# changelog

author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.48.2
   - tests: sign new nested-18|20* models to allow for generic serials
   - secboot: add extra paranoia when waiting for that fde-reveal-key
   - tests: backport netplan workarounds from #9785
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - secboot: add new LockSealedKeys() that uses either TPM or
     fde-reveal-key
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - secboot: use `fde-reveal-key` if available to unseal key
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - o/devicestate: save model with serial in the device save db
   - devicestate: add runFDESetupHook() helper
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - hookstate: add new HookManager.EphemeralRunHook()
   - update-pot: fix typo in plural keyword spec
   - store,cmd/snap-repair: increase initial expontential time
     intervals
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - github: run nested suite when commit is pushed to release branch
   - tests: reset fakestore unit status
   - tests: fix uc20-create-parition-* tests for updated gadget
   - hookstate: implement snapctl fde-setup-{request,result}
   - devicestate: make checkEncryption fde-setup hook aware
   - client,snapctl: add naive support for "stdin"
   - devicestate: support "storage-safety" defaults during install
   - snap: use the boot-base for kernel hooks
   - vendor: update secboot repo to avoid including secboot.test binary


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49
   - many: add Delegate=true to generated systemd units for special
     interfaces
   - cmd/snap-bootstrap: rename ModeenvFromModel to
     EphemeralModeenvForModel
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - osutil: skip TestReadBuildGo inside sbuild
   - tests: fix umount for snapd snap on fsck-on-boot test
   - snap/info_test.go: add unit test cases for bug
   - tests/main/services-after-before: add regression spread test
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - OpenGL interface: Support more Tegra libs
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - cmd: make string/error code more robust against errno leaking
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - tests: update test pkg for fedora and centos
   - gadget: pass sector size in to mkfs family of functions, use to
     select block sz
   - o/snapshotstate: fix returning of snap names when duplicated
     snapshot is detected
   - tests/main/snap-network-errors: skip flushing dns cache on
     centos-7
   - interfaces/builtin: Allow DBus property access on
     org.freedesktop.Notifications
   - cgroup-support.c: fix link to CGROUP DELEGATION
   - osutil: update go-udev package
   - packaging: fix arch-indep build on debian-sid
   - {,sec}boot: pass "key-name" to the FDE hooks
   - asserts: sort by revision with Sort interface
   - gadget: add gadget.ResolveContentPaths()
   - cmd/snap-repair: save base snap and mode in device info; other
     misc cleanups
   - tests: cleanup the run-checks script
   - asserts: snapasserts method to validate installed snaps against
     validation sets
   - tests: normalize test tools - part 1
   - snapshotstate: detect duplicated snapshot imports
   - interfaces/builtin: fix unit test expecting snap-device-helper at
     /usr/lib/snapd
   - tests: apply workaround done for snap-advise-command to apt-hooks
     test
   - tests: skip main part of snap-advise test if 429 error is
     encountered
   - many: clarify gadget role-usage consistency checks for UC16/18 vs
     UC20
   - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable
     broken tests on sid
   - interfaces/builtin: more drive by fixes, import ordering, removing
     dead code
   - tests: skip interfaces-openvswitch spread test on debian sid
   - interfaces/apparmor: drive by comment fix
   - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree
     usage
   - cmd/libsnap-confine-private: make unit tests execute happily in a
     container
   - interfaces, wrappers: misc comment fixes, etc.
   - asserts/repair.go: add "bases" and "modes" support to the repair
     assertion
   - interfaces/opengl: allow RPi MMAL video decoding
   - snap: skip help output tests for go-flags v1.4.0
   - gadget: add validation for "$kernel:ref" style content
   - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside
     containers
   - spdx: update to SPDX license list version: 3.11 2020-11-25
   - tests: improve hotplug test setup on classic
   - tests: update check to verify is the current system is arm
   - tests: use os-query tool to check debian, trusty and tumbleweed
   - daemon: start moving implementation to api_snaps.go
   - tests/main/snap-validate-basic: disable test on Fedora due to go-
     flags panics
   - tests: fix library path used for tests.pkgs
   - tests/main/cohorts: replace yq with a Python snippet
   - run-checks: update to match new argument syntax of ineffassign
   - tests: use apiBaseSuite for snapshots tests, fix import endpoint
     path
   - many: separate consistency/content validation into
     gadget.Validate|Content
   - o/{device,snap}state: enable devmode snaps with dangerous model
     assertions
     secboot: add test for when systemd-run does not honor
     RuntimeMaxSec
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - o/daemon: validation sets api and basic spread test
   - gadget: move BuildPartitionList to install and make it unexported
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - tests: add os query commands for subsystems and architectures
   - o/snapshotstate: don't set auto flag in the snapshot file
   - tests: use os.query tool instead of comparing the system var
   - testutil: use the original environment when calling shellcheck
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and
     instead set the implicit labels when loading the yaml
   - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal-
     key
   - gadget/quantity: introduce Offset, start using it for offset
     related fields in the gadget
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - tests/main/fake-netplan-apply: disable test on xenial for now
   - daemon: start splitting snaps op tests out of api_test.go
   - testutil: make DBusTest use a custom bus configuration file
   - tests: replace pkgdb.sh (library) with tests.pkgs (program)
   - gadget: prepare gadget kernel refs (0/N)
   - interfaces/builtin/docker-support: allow /run/containerd/s/...
   - cmd/snap-preseed: reset run inhibit locks on --reset.
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - daemon: reorg snap.go and split out sections and icons support
     from api.go
   - sandbox/seccomp: use snap-seccomp's stdout for getting version
     info
   - daemon: split find support to its own api_*.go files and move some
     helpers
   - tests: move snapstate config defaults tests to a separate file.
   - bootloader/{lk,lkenv}: followups from #9695
   - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite
   - gadget,o/devicestate: set implicit values for schema and role
     directly instead of relying on Effective* accessors
   - daemon: split aliases support to its own api_*.go files
   - gadget: start separating rule/convention validation from basic
