn mpm-itk tarball into regular source0.
  	- So drop all black magic!
  	- Instal it as module, retire separate systemd service files and related stuff.
  	- Rewrite README.Fedora.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.01-5
changelog:
  - Fix build issue on EL7 (rhbz# 1188159). Big thanks to Athmane Madjoudj <athmane@fedoraproject.org> for the work.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 2.4.7.04-1
changelog:
  - Update to version 2.4.7-04 to solve problem https://lists.err.no/pipermail/mpm-itk/2015-September/000925.html. By mail request of Marco Matarazzo.


author: Alexandre Moine <nobrakal@gmail.com> 5.5a-1
changelog:
  - Update to the new 5.5a
  - Remove the manual install of VeraBD.ttf, not used anymore, replaced by DejaVuSans-Bold.ttf.
  - Patch the code to use the fedora DejaVuSans-Bold.ttf file.
  - The problem with the executable is solved, put it back in %{_bindir}


author: Alexandre Moine <nobrakal@gmail.com> 6.6-1
changelog:
  - Update to new upstream.
  - Create a subpackage for music.
  - Set the correct path for the music-info file.
  - Fix typo.


author: Alexandre Moine <nobrakal@gmail.com> 7.4-1.h
changelog:
  - Update to new upstream
  - Force code relocation with -fPIC
  - Remove license: COPYING, since the file was removed by upstream (I contact them about it)


author: Alexandre Moine <nobrakal@gmail.com> 8.3-1.j
changelog:
  - Update to new upstream
  - Make music subpackage a noarch subpackage
  - Add lipng-devel as a new BuildRequires
  - Update appdata file
  - Update desktop file (thanks Rémi Verschelde)


author: <nobrakal@gmail.com> 8.3-2.j
changelog:
  - Add mtrand as a bundled lib, and add BSD licence
  - Add savepng as a bundled lib, and add zlib license
  - Update appdata.xml file with new licence and open age rating


author: Jiri Vanek <jvanek@redhat.com> 1.7-4
changelog:
  - added forgotten slaves of itweb-settings policyeditor
  - Own %{_datadir}/%{name} dir
  - Mark non-English man pages with %lang
  - Install COPYING as %license
  - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270


author: - Jiri Vanek <jvanek@redhat.com> -1.7.1-3
changelog:
  - added buildrequires on gcc/gcc-c++
  - to follow new packaging guidelines which no longer automatically pulls gcc/c++ to build root


author: - Jiri Vanek <jvanek@redhat.com> -1.7.1-5
changelog:
  - added 1473-1480.patch
  - added support for javafx-desc and so allwong run of pure-javafx only applications
  - --nosecurity enhanced for possibility to skip invalid signatures
  - enhanced to allow resources to be read also from j2se/java element (OmegaT)


author: Gabriel Krisman Bertazi <krisman@linux.vnet.ibm.com> - 2.4.8-1
changelog:
  - Rebase to 2.4.8
  - Move to Autotools
  - Remove unused files
  - Rebase patch 0001 to use autotools
  - Install bash completion
  - Spec file clean up


author: Ivan Romanov <drizt@land.ru> - 2.0.3-1
changelog:
  - updated to 2.0.3
  - 2.0.3 introduces some api/abi breaking. They fixed/workarounded.
  - corrected description
  - parallel-installable -qt5 support. some redesign. (#1234209)


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.8.rc6.2
changelog:
  - Fix an issue where some suppressed diff nodes are still visible in change reports
    This implies applying upstream patch:
     "[PATCH] A suppressed diff node implies suppressing all equivalent nodes too"


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.8.rc6.3
changelog:
  - Fix upstream Bug 20927 - Segfault when abidiff is invoked with $HOME empty
    Apply the upstream patch here.


