# changelog

author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.44.1
   - randutil: switch back to setting up seed with lower entropy data
   - interfaces/greengrass-support: fix typo
   - packaging,tests: ensure debian-sid builds without vendor/
   - travis.yml: run unit tests with go/master as well
   - cmd/snap-update-ns: ignore EROFS from rmdir/unlink


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.44.2
   - packaging: detect/disable broken seeds in the postinst
   - cmd/snap,seed: validate full seeds (UC 16/18)
   - snap: add `snap debug state --is-seeded` helper
   - devicestate: generate warning if seeding fails
   - store: support for search API v2
   - cmd/snap-seccomp/syscalls: update the list of known syscalls
   - snap/cmd: the model command needs just a client, no waitMixin
   - tests: cleanup security-private-tmp properly
   - wrappers: fix timer schedules that are days only
   - tests: update proxy-no-core to match latest CDN changes
   - cmd/snap-failure,tests: make snap-failure more robust
   - tests, many: don't use StartLimitInterval anymore, unify snapd-
     failover variants, build snapd snap for UC16 tests


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.44.3
   - tests: fix racy pulseaudio tests
   - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS
   - tests: update snap-preseed --reset logic
   - tests: backport partition fixes
   - cmd/snap: don't wait for system key when stopping
   - interfaces/many: miscellaneous policy updates xliv
   - tests/main/uc20-snap-recovery: use 20.04 system
   - tests: skip "/etc/machine-id" in "writablepaths
   - interfaces/docker-support: add overlays file access