     soundness
   - cmd/snap-update-ns: add better unit test for overname sorting
   - secboot: use `fde-reveal-key` if available to unseal key
   - tests: fix lp-1899664 test when snapd_x1 is not installed in the
     system
   - tests: fix the scenario when the "$SRC".orig file does not exist
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - devicestate: add runFDESetupHook() helper
   - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv
     structs
   - daemon: split unsupported buy implementation to its own api_*.go
     files
   - tests: download timeout spread test
   - gadget,o/devicestate: hybrid 18->20 ready volume setups should be
     valid
   - o/devicestate: save model with serial in the device save db
   - bootloader: add check for prepare-image time and more tests
     validating options
   - interfaces/builtin/log_observe.go: allow controlling apparmor
     audit levels
   - hookstate: refactor around EphemeralRunHook
   - cmd/snap: implement 'snap validate' command
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - boot: observe successful command line update, provide a default
   - tests: New queries for the os tools
   - bootloader/lkenv: specify backup file as arg to NewEnv(), use ""
     as path+"bak"
   - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk
     iface
   - daemon: split out snapctl support and snap configuration support
     to their own api_*.go files
   - snapshotstate: improve handling of multiple errors
   - tests: sign new nested-18|20* models to allow for generic serials
   - bootloader: remove installableBootloader interface and methods
   - seed: cleanup/drop some no longer valid TODOS, clarify some other
     points
   - boot: set kernel command line in modeenv during install
   - many: rename disks.FindMatching... to FindMatching...WithFsLabel
     and err type
   - cmd/snap: suppress a case of spurious stdout logging from tests
   - hookstate: add new HookManager.EphemeralRunHook()
   - daemon: move some more api tests from daemon to daemon_test
   - daemon: split apps and logs endpoints to api_apps.go and tests
   - interfaces/utf: Add Ledger to U2F devices
   - seed/seedwriter: consider modes when checking for deps
     availability
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - cmd/snap-repair,store: increase initial retry time intervals,
     stalling TODOs
   - daemon: split interfacesCmd to api_interfaces.go
   - github: run nested suite when commit is pushed to release branch
   - client: reduce again the /v2/system-info timeout
   - tests: reset fakestore unit status
   - update-pot: fix typo in plural keyword spec
   - tests: remove workarounds that add "ubuntu-save" if missing
   - tests: add unit test for auto-refresh with validate-snap failure
   - osutil: add helper for getting the kernel command line
   - tests/main/uc20-create-partitions: verify ubuntu-save encryption
     keys, tweak not MATCH
   - boot: add kernel command lines to the modeenv file
   - spread: bump delta ref, tweak repacking to make smaller delta
     archives
   - bootloader/lkenv: add v2 struct + support using it
   - snapshotstate: add cleanup of abandonded snapshot imports
   - tests: fix uc20-create-parition-* tests for updated gadget
   - daemon: split out /v2/interfaces tests to api_interfaces_test.go
   - hookstate: implement snapctl fde-setup-{request,result}
   - wrappers, o/devicestate: remove EnableSnapServices
   - tests: enable nested on 20.10
   - daemon: simplify test helpers Get|PostReq into Req
   - daemon: move general api to api_general*.go
   - devicestate: make checkEncryption fde-setup hook aware
   - client/snapctl, store: fix typos
   - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files
     before doing apt ops
   - cmd/snap-bootstrap: update model cross-check considerations
   - client,snapctl: add naive support for "stdin"
   - many: add new "install-mode: disable" option
   - osutil/disks: allow building on mac os
   - data/selinux: update the policy to allow operations on non-tmpfs
     /tmp
   - boot: add helper for generating candidate kernel lines for
     recovery system
   - wrappers: generate D-Bus service activation files
   - bootloader/many: rm ConfigFile, add Present for indicating
     presence of bloader
   - osutil/disks: allow mocking DiskFromDeviceName
   - daemon: start cleaning up api tests
   - packaging/arch: sync with AUR packaging
   - bootloader: indicate when boot config was updated
   - tests: Fix snap-debug-bootvars test to make it work on arm devices
     and core18
   - tests/nested/manual/core20-save: verify handling of ubuntu-save
     with different system variants
   - snap: use the boot-base for kernel hooks
   - devicestate: support "storage-safety" defaults during install
   - bootloader/lkenv: mv v1 to separate file,
     include/lk/snappy_boot_v1.h: little fixups
   - interfaces/fpga: add fpga interface
   - store: download timeout
   - vendor: update secboot repo to avoid including secboot.test binary
   - osutil: add KernelCommandLineKeyValue
   - gadget/gadget.go: allow system-recovery-{image,select} as roles in
     gadget.yaml
   - devicestate: implement boot.HasFDESetupHook
   - osutil/disks: add DiskFromName to get a disk using a udev name
   - usersession/agent: have session agent connect to the D-Bus session
     bus
   - o/servicestate: preserve order of services on snap restart
   - o/servicestate: unlock state before calling wrappers in
     doServiceControl
   - spread: disable unattended-upgrades on ubuntu
   - tests: testing new fedora 33 image
   - tests: fix fsck on boot on arm devices
   - tests: skip boot state test on arm devices
   - tests: updated the systems to run prepare-image-grub test
   - interfaces/raw_usb: allow read access to /proc/tty/drivers
   - tests: unmount /boot/efi in fsck-on-boot test
   - strutil/shlex,osutil/udev/netlink: minimally import go-check
   - tests: fix basic20 test on arm devices
   - seed: make a shared seed system label validation helper
   - tests/many: enable some uc20 tests, delete old unneeded tests or
     TODOs
   - boot/makebootable.go: set snapd_recovery_mode=install at image-
     build time
   - tests: migrate test from boot.sh helper to boot-state tool
   - asserts: implement "storage-safety" in uc20 model assertion
   - bootloader: use ForGadget when installing boot config
   - spread: UC20 no longer needs 2GB of mem
   - cmd/snap-confine: implement snap-device-helper internally
   - bootloader/grub: replace old reference to Managed...Blr... with
     Trusted...Blr...
   - cmd/snap-bootstrap: add readme for snap-bootstrap + real state
     diagram
   - interfaces: fix greengrass attr namingThe flavor attribute names
     are now as follows:
   - tests/lib/nested: poke the API to get the snap revisions
   - tests: compare options of mount units created by snapd and snapd-
     generator
   - o/snapstate,servicestate: use service-control task for service
     actions
   - sandbox: track applications unconditionally
   - interfaces/greengrass-support: add additional "process" flavor for
     1.11 update
   - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.49-1
changelog:
  - Release snapd 2.49 to Fedora (RHBZ#1927314)
  - Include fix for CVE-2020-27352 (RHBZ#1927428, RHBZ#1927432)