author: Dodji Seketeli <dodji@redhat.com> - 1.0-1
changelog:
  - Update to upstream 1.0 tarball
  - Adjust tarball_revision and tarball_name macros
  - Adjust Release macro
  - Remove the koji build require as python2-koji is enough
  - Replace the pyxdg build require with the python2-pyxdg one.
  - Added missing build and runtime require 'mailcap' to allow
    fedabipkgdiff to detect RPM files
  - Update description to account for the new kmidiff tool
  - Remove patches that got applied upstream:
    0001-A-suppressed-diff-node-implies-suppressing-all-equiv.patch
    0001-Bug-20927-Segfault-when-HOME-is-not-set.patch
    0001-Fix-aborting-when-reading-.foo-symbols-from-a-ppc64-.patch
  - Add kmidiff to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 1.1-1
changelog:
  - Update to upstream 1.1
  - Use python2-sphynx, rpm-python2, python2-rpm rather than
    python-sphinx, rpm-python.


author: Sergey Avseyev <sergey.avseyev@gmail.com> - 2.8.4-3
changelog:
  - replace ldconfig scriptlets with macro
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Mihkel Vain <mihkel@fedoraproject.org> - 3.12.3-1
changelog:
  - New upstream release
  - Add openssl v1.1 support via libdigidocpp-opensslv1.1.patch
  - Remove bundled openssl


author: Rich Mattes <richmattes@gmail.com> - 0.5.7-2
changelog:
  - Re-enable OpenCV bindings (rhbz#1551748)
  - Fix bogus obsoletes (rhbz#1537213)
  - Update udev rule to allow device access to "video" group


author: Caolán McNamara <caolanm@redhat.com> - 1:5.3.7.2-2
changelog:
  - fix RTL popover placement under gtk3
  - Resolves: rhbz#1505379 gtk3 + X open comboboxes block session


author: Eike Rathke <erack@redhat.com> - 1:5.3.7.2-3
changelog:
  - Resolves: tdf#111428 swap ScColumn::mnBlkCountFormula
  - impress constantly trying to create an internal Sidebar


author: Caolán McNamara <caolanm@redhat.com> - 1:5.3.7.2-9
changelog:
  - CVE-2018-10119 Use After Free in Structured Storage parser
  - CVE-2018-10120 Heap Buffer Overflow in MSWord Customizations parsing


author: Jiri Kastner <jkastner@redhat.com> - 0.8.0-1
changelog:
  - rebase to 0.8.0
  - softhsm-devel added to dependency and comments to config file regarding selinux (rhbs#1250975)


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.4.15-1
changelog:
  - Fix CVE-2017-7651 (rhbz#1551755, rhbz#1551754)
  - Fix CVE-2017-7652 (rhbz#1551743, rhbz#1551745)
  - Update to new upstream version 1.4.15


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.3.2-12
changelog:
  - Add a contrib section for event handlers
  - Fix BZ#1476346
  - Fix BZ#1476238
  - Remove some contrib makes as not currently implemented for anything other than x86_64


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.3.4-1
changelog:
  - Update to 4.3.4
  - Rebase patches to 4.3.4
  - Change configure to match upstream recommendations.
  - Get the docs from doxygen added.
  - Remove the rpmbuild in contrib so other arches can build


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.3.4-2
changelog:
  - Merge patches from EPEL tree to master
  - Fix contrib entries
  - Use rpmlint to fix items in spec file


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.3.4-5
changelog:
  - Fix entry for nagios not stopping correctly sometimes
  - Try to make kill smarter. Needs to use the RH killproc instead


author: Stephen Smoogen <smooge@fedoraproject.org> - 2.2.1-4git
changelog:
  - Add explicit file require. Fix BZ# 1470823
  - Add explicit file require. Fix BZ# 1471007
  - Add explicit file require. Fix BZ# 1471012


author: Stephen Smoogen <smooge@fedoraproject.org> - 2.2.1-8
changelog:
  - remove git from the release as it isn't standard
  - Fix BZ#1512892
  - Fix BZ#1512380
  - Fix BZ#1500028
  - Fix BZ#1494080
  - Fix BZ#1478721


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.2.0-5
changelog:
  - Make sure nrpe works with different selinux names between 5,6 and 7
  - For some reason the selinux module still does not install unless by force on EL6.


author: Tom Callaway <spot@fedoraproject.org> - 2:2016.2.22-4
changelog:
  - apply patch for CVE-2017-0358
  - NOTE: Fedora does not setuid ntfs-3g, so it should not be vulnerable 
    but some users might make this change so we applied the patch anyways


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-3
changelog:
  - s390x: Fix address of caml_raise_exn in native dynlink modules.
    (https://caml.inria.fr/mantis/view.php?id=7405)


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-4
changelog:
  - riscv64: Fix intermediate operands.
    (https://github.com/nojb/riscv-ocaml/issues/1)
  - Temporarily disable emacs subpackage on riscv64.


author: Richard W.M. Jones <rjones@redhat.com> - 4.04.0-10
changelog:
  - Fix: ocaml: Insufficient sanitisation allows privilege escalation for
    setuid binaries (CVE-2017-9772) (RHBZ#1464920).