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.45
   - o/devicestate: support doing system action reboots from recover
     mode
   - vendor: update to latest secboot
   - tests: not fail when boot dir cannot be determined
   - configcore: only reload journald if systemd is new enough
   - cmd/snap-bootstrap/initramfs-mounts: append uuid to ubuntu-data
     when decrypting
   - tests/lib/prepare.sh: delete patching of the initrd
   - cmd/snap: coldplug auto-import assertions from all removable
     devices
   - cmd/snap: fix the order of positional parameters in help output
   - c/snap-bootstrap: port mount state mocking to the new style on
     master
   - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy
     as well
   - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline,
     unlock in recover mode initramfs
   - progress: tweak multibyte label unit test data
   - gadget: fix fallback device lookup for 'mbr' type structures
   - progress: fix progress bar with multibyte duration units
   - many: use /run/mnt/data over /run/mnt/ubuntu-data for uc20
   - many: put the sealed keys in a directory on seed for tidiness
   - cmd/snap-bootstrap: measure epoch and model before unlocking
     encrypted data
   - o/configstate: core config handler for persistent journal
   - bootloader/uboot: use secondary ubootenv file boot.sel for uc20
   - packaging: add "$TAGS" to dh_auto_test for debian packaging
   - tests: ensure $cache_dir is actually available
   - secboot,cmd/snap-bootstrap: add model to pcr protection profile
   - devicestate: do not use snap-boostrap in devicestate to install
   - tests: fix a typo in nested.sh helper
   - devicestate: add support for cloud.cfg.d config from the gadget
   - cmd/snap-bootstrap: cleanups, naming tweaks
   - testutil: add NewDBusTestConn
   - snap-bootstrap: lock access to sealed keys
   - overlord/devicestate: preserve the current model inside ubuntu-
     boot
   - interfaces/apparmor: use differently templated policy for non-core
     bases
   - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing
     syscalls
   - cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-seed first,
     other misc changes
   - o/snapstate: tweak "waiting for restart" message
   - boot: store model model and grade information in modeenv
   - interfaces/firewall-control: allow -legacy and -nft for core20
   - boot: enable makeBootable20RunMode for EnvRefExtractedKernel
     bootloaders
   - boot/bootstate20: add EnvRefExtractedKernelBootloader bootstate20
     implementation
   - daemon: fix error message from `snap remove-user foo` on classic
   - overlord: have a variant of Mock that can take a state.State
   - tests: 16.04 and 18.04 now have mediating pulseaudio (again)
   - seed: clearer errors for missing essential snapd or core snap
   - cmd/snap-bootstrap/initramfs-mounts: support
     EnvRefExtractedKernelBootloader's
   - gadget, cmd/snap-bootstrap: MBR schema support
   - image: improve/adjust DownloadSnap doc comment
   - asserts: introduce ModelGrade.Code
   - tests: ignore user-12345 slice and service
   - image,seed/seedwriter: support redirect channel aka default
     tracks
   - bootloader: use binary.Read/Write
   - tests: uc20 nested suite part II
   - tests/boot: refactor to make it easier for new
     bootloaderKernelState20 impl
   - interfaces/openvswitch: support use of ovs-appctl
   - snap-bootstrap: copy auth data from real ubuntu-data in recovery
     mode
   - snap-bootstrap: seal and unseal encryption key using tpm
   - tests: disable special-home-can-run-classic-snaps due to jenkins
     repo issue
   - packaging: fix build on Centos8 to support BUILDTAGS
   - boot/bootstate20: small changes to bootloaderKernelState20
   - cmd/snap: Implement a "snap routine file-access" command
   - spread.yaml: switch back to latest/candidate for lxd snap
   - boot/bootstate20: re-factor kernel methods to use new interface
     for state
   - spread.yaml,tests/many: use global env var for lxd channel
   - boot/bootstate20: fix bug in try-kernel cleanup
   - config: add system.store-certs.[a-zA-Z0-9] support
   - secboot: key sealing also depends on secure boot enabled
   - httputil: fix client timeout retry tests
   - cmd/snap-update-ns: handle EBUSY when unlinking files
   - cmd/snap/debug/boot-vars: add opts for setting dir and/or uc20
     vars
   - secboot: add tpm support helpers
   - tests/lib/assertions/developer1-pi-uc20.model: use 20/edge for
     kernel and gadget
   - cmd/snap-bootstrap: switch to a 64-byte key for unlocking
   - tests: preserve size for centos images on spread.yaml
   - github: partition the github action workflows
   - run-checks: use consistent "Checking ..." style messages
   - bootloader: add efi pkg for reading efi variables
   - data/systemd: do not run snapd.system-shutdown if finalrd is
     available
   - overlord: update tests to work with latest go
   - cmd/snap: do not hide debug boot-vars on core
   - cmd/snap-bootstrap: no error when not input devices are found
   - snap-bootstrap: fix partition numbering in create-partitions
   - httputil/client_test.go: add two TLS version tests
   - tests: ignore user@12345.service hierarchy
   - bootloader, gadget, cmd/snap-bootstrap: misc cosmetic things
   - tests: rewrite timeserver-control test
   - tests: fix racy pulseaudio tests
   - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS
   - tests: update snap-preseed --reset logic to accommodate for 2.44
     change
   - cmd/snap: don't wait for system key when stopping
   - sandbox/cgroup: avoid making arrays we don't use
   - osutil: mock proc/self/mountinfo properly everywhere
   - selinux: export MockIsEnforcing; systemd: use in tests
   - tests: add 32 bit machine to GH actions
   - tests/session-tool: kill cron session, if any
   - asserts: it should be possible to omit many snap-ids if allowed,
     fix
   - boot: cleanup more things, simplify code
   - github: skip spread jobs when corresponding label is set
   - dirs: don't depend on osutil anymore, mv apparmor vars to apparmor
     pkg
   - tests/session-tool: add session-tool --dump
   - github: allow cached debian downloads to restore
   - tests/session-tool: session ordering is non-deterministic
   - tests: enable unit tests on debian-sid again