author: Neal Gompa <ngompa13@gmail.com> - 1.47-1
changelog:
  - Update to 1.47
  - New API: snapd_channel_get_released_at
  - New API: SNAPD_ERROR_DNS_FAILURE
  - Fix tests breaking due to undefined order of results
  - Remove generated MOC file from tarball


author: Neal Gompa <ngompa13@gmail.com> - 1.48-1
changelog:
  - Update to 1.48
  - Many new APIs added
  - Allow searching via common-id
  - Add a description markdown parser
  - Replace SnapdConnection with SnapdPlugRef and SnapdSlotRef
  - Support updated connections API (/v2/connections)
  - Support updated /v2/interfaces&select= API
  - Support snap configuration API
  - Add Qt interface attribute API
  - Make snapd_client_set_socket_path revert to the default when NULL passed.
  - Fix C99 mode not being enabled on older versions of GCC


author: Neal Gompa <ngompa13@gmail.com> - 1.49-1
changelog:
  - Update to 1.49
  - New APIs for getting connections and deprecating older variants
  - Fix memory leaks
  - Use C99 variable style


author: Neal Gompa <ngompa13@gmail.com> - 1.54-1
changelog:
  - Update to 1.54
  - Add API to get snap website
  - Add purge option to remove
  - Switch build system to Meson
  - Fix Qt build with optimisation disabled
  - Fix tests breaking on json-glib < 1.2.4
  - Use C99 style variable definitions


author: Neal Gompa <ngompa13@gmail.com> - 1.55-1
changelog:
  - Update to 1.55
  - Add new APIs for download and logout actions
  - Add support for snap store logout
  - Fix QSnapdAuthData () constructor not copying discharge strings correctly
  - Remove obsolete screenshot parsing code
  - Make all snapd 404 errors return SNAPD_ERROR_NOT_FOUND


author: Neal Gompa <ngompa13@gmail.com> - 1.57-1
changelog:
  - Update to 1.57
  - Add snapd_interface_make_label
  - Add support for new snap types: "core", "base" and "snapd"
  - Change way GTK documentation is generated to avoid a Meson bug
  - Fix leak in markdown parser
  - Fix leak in logout code
  - Make build reproducible by fixing comment in generated file


author: Neal Gompa <ngompa13@gmail.com> - 1.58-1
changelog:
  - Update to 1.58
  - Fix GIR annotations on snapd_client_get_snap_conf
  - Put more information into error messages for unknown errors


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.3-1
changelog:
  - Resolves: rhbz#1696931 socat-1.7.3.3 is available
  - Resolves: rhbz#1612274 Man page scan results for socat
  - Disabled --enable-fips as its requires fipsld which we don't have.


author: David Woodhouse <dwmw2@infradead.org> - 2.6.1-3
changelog:
  - Resolves: rhbz#1831086 softhsm use-after-free on process exit
    Fix crash introduced by initial patch


author: Jan Friesse <jfriesse@redhat.com> - 20190319-1
changelog:
  - Add AUTHORS and COPYING
  - Fix version number in specfile
  - Use install -p to preserve timestamps
  - Use set_build_flags macro
  - Rebase to new version


author: Christophe Fergeau <cfergeau@redhat.com> - 0.36-4
changelog:
  - Add upstream patches fixing issues with the cursor becoming invisible
    in wayland environments
    Resolves: rhbz#1528200


author: Christophe Fergeau <cfergeau@redhat.com> - 0.36-5
changelog:
  - Use actual upstream patches, I made a mistake in the previous build
    and used patches which were only applied locally


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Peter Oliver <rpm@mavit.org.uk> - 1.9.8.1287-2
changelog:
  - Use ALSA backend by default.  Works around #1901872, which causes some audio content to play at the wrong speed and pitch.


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1827564 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.14-1
changelog:
  - new version 4.14
  - Resolves: #1939927 - CVE-2020-25097 squid: improper input validation may allow
    a trusted client to perform HTTP Request Smuggling


author: Stephen Gallagher <sgallagh@redhat.com> - 2.6.0-1
changelog:
  - Update to 2.6.0
  - Can now generate an empty CRL file.
  - Can now create and store a Diffie-Hellman parameters (dhparams) file.
  - Support for setting a password on private keys.
  - Support for generating a client authentication certificate and key.
  - Better support for OpenSSL 1.0


author: Stephen Gallagher <sgallagh@redhat.com> - 2.6.2-1
changelog:
  - Update to 2.6.2
  - Handle very short and very long passphrases properly (fixes rhbz#1850183)
  - Drop upstreamed patch