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.5-10.fc26.1
changelog:
  - Subpackage ocaml-gettext-camomile-devel should depend on
    ocaml-gettext-camomile (thanks: Pino Toscano).


author: Paul Wouters <pwouters@redhat.com> - 1.03_08-1
changelog:
  - Updated to 1.04 - rewrite to use custom code to support openssl-1.1
  - Package changed from noarch to arch


author: David Tardon <dtardon@redhat.com> - 0.52.0-11
changelog:
  - Resolves: rhbz#1531383 CVE-2017-1000456 Invalid read in TextPool::addWord()
    causes crash and can lead to overflow in subsequent calculations


author: Devrim Gündüz <devrim@gunduz.org> - 2.3.1-1
changelog:
  - Update to 2.3.1, per changes described at
    http://postgis.net/2016/11/28/postgis-2.3.1
  - Update previous version to 2.2.4
  - Fix a few rpmlint warnings.


author: Devrim Gündüz <devrim@gunduz.org> - 2.3.2-1
changelog:
  - Update to 2.3.2, per changes described at
    http://postgis.net/2017/01/31/postgis-2.3.2/
    rhbz#1418136


author: Devrim Gündüz <devrim@gunduz.org> - 2.3.3-1
changelog:
  - Update to 2.3.3, per changes described at
    http://postgis.net/2017/07/01/postgis-2.3.3/
    rhbz #1467032


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-6
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-5
changelog:
  - Related: upstream#3436 - Certificates used in unit tests have limited
                             lifetime
  - Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update
                              process is terminated with a signal
  - Resolves: upstream#3726 - SSSD with ID provider 'ad' should give a warning
                              in case the ldap schema is manually changed to
                              something different than 'ad'.
  - Related: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                             set.
  - Resolves: upstream#3719 - The SSSD IPA provider allocates information about
                              external groups on a long lived memory context,
                              causing memory growth of the sssd_be process
  - Resolves: upstream#3728 - Request by ID outside the min_id/max_id limit of a
                              first domain does not reach the second domain
  - Resolves: upstream#3731 - nss_clear_netgroup_hash_table(): only remove
                              entries from the hash table, do not free them
  - Resolves: upstream#3595 - ID override GID from Default Trust View is not
                              properly resolved in case domain resolution order
                              is set


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-7
changelog:
  - Related: upstream#3436 - Certificates used in unit tests have limited
                             lifetime
  - Add: "ExcludeArch: armv7hl"


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-7
changelog:
  - Add missing parameter for systemd scriptlets
    https://bugzilla.redhat.com/show_bug.cgi?id=1507890


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Patrick Monnerat <pm@datasphere.ch> 1.0.0-2
changelog:
  - Patch "nonstdext" avoids segfault when viewing cert with
    non-standard extension.
    https://bugzilla.redhat.com/show_bug.cgi?id=1164340


author: Patrick Monnerat <patrick.monnerat@dh.com> 1.3.2-1
changelog:
  - New upstream release.
  - Patch "oidfieldcursor" to restore normal cursor behavior on OID resolver
    input field.
  - Drop README.update.


author: Patrick Monnerat <patrick@monnerat.net> 1.4.0-1
changelog:
  - New upstream release 1.4.0.
  - Use qt5.
  - Remove obsolete rpm scriptlets.
  - Remove xca_db_stat from install.


author: Patrick Monnerat <patrick@monnerat.net> 1.4.1-1
changelog:
  - New upstream release.
  - New URL and source location.
  - "Modernize" spec file.
  - BR gcc-g++.
    Fixes BZ #1568760.