   - github: move spread to self-hosted workers
   - secboot: import secboot on ubuntu, provide dummy on !ubuntu
   - overlord/devicestate: support for recover and run modes
   - snap/naming: add validator for snap security tag
   - interfaces: add case for rootWritableOverlay + NFS
   - tests/main/uc20-create-partitions: tweaks, renames, switch to
     20.04
   - github: port CLA check to Github Actions
   - interfaces/many: miscellaneous policy updates xliv
   - configcore,tests: fix setting watchdog options on UC18/20
   - tests/session-tool: collect information about services on startup
   - tests/main/uc20-snap-recovery: unbreak, rename to uc20-create-
     partitions
   - state: add state.CopyState() helper
   - tests/session-tool: stop anacron.service in prepare
   - interfaces: don't use the owner modifier for files shared via
     document portal
   - systemd: move the doc comments to the interface so they are
     visible
   - cmd/snap-recovery-chooser: tweaks
   - interfaces/docker-support: add overlayfs file access
   - packaging: use debian/not-installed to ignore snap-preseed
   - travis.yml: disable unit tests on travis
   - store: start splitting store.go and store_test.go into subtopic
     files
   - tests/session-tool: stop cron/anacron from meddling
   - github: disable fail-fast as spread cannot be interrupted
   - github: move static checks and spread over
   - tests: skip "/etc/machine-id" in "writablepaths" test
   - snap-bootstrap: store encrypted partition recovery key
   - httputil: increase testRetryStrategy max timelimit to 5s
   - tests/session-tool: kill leaking closing session
   - interfaces: allow raw access to USB printers
   - tests/session-tool: reset failed session-tool units
   - httputil: increase httpclient timeout in
     TestRetryRequestTimeoutHandling
   - usersession: extend timerange in TestExitOnIdle
   - client: increase timeout in client tests to 100ms
   - many: disentagle release and snapdenv from sandbox/*
   - boot: simplify modeenv mocking to always write a modeenv
   - snap-bootstrap: expand data partition on install
   - o/configstate: add backlight option for core config
   - cmd/snap-recovery-chooser: add recovery chooser
   - features: enable robust mount ns updates
   - snap: improve TestWaitRecovers test
   - sandbox/cgroup: add ProcessPathInTrackingCgroup
   - interfaces/policy: fix comment in recent new test
   - tests: make session tool way more robust
   - interfaces/seccomp: allow passing an address to setgroups
   - o/configcore: introduce core config handlers (3/N)
   - interfaces: updates to login-session-observe, network-manager and
     modem-manager interfaces
   - interfaces/policy/policy_test.go: add more tests'allow-
     installation: false' and we grant based on interface attributes
   - packaging: detect/disable broken seed in the postinst
   - cmd/snap-confine/mount-support-nvidia.c: add libnvoptix as nvidia
     library
   - tests: remove google-tpm backend from spread.yaml
   - tests: install dependencies with apt using --no-install-recommends
   - usersession/userd: add zoommtg url support
   - snap-bootstrap: fix disk layout sanity check
   - snap: add `snap debug state --is-seeded` helper
   - devicestate: generate warning if seeding fails
   - config, features: move and rename config.GetFeatureFlag helper to
     features.Flag
   - boot, overlord/devicestate, daemon:  implement requesting boot
     into a given recovery system
   - xdgopenproxy: forward requests to the desktop portal
   - many: support immediate reboot
   - store: search v2 tweaks
   - tests: fix cross build tests when installing dependencies
   - daemon: make POST /v2/systems/<label> root only
   - tests/lib/prepare.sh: use only initrd from the kernel snap
   - cmd/snap,seed: validate full seeds (UC 16/18)
   - tests/main/user-session-env: stop the user session before deleting
     the test-zsh user
   - overlord/devicestate, daemon: record the seed current system was
     installed from
   - gadget: SystemDefaults helper function to convert system defaults
     config into a flattened map suitable for FilesystemOnlyApply.
   - many: comment or avoid cryptic snap-ids in tests
   - tests: add LXD_CHANNEL environment
   - store: support for search API v2
   - .github: register a problem matcher to detect spread failures
   - seed: add Info() method for seed.Snap
   - github: always run the "Discard spread workers" step, even if the
     job fails
   - github: offload self-hosted workers
   - cmd/snap: the model command needs just a client, no waitMixin
   - github: combine tests into one workflow
   - github: fix order of go get caches
   - tests: adding more workers for ubuntu 20.04
   - boot,overlord: rename operating mode to system mode
   - config: add new Transaction.GetPristine{,Maybe}() function
   - o/devicestate: rename readMaybe* to maybeRead*
   - github: cache Debian dependencies for unit tests
   - wrappers: respect pre-seeding in error path
   - seed: validate UC20 seed system label
   - client, daemon, overlord/devicestate: request system action API
     and stubs
   - asserts,o/devicestate: support model specified alternative serial-
     authority
   - many: introduce naming.WellKnownSnapID
   - o/configcore: FilesystemOnlyApply method for early configuration
     of core (1/N)
   - github: run C unit tests
   - github: run spread tests on PRs only
   - interfaces/docker-support: make containerd abstract socket more
     generic
   - tests: cleanup security-private-tmp properly
   - overlord/devicestate,boot: do not hold to the originally read
     modeenv
   - dirs: rm RunMnt; boot: add vars for early boot env layout;
     sysconfig: take targetdir arg
   - cmd/snap-bootstrap/initramfs-mounts/tests: use dirs.RunMnt over
     s.runMnt
   - tests: add regression test for MAAS refresh bug
   - errtracker: add missing mocks
   - github: apt-get update before installing build-deps
   - github: don't fail-fast
   - github: run spread via github actions
   - boot,many: add modeenv.WriteTo, make Write take no args
   - wrappers: fix timer schedules that are days only
   - tests/main/snap-seccomp-syscalls: install gperf
   - github: always checkout to snapcore/snapd
   - github: add prototype workflow running unit tests