author: Christopher Engelhard <ce@lcts.de> 2.4.0-9
changelog:
  - add bundled provides for fnv and simclist
  - add systemd dependency
  - fix changelog formatting
  - patch & use upstream service file
  - revert 05037d7b - disallow building on rhel < 6
  - make package own /usr/libexec/sshguard


author: Christopher Engelhard <ce@lcts.de> 2.4.0-10
changelog:
  - add missing dependencies
  - move examples to (docdir)/examples subfolder
  - prefix directories with %dir in %files
  - use complete & commented config files
  - add white/blacklisting


author: Christopher Engelhard <ce@lcts.de> 2.4.0-12
changelog:
  - include patch to fully whitelist localhost in IPv6/v4 (PR #56)
  - add explicit Requires: ipset to firewalld backend


author: Clark Williams <williams@redhat.com> - 1.0-4
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - gitignore: ignore object files and the stalld executable
  - Makefile: add 'static' target to link stalld statically
  - use FIFO for boosting (v3)
  - stalld: update usage message to include --force_fifo/-F option
  - stalld.c: fix sched_debug parsing and modify waiting task parsing


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Kalev Lember <klember@redhat.com> - 0.19.3-1
changelog:
  - 0.19.3
  - Don't replace upstream screenshots in appdata
  - Use desktop-file-validate rather than desktop-file-install
  - Validate appdata


author: Paul Wouters <pwouters@redhat.com> - 5.9.0-1
changelog:
  - Resolves: rhbz#1861747 strongswan-5.9.0 is available
  - Remove --enable-fips-mode=2, which defaults strongswan to FIPS only.
    (use fips_mode = 2 in plugins {} openssl {} in strongswan.conf to enable FIPS)


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used.


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28-1
changelog:
  - rebase to 1.8.28
  Resolves: rhbz#1761533
  - set always_set_home by default
  Resolves: rhbz#1728687
  - Sync sudoers options from rhel8 to fedora
  Resolves: rhbz#1761781
  - CVE-2019-14287
  Resolves: rhbz#1761584


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-0.1.b1
changelog:
  - update to latest development version 1.9.0b1
  - added sudo_logsrvd and sudo_sendlog to files and their appropriate man pages
  Resolves: rhbz#1787823
  - Stack based buffer overflow in when pwfeedback is enabled
  Resolves: rhbz#1796945
  - fixes: CVE-2019-18634 
  - By using ! character in the shadow file instead of a password hash can access to a run as all sudoer account
  Resolves: rhbz#1786709
  - fixes CVE-2019-19234
  - attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user
  Resolves: rhbz#1786705
  - fixes CVE-2019-19232


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-0.1.b4
changelog:
  - update to latest development version 1.9.0b4
  Resolves: rhbz#1816593
  - setrlimit(RLIMIT_CORE): Operation not permitted warning message fix
  Resolves: rhbz#1773148


author: Radovan Sroka <rsroka@redhat.com> - 1.9.2-1
changelog:
  - rebase to 1.9.2
  Resolves: rhbz#1859577
  - added logsrvd subpackage
  - added openssl-devel buildrequires
  Resolves: rhbz#1860653
  - fixed sudo runstatedir path
  - it was generated as /sudo instead of /run/sudo
  Resolves: rhbz#1868215
  - added /var/lib/snapd/snap/bin to secure_path variable
  Resolves: rhbz#1691996


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  -  updated sudo url
  Resolves: rhbz#1902758
  - enabled python plugin as a subpackage
  Resolves: rhbz#1909299
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Pete Walter <pwalter@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop opengl-game-wrapper.sh use
  - Update URL
  - Spec file cleanup
  - Remove ExcludeArch: ppc64le


author: Artur Iwicki <fedora@svgames.pl> - 0.5.4.4-1
changelog:
  - Update to upstream release v.0.5.4.4
  - Remove the /lib -> /lib64 shenanigans from %prep (issue solved upstream)


author: Jason Taylor <jtfas90@gmail.com> 5.0.3-1
changelog:
  - Upstream security/bugfix release
  - Updated reference, classification, threshold config file installs


author: Xavier Bachelot <xavier@bachelot.org> 6.2.56-1
changelog:
  - Update to 6.2.56 (Fixes CVE-2020-10936)
  - Fix typo in url and also socket location in lighttpd configuration (RHBZ#1812325)


author: Ding-Yi Chen <dchen@redhat.com> - 1:1.10.2-1
changelog:
  - Revert to v1 as Synergy 2 is back to beta
    https://symless.com/blog/synergy-2-back-beta
  - Following files/programs are gone
    * /usr/bin/synergy-core
    * /usr/share/pixmaps/synergy.ico
  - Following files/programs are back
    * /usr/bin/synergy
    * /usr/bin/syntool


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 245.6-1
changelog:
  - Update to latest stable version (some documentation updates, minor
    memory correctness issues) (#1815605, #1827467, #1842067)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 245.7-1
changelog:
  - A bunch of backported patches (#1853736, #1857783, #1830896,
    - Handling of user names that resemble numerical uids is tightened (CVE-2020-13776,
    - The hardware database is updated to the upstream version (#1849797)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 245.8-1
changelog:
  - Update to latest stable version (smaller fixes to the manager,
    homed, networkd, resolved, nspawn, sd-boot, bootctl, bless-boot,
    kernel-install, documentation, systemd-tty-ask-password-agent,
    udevd, coredump, systemd-analyze, tests) (#1856273, #1876905,
    - Do not fail in test because of kernel bug (#1803070)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 245.9-1
changelog:
  - Latest stable release (various smaller fixes to documentation, shell
    completions, support for newer kernels, compilation with newer meson and
    glibc)
  - 'systemctl import-environment' will ignore variables deemed invalid, so
    import-environment still works even if bash functions are exported (#1754395)
  - The pager will be executed in secure mode when systemctl and other tools
    are executed under changed euid


author: Sergio Correia <scorreia@redhat.com> - 7.6
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Pavel Raiskup <praiskup@redhat.com> - 1.31-1
changelog:
  - the latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2019-01/msg00001.html


author: Pavel Raiskup <praiskup@redhat.com> - 1.32-1
changelog:
  - the latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2019-02/msg00010.html
  - admit that we bundle paxutils project


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-1
changelog:
  - New version 4.9.3
  - Fixes CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452, CVE-2018-16300, CVE-2018-16228, CVE-2019-15166, CVE-2019-15167


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.1-3
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake changes
  - Apply upstream patch to allow for new FindTaglib.cmake in ECM 5.72


author: Tom Callaway <spot@fedoraproject.org> - 7:20200327-16
changelog:
  - move "mtxrun --generate" call from -kpathsea transfiletriggerin to -context
  - drop Requires(post): texlive-context from -kpathsea
  - add an explicit versioning on the dependency of texlive-texlive-scripts in -kpathsea (and vice versa)


author: Tom Callaway <spot@fedoraproject.org> - 7:20200327-21
changelog:
  - set TEXMFLOCAL during the context scriptlet to minimize the scope of where it looks during mtxrun --generate


author: Carl George <carl@george.computer> - 2.2.0-3.2020704git5a1c8d8
changelog:
  - Update to latest upstream commit
  - Add patch to use correct shell completion locations
  - Run test suite
  - Add provides for ag and bundled uthash


author: Martin Stransky <stransky@redhat.com> - 78.5.0-2
changelog:
  - Added fix for rhbz#1907267 (Thunderbird on Wayland launcher
    does not show up as 'running' in the dash)


author: Orion Poplawski <orion@nwra.com> - 78.6.1-2
changelog:
  - Own /usr/lib*/thunderbird/gtk2 directory
  - Provide /etc/thunderbird/pref (bug #1525709)
  - Filter package provides and requires


author: Fabian Affolter <mail@fabian-affolter.ch> - 3.4-2.20200530git6fb2162
changelog:
  - Fix license naming
  - Enable tests as upstream removed the unlicensed dependency
  - Add systemd unit file (rhbz#1819257)


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-6
changelog:
  - Backport upstream fix allowing Tigervnc to specify boolean valus in configuration
  - Revert removal of vncserver for F32 and F33


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.0-7
changelog:
  - Require xkbcomp directly, not xorg-x11-xkb-utils. The latter has had
    Provides xkbcomp for years.


author: Johannes Lips <hannes@fedoraproject.org> - 1.5.1-1
changelog:
  - update to upstream version 1.5.1
  - added the provides for bundled libraries
  - additional license MIT for bundled library


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.35-1
changelog:
  - Fix for CVE-2018-16737, CVE-2018-16738 and CVE-2018-16758 
  - Update to new upstream version 1.0.35


author: Petr Šabata <contyk@redhat.com> - 5.0-0.100.b8
changelog:
  - Include current Debian and Gentoo patches
  - Add ATCP, GMCP and OPT102 support
  - This is a big change, bumping the release quite a bit to reflect that


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-2
changelog:
  - License fixes.
  - *.so.* names fix
  - make_build fix
  - -doc fixes
  - check fixes
  - ldconfig call fix
  - compiler flags fixes


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-3
changelog:
  - Disabled only those tests that lock excessive numbers of pages (and will
    therefore fail on a system with default resource limits)
  - Disabled LTO, since it causes test failures on all file-based database tests
  - Added COPYING file in files section for -doc subpackage
  - Installing doc/ and api-doc/ subdirectories in -doc subpackage
  - Added example/ to -doc
  - Changed man pages wildcard from ..._*.1.* to ..._*.1*
  - Removed -lib/-libs mess
  - Excluded i686 arch


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-4
changelog:
  - 'Required: pkgconfig' removed from -devel
  - spec spaces/tabs resolved
  - Added CONTRIBUTING.md to -libs
  - examples/ moved from -doc to -devel
  - `excludearch i686` proven


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.9a-2
changelog:
  - update to version 2.9a, fixes rhbz #1692933
  - ChangeLog https://raw.githubusercontent.com/tmux/tmux/2.9/CHANGES
  - removed upstreamed patch


author: Tomas Korbar <tkorbar@redhat.com> - 1.3.1-1
changelog:
  - Rebase to 1.3.1 (rhbz#1510133)
  - New Upstream (rhbz#1821064)
  - Fix broken symlinks to system-fonts (rhbz#1821062)
  - Use GNU Free fonts instead of Dejavu, matching the upstream bundled fonts


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.31-20.1
changelog:
  - Fixed FTBFS with gcc-10, used X.Y release numbering not to break upgrade
    path to tucnak
    Resolves: rhbz#1794480


author: Petr Pisar <ppisar@redhat.com> - 0.21.0-12
changelog:
  - Convert a PNG icon with ImageMagick (bug #1800209)
  - License corrected to "GPL+"
  - Use system fonts


author: Peter Robinson <pbrobinson@fedoraproject.org> 2020.04-0.6-rc4
changelog:
  - 2020.04 RC4
  - Updates for NVIDIA Jetson platforms
  - Support RNG for random seed for KASLR on some Rockchip devices


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2020.04-2
changelog:
  - Fix ATF for new aarch64 devices
  - Fix Wandboard board detection (rhbz 1825247)
  - Fix mSD card on RockPro64
  - Enable (inital) Pinebook Pro


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-15
changelog:
  - Pull in FTBFS fix for exiv2-0.27 (#1671153)
  - use %make_build %make_install macros
  - FTBFS related to openmp support on f30+, workaround with --disable-openmp (for now)


author: Sérgio Basto <sergio@serjux.com> - 0.23-0.1
changelog:
  - The latest commits of ufraw made after 0.22 and some fixes found over the
    internet.
  - Re-enable openmp.