   - many: improve comments, naming, a possible TODO
   - client: use Assert when checking for error
   - tests: ensure sockets target is ready in session agent spread
     tests
   - osutil: do not leave processes behind after the test run
   - tests: update proxy-no-core to match latest CDN changes
   - devicestate,sysconfig: support "cloud.cfg.d" in uc20 for grade:
     dangerous
   - cmd/snap-failure,tests: try to make snap-failure more robust
   - many: fix packages having mistakenly their copyright as doc
   - many: enumerate system seeds, return them on the /v2/systems API
     endpoint
   - randutil: don't consume kernel entropy at init, just mix more info
     to try to avoid fleet collisions
   - snap-bootstrap: add creationSupported predicate for partition
     types
   - tests: umount partitions which are not umounted after remount
     gadget
   - snap: run gofmt -s
   - many: improve environment handling, fixing duplicate entries
   - boot_test: add many boot robustness tests for UC20 kernel
     MarkBootSuccessul and SetNextBoot
   - overlord: remove unneeded overlord.MockPruneInterval() mocks
   - interfaces/greengrass-support: fix typo
   - overlord,timings,daemon: separate timings from overlord/state
   - tests: enable nested on core20 and test current branch
   - snap-bootstrap: remove created partitions on reinstall
   - boot: apply Go 1.10 formatting
   - apparmor: use rw for uuidd request to default and remove from
     elsewhere
   - packaging: add README.source for debian
   - tests: cleanup various uc20 boot tests from previous PR
   - devicestate: disable cloud-init by default on uc20
   - run-checks: tweak formatting checks
   - packaging,tests: ensure debian-sid builds without vendor/
   - travis.yml: run unit tests with go/master as well* travis.yml: run
     unit tests with go/master as well
   - seed: make Brand() part of the Seed interface
   - cmd/snap-update-ns: ignore EROFS from rmdir/unlink
   - daemon: do a forceful server shutdown if we hit a deadline
   - tests/many: don't use StartLimitInterval anymore, unify snapd-
     failover variants, build snapd snap for UC16 tests
   - snap-seccomp: robustness improvements
   - run-tests: disable -v for go test to avoid spaming the logs
   - snap: whitelist lzo as support compression for snap pack
   - snap: tweak comment in Install() for overlayfs detection
   - many: introduce snapdenv.Preseeding instead of release.PreseedMode
   - client, daemon, overlord/devicestate: structures and stubs for
     systems API
   - o/devicestate: delay the creation of mark-seeded task until
     asserts are loaded
   - data/selinux, tests/main/selinux: cleanup tmpfs operations in the
     policy, updates
   - interfaces/greengrass-support: add new 1.9 access
   - snap: do not hardlink on overlayfs
   - boot,image: ARM kernel extract prepare image
   - interfaces: make gpio robust against not-existing gpios in /sys
   - cmd/snap-preseed: handle --reset flag
   - many: introduce snapdenv to present common snapd env options
   - interfaces/kubernetes-support: allow autobind to journald socket
   - snap-seccomp: allow mprotect() to unblock the tests
   - tests/lib/reset: workaround unicode dot in systemctl output
   - interfaces/udisks2: also allow Introspection on
     /org/freedesktop/UDisks/**
   - snap: introduce Container.RandomAccessFile
   - o/ifacestate, api: implementation of snap disconnect --forget
   - cmd/snap: make the portal-info command search for the network-
     status interface
   - interfaces: work around apparmor_parser slowness affecting uio
   - tests: fix/improve failing spread tests
   - many: clean separation of bootenv mocking vs mock bootloader kinds
   - tests: mock prune ticker in overlord tests to reduce wait times
   - travis: disable arm64 again
   - httputil: add support for extra snapd certs
   - travis.yml: run unit tests on arm64 as well
   - many: fix a pair of ineffectual assignments
   - tests: add uc20 kernel snap upgrade managers test, fix
     bootloadertest bugs
   - o/snapstate: set base in SnapSetup on snap revert
   - interfaces/{docker,kubernetes}-support: updates for lastest k8s
   - cmd/snap-exec: add test case for LP bug 1860369
   - interfaces: make the network-status interface implicit on
     classic
   - interfaces: power control interfaceIt is documented in the
     kernel
   - interfaces: miscellaneous policy updates
   - cmd/snap: add a "snap routine portal-info" command
   - usersession/userd: add "apt" to the white list of URL schemes
     handled by xdg-open
   - interfaces/desktop: allow access to system prompter interface
   - devicestate: allow encryption regardless of grade
   - tests: run ipv6 network-retry test too
   - tests: test that after "remove-user" the system is unmanaged
   - snap-confine: unconditionally add /dev/net/tun to the device
     cgroup
   - snapcraft.yaml: use sudo -E and remove workaround
   - interfaces/audio_playback: Fix pulseaudio config access
   - ovelord/snapstate: update only system wide fonts cache
   - wrappers: import /etc/environment in all services
   - interfaces/u2f: Add Titan USB-C key
   - overlord, taskrunner: exit on task/ensure error when preseeding
   - tests: add session-tool, a su / sudo replacement
   - wrappers: add mount unit dependency for snapd services on core
     devices
   - tests: just remove user when the system is not managed on create-
     user-2 test
   - snap-preseed: support for preseeding of snapd and core18
   - boot: misc UC20 changes
   - tests: adding arch-linux execution
   - packaging: revert "work around review-tools and snap-confine"
   - netlink: fix panic on arm64 with the new rawsockstop codewith a
     nil Timeval panics
   - spread, data/selinux: add CentOS 8, update policy
   - tests: updating checks to new test account for snapd-test snaps
   - spread.yaml: mv opensuse 15.1 to unstable
   - cmd/snap-bootstrap,seed: verify only in-play snaps
   - tests: use ipv4 in retry-network to unblock failing master
   - data/systemd: improve the description
   - client: add "Resume" to DownloadOptions and new test
   - tests: enable snapd-failover on uc20
   - tests: add more debug output to the snapd-failure handling
   - o/devicestate: unset recovery_system when done seeding