author: Sérgio Basto <sergio@serjux.com> - 0.23-0.7.20201114
changelog:
  - Update to git 20201114 with ufraw-gimp: properly send EXIF data to Gimp 2.9
    and later and dcraw updated to 9.28


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-1.20190401gitac96d055
changelog:
  - New version, switched to git snapshot
  - Conditionalized wireshark support
  - Disabled wireshark support, it's currently broken (upstream ticket #268)
  - Disabled tests, it's currently broken (upstream ticket #267)
  - Dropped boost169 patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-2.201904023gitc52f3f41
changelog:
  - New git snapshot
  - Added python2-numpy build requirement
  - Re-enabled tests for upstream to easily reproduce the problem


author: Jeremy Newton <alexjnewt AT hotmail DOT com> 1.0-2.20190403git1139876
changelog:
  - Update to newer git, fixes install issues and all patches upstreamed
  - Add missing static provides for devel


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.1-7
changelog:
  - Subpackage python2-unicorn has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: W. Michael Petullo <mike@flyn.org> - 1.0.2-0.1.rc3
changelog:
  - Update to 1.0.2-rc3 to satisfy pwntools (Red Hat Bugzilla #1836767 and #1833654)
  - Removed obsolete patch to use python2


author: Robert Scheck <robert@fedoraproject.org> 5.0.7-2
changelog:
  - Remove build-time path from rpath (#1891370 #c1)
  - Apply Fedora system-wide crypto policy (#1891370 #c1)
  - License breakdown in spec file (#1891370 #c1)


author: Attila Lakatos <alakatos@redhat.com> - 0.7.6-4
changelog:
  - added patch for libqb related permission issues
    resolves: rhbz#1776357
  - added patch to ensure that usbguard-daemons is still running after locked screen
    resolves: rhbz#1751861
  - added patch to fix permanent device policy changes


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-3
changelog:
  - rebase usbguard to 0.7.8
  - rebase selinux tarball to v0.0.4
  - enable forking style in unit file
  - added rules.d/ directory
  - set DevicePolicy to closed in unit file
  - usbguard prevented from writing conf via dontaudit rule
  Resolves: rhbz#1804713
  Resolves: rhbz#1789923
  Resolves: rhbz#1808527


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Jonathan Dieter <jdieter@gmail.com> - 4.18.9-1
changelog:
  - Update to 4.18.9
  - Add patch to fix problem importing device when another device is in
    /sys/devices/platform after vhci (#1631148)
  - Fix missing period in patch


author: Jonathan Dieter <jdieter@gmail.com> - 5.5-1
changelog:
  - Update to 5.5
  - Work around build failure on GCC 10
  - Remove unneeded hardened build flag (since all builds are hardened by default)


author: Carl George <carl@george.computer> - 2.0.18-1
changelog:
  - Latest upstream
  - Use openssl everywhere, instead of compat-openssl10 on F26+
  - Disable python2 subpackages on F31+


author: Jorge A Gallegos <kad@blegh.net> - 2.0.18-6
changelog:
  - change mkdirs for install -d (Jorge Gallegos)
  - Fix python plugins provides BZ 1628147 (Jorge Gallegos)
  - Add a fix for psgi + GCC10 BZ 1794335 (Jorge Gallegos)
  - Move path options outside main config BZ 1687403 (Jorge Gallegos)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.15.0-3
changelog:
  - Added a proposed patch from Nils Goroll providing support for vmod_saintmode
    on varnish-6.1.1 (closes rhbz #1676183)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.15.0-4
changelog:
  - Added a simple patch from upstream, fixing a formatting bug trigged on 32bit
  - Removed dependency on docutils. It is not necessary on released tarballs


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.15.0-7
changelog:
  - Added patch from Nils Goroll, compatibility for varnish-6.3, closes bz#1736943
  - Rebuilt against varnish-6.3.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.16.0-0.1.20200317git21d0c84
changelog:
  - Snapshot from 6.4 branch, rebuilt against varnish-6.4.0
  - Removed patches merged upstream
  - Delete 64-bit specific test on 32-bit arches


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.4-1
changelog:
  - Update to 1.0.4
  - Renamed config file (sample) included in RPM are not used and has to be renamed
    fixes (BZ#1926073)


author: Martin Gansser <martinkg@fedoraproject.org> - 1.0.6-1
changelog:
  - Add teletext2.ttf font in order to render special graphics characters properly
    fixes (BZ#1933480)
  - Update to 1.0.6


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2465-2
changelog:
  - remove vim-wrappers, vim is a binary again, vi and view stay as wrappers
  - removed vim -> vi functionality, because it cannot be optional and work
    for all cases at the same time


author: Benjamin Gilbert <bgilbert@backtick.net> - 8.8.2-1
changelog:
  - New release
  - Drop libvipsCC.so and python3-vips subpackage, both removed upstream
  - Fix vipsprofile shebang to point to python3


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 1.6-2
changelog:
  - Source tarball has no prebuilt manpages, so buildrequires python3-docutils
    for rst2man
  - Now run make check in parallel


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.10-2
changelog:
  - backport some fixes for test failures from upstream git
  - run tests in parallel and double timeout to prevent failures on armv7hl


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1755644)
  - drop obsolete patch
  - disable regress/regress-30.txt until fixed for python3
  - fix running test/wasm2c/spec tests under python3


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.13-1
changelog:
  - update to 1.0.13 (#1792557)
  - drop obsolete patch and work-arounds
  - bundle wasm-c-api (only wasm.h used for build)
  - double test timeout again to prevent failures on armv7hl


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.15-1
changelog:
  - update to 1.0.15 (#1832317)
  - pathfix.py no longer required, upstream moved to python3-only
  - skip new failing tests in i686 and ppc64le (reported upstream)


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1838384)
  - backport a fix for 32-bit arches
  - stop pretending it works on big-endian
  - use names and macros portable across Fedora and EPEL


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.19-1
changelog:
  - update to 1.0.19 (#1838384)
  - drop obsolete patches
  - adapt to https://www.fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds


author: Aleksei Bavshin <alebastr89@gmail.com> - 0.9.3-2
changelog:
  - Add patch for custom module signal handling regression
  - Add patch for network module crash with fmt 7.0
  - Add patch for broken updates in mpd and network modules


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-17
changelog:
  - Change URLs from HTTP to HTTPS
  - Add source file signature verification
  - Use %make_build and %make_install macros
  - Reformatting and minor changes for personal style preference
  - Fix man page glob
  - Use less broad globs
  - Add ABOUT-NLS, BACKLOG, and THANKS as %doc files
  - Rebuild configure script at build time
  - Add a %check section and run the tests
  - Add ncurses-devel BR for termcap/curses support
  - Add missing BR on gcc
  - Rebuild man pages in RPM build
  - Properly install license file (COPYING)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-18
changelog:
  - Improve summary and description text
  - Build HTML and PDF versions of the documentation
  - Add Latex2e to License field


author: Nicolas Chauvet <kwizart@gmail.com> - 1.32.1910230-2.20200909gitb585d21
changelog:
  - Improve description
  - Add --with tests conditional for tests
  - Switch to cmake3
  - And ExcludeArch inherited from folly


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.32.1910230-1.20210128git6aec23c
changelog:
  - Bump git commit to include upstream fixes
  - Use system folly instead of bundling it
  - Default to shared library build
  - Use %cmake instead of %cmake3
  - Use %bcond for tests and turn off by default due to flakiness
  - Update BuildRequires and Requires


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 7.0.93-1
changelog:
  - Update to RC1 for Weston 8.0 (version 7.0.93)
  - Remove have_simple_dmabuf_drm_client variable
  - The executable weston-simple-dmabuf-drm is gone


author: Leigh Scott <leigh123linux@gmail.com> - 1.0.20200319-2
changelog:
  - Add missing config directory
  - Remove default buildroot BuildRequires
  - Simplify doc install
  - Remove commented lines
  - Use correct macro for bash-completion


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Walker <grumpey0@gmail.com> - 0.10.0
changelog:
  - Updated to version 0.10.0 (https://github.com/swaywm/wlroots/releases/tag/0.10.0)

  Mon Jan 20 2020 Jan Staněk <jstanek@redhat.com> - 0.9.1-1
  - Upgrade to version 0.9.1 (https://github.com/swaywm/wlroots/releases/tag/0.9.1)


author: Damian Wrobel <dwrobel@ertelnet.rybnik.pl> - 0.9.27-6
changelog:
  - Remove -v from the forgemeta
  - Remove instead of exclude logrotate.d directory
  - Use %{_prefix} instead of /usr
  - Add %systemd_{*} scriplets


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 1.1.0-1
changelog:
  - add patch for version number
  - improved the source tag
  - updated to the new upstream version
  - initail spec file


author: Davide Caratti <dcaratti@redhat.com> - 1:2.7-5
changelog:
  - fix SAE and EAP_PWD vulnerabilities:
    CVE-2019-9494 (cache attack against SAE)
    CVE-2019-9495 (cache attack against EAP-pwd)
    CVE-2019-9496 (SAE confirm missing state validation in hostapd/AP)
    CVE-2019-9497 (EAP-pwd server not checking for reflection attack)
    CVE-2019-9498 (EAP-pwd server missing commit validation for scalar/element)
    CVE-2019-9499 (EAP-pwd peer missing commit validation for scalar/element)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.8-1
changelog:
  - Update to 2.8 upstream release, to include latest fix for NULL
    pointer dereference when EAP-PWD peer receives unexpected EAP
    fragments (CVE-2019-11555, rh #1701759)


author: Sérgio Basto <sergio@serjux.com> - 0.9.16-1
changelog:
  - Update to 0.9.16
  - Java viewers moved to
    https://github.com/LibVNC/libvncserver/tree/master/webclients/java-applet
  - classes and jars have been removed from upstream sources.
  - Remove support to EL5
  - Encoding and permissions of files seems that are correct, no need to fix.
  - rpmlint doesn't find any hardcoded rpath


author: Petr Pisar <ppisar@redhat.com> - 0.9.16-2
changelog:
  - Modernize a spec file
  - License corrected from GPLv2 to GPLv2+
  - Enforce system crypto policy
  - Normalize ChangeLog encoding
  - Fix building with GCC 10 properly
  - Fix a NULL pointer dereference in a cursor handler (upstream bug #123)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-20
changelog:
  - Build API documentation with Doxygen
  - Update summaries and descriptions from upstream
  - Enable at least the XPath tests
  - Drop unused old tarball and patches from source RPM


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-21
changelog:
  - Fixes for API documentation build
  - Ensure we compile with additional hardening flags even on EPEL