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.45-1
changelog:
  - Release 2.45 to Fedora (RHBZ#1814552)
  - Cherry pick zsh completion patch
  - Cherry pick patch disabling fontconfig system cache sharing due to known
    incompatibilities
  - Drop sudoers config (RHBZ#1691996)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.45.1
   - data/selinux: allow checking /var/cache/app-info
   - cmd/snap-confine: add support for libc6-lse
   - interfaces: miscellanious policy updates xlv
   - snap-bootstrap: remove sealed key file on reinstall
   - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/
   - gadget: make ext4 filesystems with or without metadata checksum
   - interfaces/fwupd: allow bind mount to /boot on core
   - tests: cherry-pick test fixes from master
   - snap/squashfs: also symlink snap Install with uc20 seed snap dir
     layout
   - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed
     devices
   - snap,many: mv Open to snapfile pkg to support add'l options to
     Container methods
   - interfaces/builtin/desktop: do not mount fonts cache on distros
     with quirks
   - devicestate, sysconfig: revert support for cloud.cfg.d/ in the
     gadget
   - data/completion, packaging: cherry-pick zsh completion
   - state: log task errors in the journal too
   - devicestate: do not report "ErrNoState" for seeded up
   - interfaces/desktop: silence more /var/lib/snapd/desktop/icons
     denials
   - packaging/fedora: disable FIPS compliant crypto for static
     binaries
   - packaging: stop depending on python-docutils