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.106-6
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Use gcc -fcommon flag to build


author: Michael Young <m.a.young@durham.ac.uk> - 4.13.1-8
changelog:
  - x86 PV guest INVLPG-like flushes may leave stale TLB entries
          [XSA-286, CVE-2020-27674] (#1891092)


author: Michael Young <m.a.young@durham.ac.uk> - 4.13.2-5
changelog:
  - xenstore watch notifications lacking permission checks [XSA-115,
  	CVE-2020-29480] (#1908091)
  - Xenstore: new domains inheriting existing node permissions [XSA-322,
  	CVE-2020-29481] (#1908095)
  - Xenstore: wrong path length check [XSA-323, CVE-2020-29482] (#1908096)
  - Xenstore: guests can crash xenstored via watchs [XSA-324, CVE-2020-29484]
  	(#1908088)
  - Xenstore: guests can disturb domain cleanup [XSA-325, CVE-2020-29483]
  	(#1908087)
  - oxenstored memory leak in reset_watches [XSA-330, CVE-2020-29485]
  	(#1908000)
  - undue recursion in x86 HVM context switch code [XSA-348, CVE-2020-29566]
  	(#1908085)
  - oxenstored: node ownership can be changed by unprivileged clients
  	[XSA-352, CVE-2020-29486] (#1908003)
  - oxenstored: permissions not checked on root node [XSA-353, CVE-2020-29479]
  	(#1908002)
  - FIFO event channels control block related ordering [XSA-358,
  	CVE-2020-29570] (#1907931)
  - FIFO event channels control structure ordering [XSA-359, CVE-2020-29571]
  	(#1908089)


author: Michael Young <m.a.young@durham.ac.uk> - 4.13.2-7
changelog:
  - Linux: display frontend "be-alloc" mode is unsupported (comment only)
          [XSA-363, CVE-2021-26934] (#1929549)
  - arm: The cache may not be cleaned for newly allocated scrubbed pages
          [XSA-364, CVE-2021-26933] (#1929547)


author: Michael Young <m.a.young@durham.ac.uk> - 4.13.3-1
changelog:
  - update to 4.13.3
    remove patches now included or superceded upstream
    adjust xen.hypervisor.config


author: Greg Hellings <greg.hellings@gmail.com> - 4.1.0-5
changelog:
  - Change to CMake build process
  - Add several BRs
  - Include patch from upstream that adds CMake (TBR 4.1.1 or later)


author: Greg Hellings <greg.hellings@gmail.com> - 4.2.1-1
changelog:
  - Upstream release 4.2.1
  - Remove patches
  - Remove GConf2 and libgsf dependencies
  - Removed Xiphos.ogg doc
  - Added Italian help translation


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0
  - Drop patch 0001-dri3-Always-flush-glamor-before-sharing-pixmap-stora.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.7-1
changelog:
  - xserver 1.20.7
  - backport from stable "xserver-1.20-branch" up to commit ad7364d8d
    (for mutter fullscreen unredirect on Wayland)
  - Update videodrv minor ABI as 1.20.7 changed the minor ABI version
    (backward compatible, API addition in glamor)
  - Rebase Xwayland randr resolution change emulation support patches


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.7-2
changelog:
  - Fix a crash on closing a window using Present found upstream:
    https://gitlab.freedesktop.org/xorg/xserver/issues/1000


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.0.17-1
changelog:
  - Update to 1.0.17 (#1798239)
  - Drop unneeded texlive dependencies
  - Fix build with translations parameter


author: Antonio Trande <sagitter@fedoraproject.org> - 4.0.2-2
changelog:
  - Built on EPEL8
  - Drop (obsolete) python-websockify dependency
  - Add MPLv2.0 LICENSE file for HTML5 version


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.14-2
changelog:
  - Bump up to 0.9.14
  - Add a set of patches to deal with new GCC warnings/errors
  - Do not emit warning on failed architecture detection
  - Exclude s390x arch for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.44-4
changelog:
  - Some spec file cleanup, deleting conditions for no longer supported branches
  - Use %set_build_flags
  - F-33+: enable systemd integration


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.44-5
changelog:
  - FuzzyFlakesFreeFlake: avoid double free on subsequent calls
    such as when ConfigureNotify event happens (bug 1884822)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.45-1
changelog:
  - Update to 5.45
  - asm6502.c/immediate: readd free() call accidentally removed during gcc warnings fix
  - beats/draw_beats: avoid integer overflow by multiplication


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 6.3.1-2
changelog:
  - Add dependency on rubygem-asciidoc to get man pages.
  - Increase test timeouts to avoid build failures.
  - Disable architectures that fail to work.
  - Use external BLAS library for matmul.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.0-1
changelog:
  - Update to version 0.8.0
  - Drop patches xxhash-compiler-warning-32-bit.patch (accepted upstream)
    and xxhash-pkgconfig.patch (issue fixed upstream)
  - Fix empty version in .pc file


author: Jerry James <loganjerry@gmail.com> - 2.6.2-1
changelog:
  - Version 2.6.2
  - Drop upstreamed -missing-typedef patch
  - Add -big-endian patch to fix s390x build
  - Add -cryptominisat5 patch to fix build with recent cryptominisat releases
  - Skip tests on 32-bit platforms; some tests fail due to the limited size of a
    C integer


author: Jon Burgess <jburgess777@gmail.com> - 0.8-1
changelog:
  - Updated to latest upstream release
  - Make sure package built with Fedora compile flags
  - Fix assert while running tests
  - Fixes FTBFS #1606769


author: Petr Šabata <contyk@redhat.com> - 0.4.3-1
changelog:
  - 0.4.3 bump
  - Now includes more icons!
  - Based on Ankur Sinha's PR, https://src.fedoraproject.org/rpms/zathura/pull-request/1


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.4.3-4
changelog:
  - Includes patch to correctly set the application ID
  - Corrects icon and application window grouping on wayland


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.1-2
changelog:
  - Fix compilation on GCC 4.4.7 so it builds on EL6
  - Add missing sources
  - Also, zchunk will now automatically do all your taxes


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 4.1.6-11
changelog:
  - Backport patches to fix test failures in build
  - Cleanup spec a little
  - Use explicit soname version in file list


author: Justin W. Flory <jflory7@fedoraproject.org> - 1.0.3-1
changelog:
  - Fix reused integers from being optimized out.
  - Props to Jan Drögehoff (FAS: sentry) for sending this fix upstream to avoid carrying a Fedora-specific patch.
  - Remove grues.