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.45.2
   - SECURITY UPDATE: sandbox escape vulnerability on snapctl xdg-open
     implementation
     - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment
       variable modification when calling the system xdg-open. Patch
       thanks to James Henstridge
     - packaging/ubuntu-16.04/snapd.postinst: ensure "snap userd" is
       restarted. Patch thanks to Michael Vogt
     - CVE-2020-11934
   - SECURITY UPDATE: arbitrary code execution vulnerability on core
     devices with access to physical removable media
     - devicestate: Disable/restrict cloud-init after seeding.
     - CVE-2020-11933


author: Neal Gompa <ngompa13@gmail.com> - 1.47-1
changelog:
  - Update to 1.47
  - New API: snapd_channel_get_released_at
  - New API: SNAPD_ERROR_DNS_FAILURE
  - Fix tests breaking due to undefined order of results
  - Remove generated MOC file from tarball


author: Neal Gompa <ngompa13@gmail.com> - 1.48-1
changelog:
  - Update to 1.48
  - Many new APIs added
  - Allow searching via common-id
  - Add a description markdown parser
  - Replace SnapdConnection with SnapdPlugRef and SnapdSlotRef
  - Support updated connections API (/v2/connections)
  - Support updated /v2/interfaces&select= API
  - Support snap configuration API
  - Add Qt interface attribute API
  - Make snapd_client_set_socket_path revert to the default when NULL passed.
  - Fix C99 mode not being enabled on older versions of GCC


author: Neal Gompa <ngompa13@gmail.com> - 1.49-1
changelog:
  - Update to 1.49
  - New APIs for getting connections and deprecating older variants
  - Fix memory leaks
  - Use C99 variable style


author: Neal Gompa <ngompa13@gmail.com> - 1.54-1
changelog:
  - Update to 1.54
  - Add API to get snap website
  - Add purge option to remove
  - Switch build system to Meson
  - Fix Qt build with optimisation disabled
  - Fix tests breaking on json-glib < 1.2.4
  - Use C99 style variable definitions


author: Neal Gompa <ngompa13@gmail.com> - 1.55-1
changelog:
  - Update to 1.55
  - Add new APIs for download and logout actions
  - Add support for snap store logout
  - Fix QSnapdAuthData () constructor not copying discharge strings correctly
  - Remove obsolete screenshot parsing code
  - Make all snapd 404 errors return SNAPD_ERROR_NOT_FOUND


author: Neal Gompa <ngompa13@gmail.com> - 1.57-1
changelog:
  - Update to 1.57
  - Add snapd_interface_make_label
  - Add support for new snap types: "core", "base" and "snapd"
  - Change way GTK documentation is generated to avoid a Meson bug
  - Fix leak in markdown parser
  - Fix leak in logout code
  - Make build reproducible by fixing comment in generated file


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-20
changelog:
  - added patch that fixes WAV to HCOM conversion abortion on 64 bit big endian
    machines
    + resolves #1558887


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-21
changelog:
  - fix hunks in patches
  - prevents division by zero in src/ao.c
    + fixes/prevents "sox killed by SIGFPE (signal 8)" kind of bugs that appear
      randomly, depending on reporter's HW/environment/OS components
    + related bugs: #1309426, #1226675, #1540762, #1492910


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-22
changelog:
  - added patch that fixes:
    + "divide by zero in startread function in wav.c" (CVE-2017-11332)
    + "invalid memory read in read_samples function in hcom.c" (CVE-2017-11358)
    + "divide by zero in wavwritehdr function in wav.c" (CVE-2017-11359)
    resolves #1480674, #1480675, #1480676, and #1480678


author: Paul Howarth <paul@city-fan.org> - 0.4.0-11
changelog:
  - Replace /bin/* dependencies with coreutils etc. (#1512898)
  - Drop explicit paths for commands to aid spec readability
  - Drop EL-5 support
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Noarch sub-packages are always available now


author: Paul Howarth <paul@city-fan.org> - 0.4.0-12
changelog:
  - Account for systemd-units being merged into systemd at Fedora 17
  - Drop support for SysV-to-systemd migration from Fedora 18, RHEL 7
  - Use forward-looking conditionals
  - One build requirement per line


author: Bojan Smojver <bojan@rexursive.com> - 1.4-28
changelog:
  - Helper protocol patch (bug #1443273, bug #1418267)
  - Fix logrotate configuration (bug #1394601)
  - Fix typo in transparent-proxying.service


author: Christopher Engelhard <ce@lcts.de> 2.4.0-9
changelog:
  - add bundled provides for fnv and simclist
  - add systemd dependency
  - fix changelog formatting
  - patch & use upstream service file
  - revert 05037d7b - disallow building on rhel < 6
  - make package own /usr/libexec/sshguard


author: Christopher Engelhard <ce@lcts.de> 2.4.0-10
changelog:
  - add missing dependencies
  - move examples to (docdir)/examples subfolder
  - prefix directories with %dir in %files
  - use complete & commented config files
  - add white/blacklisting


author: Kalev Lember <klember@redhat.com> - 0.19.3-1
changelog:
  - 0.19.3
  - Don't replace upstream screenshots in appdata
  - Use desktop-file-validate rather than desktop-file-install
  - Validate appdata


author: Mikhail Zabaluev <mikhail.zabaluev@gmail.com> - 5.8.1-1
changelog:
  - Update to 5.8.1 (#1711920)
  - No more separate strongswan-swanctl.service to start out of order (#1775548)
  - Added strongswan-starter.service


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 4.0.0.dev0-1
changelog:
  - Upgraded to 4.0.0.dev0 in order to remove python2 dependencies.
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 4.2.0-1
changelog:
  - Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13@gmail.com>
  - Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Santín <tsao@gpul.org>


author: Fabio Valentini <decathorpe@gmail.com> - 1.3.1-1
changelog:
  - Update to version 1.3.1.
  - Update build scriptlet to match upstream build system changes.
  - Fix broken systemd_post scriptlet.


author: Ding-Yi Chen <dchen@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Fixes Bug 1476515 - AppStream metadata for Synergy package are missing
  - The real executable is now "synergy-core",
    "synergy" is now a symlink to synergy-core
  - cmake3 is now BuildRequired
  - syntool is removed by upstream


author: Ding-Yi Chen <dchen@redhat.com> - 2.0.0-2
changelog:
  - Restore Program /usr/bin/synergy
  - Fixes Bug 1542286 synergy-2.0.0 should not have been pushed anywhere except rawhide
  - Fixes Bug 1541640 - synergy.desktop file useless


author: Ding-Yi Chen <dchen@redhat.com> - 1:1.10.2-1
changelog:
  - Revert to v1 as Synergy 2 is back to beta
    https://symless.com/blog/synergy-2-back-beta
  - Following files/programs are gone
    * /usr/bin/synergy-core
    * /usr/share/pixmaps/synergy.ico
  - Following files/programs are back
    * /usr/bin/synergy
    * /usr/bin/syntool


author: Peter Czanik <peter@czanik.hu> - 3.23.1-2
changelog:
  - fix MaxMindDB (GeoIP) packaging (make it a sub-package again)
  - fix file conflicit between rsyslog and syslog-ng: /etc/logrotate.d/syslog
    see: https://bugzilla.redhat.com/show_bug.cgi?id=1802165
    It became a weak dependency which conflicts with rsyslog


author: Dmitrij S. Kryzhevich <krege@land.ru> - 1.17-1
changelog:
  - Update to 1.17.
  - Drop upstream patch as it was... hm... included in upstream.
  - Fix download URL.
  - Drop commented code.
  - Drop defattr tag.


author: Dominic Hopf <dmaphy@fedoraproject.org> - 1.92-2
changelog:
  - Improve requirement listings
  - Fix requirement for python3-psutil on EPEL8
  - Add missing requirement for gtk-update-icon-cache


author: Sandro Mani <manisandro@gmail.com> - 4.0.0-2
changelog:
  - Make all langpack / script subpackages require tesseract for tessdata dir ownership
  - Fix tesseract-osd requires
  - Fix typo cirilic -> cyrillic


author: Sandro Mani <manisandro@gmail.com> - 4.0.0-5
changelog:
  - Improve subpackage descriptions
  - Make script subpackages own the script directory
  - Bump release to -5


author: Pavel Raiskup <praiskup@redhat.com> - 0-0.3.20180821git5339fb6
changelog:
  - fix versioning and other problems spotted by Robert-André Mauchin
    and Lukáš Tyrychtr (rhbz#1619528)


author: 'Ben Rosser' <rosser.bjr@gmail.com> 20150202git-2
changelog:
  - Added license tag, added an extra file to doc.
  - Changed tfdocgen man page to use a wildcard encoding.


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.7-1
changelog:
  - Hookup tito's --no-cleanup with rpmbuild's --noclean. (dgoodwin@redhat.com)
  - Print package manager output in _auto_install (frostyx@email.cz)
  - Use 'dnf reinstall' when package is already installed (frostyx@email.cz)
  - Install packages via DNF if available (frostyx@email.cz)
  - CentOS uses yum (miroslav@suchy.cz)
  - Allow customizing git commit message (lsedlar@redhat.com)
  - README.md: Also link to Fedora wiki page collection of these tools
    (walters@verbum.org)
  - mv rel-eng/ .tito/ (msuchy@redhat.com)
  - buildroot tag is not needed for ages (msuchy@redhat.com)
  - better release number for untagged packages (msuchy@redhat.com)
  - Only pass one project_name to copr build command (dominic@cleal.org)
  - Just a small typo (dietrich@teilgedanken.de)
  - remove dependency on yum-utils (msuchy@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.9-1
changelog:
  - Simplified version and release update logic (skuznets@redhat.com)
  - Added `--use-release` flag for `tito tag` (skuznets@redhat.com)
  - Use `def` instead of a lambda for function assignment (skuznets@redhat.com)
  - Fix typos in man pages (lsedlar@redhat.com)
  - explain how automatic tagging was done (msuchy@redhat.com)
  - Rename CargoTagger as CargoBump (msehnout@redhat.com)
  - Fix errors in documentation (lsedlar@redhat.com)
  - fix few pep8 errors (sehnoutka.martin@gmail.com)
  - Read tito.props and look for pkg managers section.
    (sehnoutka.martin@gmail.com)
  - Implement cargo tagger using regular expressions (without toml library)
    (sehnoutka.martin@gmail.com)
  - Add entry point for Cargo tagger and tagger class.
    (sehnoutka.martin@gmail.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.10-1
changelog:
  - Do not undo tags when git state is dirty (skuznets@redhat.com)
  - Parse options in `tito init` (skuznets@redhat.com)
  - Only use `rpmbuild --noclean` if it is supported (skuznets@redhat.com)
  - Explicitly define indicies in formatting statements (skuznets@redhat.com)
  - Achieve quiet output from `rpmbuild` without passing `--quiet`
    (skuznets@redhat.com)
  - Update the MANIFEST.in (skuznets@redhat.com)
  - Correctly pass verbosity options through the builder CLI
    (skuznets@redhat.com)
  - Use correct print-formatting directive in debugging (skuznets@redhat.com)
  - Use `.format()` string formatting correctly in Builder (skuznets@redhat.com)
  - Refactor `rpmbuild` invocation for readability (skuznets@redhat.com)
  - Added `--quiet` and `--verbose` to `tito build` (skuznets@redhat.com)
  - Add a Travis CI manifest (skuznets@redhat.com)
  - Only flush output stream if flushing is supported (skuznets@redhat.com)
  - Added support for choosing platforms for tests (skuznets@redhat.com)
  - Refactored version->tag mapping logic in Tagger (skuznets@redhat.com)
  - Improved debugging for RPM build step (skuznets@redhat.com)
  - Print command debugging information only once (skuznets@redhat.com)
  - Flush output buffers (skuznets@redhat.com)
  - Document `tito tag --use-release` in the manpage (skuznets@redhat.com)
  - Added an option to not escalate privileges on `tito build --install`
    (skuznets@redhat.com)
  - Factor out the version->tag mapping in the Builder (skuznets@redhat.com)
  - Collapse tagger class selection logic (skuznets@redhat.com)
  - Rename `globalconfig` section to `buildconfig` in README
    (skuznets@redhat.com)
  - fixes #29 - remove --list-tags and --only-tags (jmrodri@gmail.com)
  - 253 - print cmd info when --debug is supplied (jmrodri@gmail.com)
  - Work around `dnf` issues and install builddep for Rawhide
    (skuznets@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.6.11-1
changelog:
  - Fixing remote_git_name (adammhaile@gmail.com)
  - Fix links in README.md file (mzalewsk@redhat.com)
  - Encourage usage of git push --follow-tags (mzalewsk@redhat.com)
  - Print mock output when building with MockBuilder (yuxzhu@redhat.com)
  - Fix a race condition when /tmp/tito doesn't exist (vfreex@gmail.com)
  - Don't append 'None' to Release line with no '%{?dist}' part
    (patrice.fournier@ifax.com)
  - python3's map() returns a map object, but we expect sources to be a list
    (evgeni@golov.de)
  - Submitting was missing a t. (jmrodri@gmail.com)
  - update links (robberphex@gmail.com)
  - use LC_ALL=C.UTF-8 rather than plain C (msuchy@redhat.com)
  - make ReleaseTagger honour --use-version (egolov@redhat.com)
  - also verify that ReleaseTagger supports --use-release (egolov@redhat.com)
  - add test for ReleaseTagger together with --use-version (egolov@redhat.com)
  - Format package list more cleanly (skuznets@redhat.com)
  - Custom tag support in tito release (vrutkovs@redhat.com)
  - VersionTagger should support custom tag format (vrutkovs@redhat.com)
  - Remove createrepo_c BR from spec (ngompa13@gmail.com)
  - Use createrepo_c for creating rpm-md repos (ngompa13@gmail.com)
  - Fixup Fedora Dockerfiles to work correctly (ngompa13@gmail.com)
  - Remove useless EL5 stuff (ngompa13@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.12-1
changelog:
  - Remove obsolete Group tag (ignatenkobrain@fedoraproject.org)
  - Update URL and Source locations (awilliam@redhat.com)
  - Fix cheetah binary dependency (awilliam@redhat.com)
  - Correct and make less confusing the conditional Python macros (awilliam@redhat.com)
  - python-devel → python2-devel (ignatenkobrain@fedoraproject.org)
  - %{python_sitelib} → %{python2_sitelib} (ignatenkobrain@fedoraproject.org)
  - Remove %clean section (ignatenkobrain@fedoraproject.org)
  - Use python3 on EPEL8 (frostyx@email.cz)
  - Do not require obsoleted fedora-cert (msuchy@redhat.com)
  - Fix tito build --test --rpm -i Traceback on Fedora 31 (sisi.chlupova@gmail.com)
  - Enable GnuPG signed tags (bcl@redhat.com)
  - Fix #335 handle source tarballs with UTF8 characters in the name (awood@redhat.com)
  - Remove deprecated BuildRoot macros from spec (awood@redhat.com)
  - Releaser: Ensure rpmlintrc files are copied when releasing (ngompa13@gmail.com)
  - Releaser: Ensure SUSE-style changes file is copied when releasing (ngompa13@gmail.com)
  - Tagger: Add SUSETagger to support SUSE-style detached changelogs (ngompa13@gmail.com)
  - Add support for building with Git LFS. (ntillman@barracuda.com)
  - use built-in shutil.copy2 instead of cp command (mtinberg@wisc.edu)
  - Avoid double builds with mock (tdockendorf@osc.edu)
  - Fix rsync failures in dockerized tests, update for F27. (dgoodwin@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.13-1
changelog:
  - Add _copy_extra_sources() method to BuilderBase class.
    (daniel@versatushpc.com.br)
  - Rename HACKING to HACKING.md so it renders on GitHub (tadej.j@nez.si)
  - Modernize developer installation (tadej.j@nez.si)
  - make get_project_name more resilient (evgeni@golov.de)
  - Use pycodestyle pacakge when pep8 is not available (frostyx@email.cz)
  - Move to python-blessed (ekulik@redhat.com)
  - Fix the Source0 URL and prep phase (frostyx@email.cz)
  - run_command_print should behave similar to run_command (yuxzhu@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.14-1
changelog:
  - Fix #367 - copy_extra_sources for alternative builders (frostyx@email.cz)
  - Fix #243 - Add a list of projects using tito (frostyx@email.cz)
  - Fix #364 - Make yes or no input less aggressive (frostyx@email.cz)
  - Fix #358 - Move bugzilla code to a separate file (frostyx@email.cz)
  - Fix #158 - Separate .tito directory creation from tito.props file creation (frostyx@email.cz)
  - Fix #338 - Use os.makedirs instead of running mkdir -p command (frostyx@email.cz)
  - Fix #331 - Do not specify file digest algorithms (frostyx@email.cz)
  - #305 - Add a possibility to have full datetime entries in changelog (frostyx@email.cz)
  - #252 - Use template to generate file with __version__ (frostyx@email.cz)
  - #187 - Implement --version parameter (frostyx@email.cz)
  - mention the #tito irc channel in the readme (frostyx@email.cz)
  - Describe how to release tito (frostyx@email.cz)
  - Move tito under rpm-software-management namespace (frostyx@email.cz)


author: Peng Wu <pwu@redhat.com> - 0.6.0-37
changelog:
  - Update BuildRequires to mariadb-connector-c-devel
  - Add tomoe-0.6.0-fixes-set-parse-error.patch to fix compile


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.10-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.10.
  - Changed a dependency from ncurses-devel to pkgconfig(ncurses), now that
    the Autoconf macro uses pkg-config.
  - Added a dependency on gcc, as per the Fedora Packaging Guidelines for C
    programs.
  - Added a dependency on desktop-file-utils for the desktop file.
  - Install the desktop file and icons now shipped with Star Traders.
  - Install the COPYING file to /usr/share/licenses/trader.
  - Use generic make_build and make_install macros.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 4.11-13
changelog:
  - Add BuildRequires on gcc-c++
  - Remove Group tags
  - Don't clear the buildroot in the install section
  - Switch to %ldconfig_scriptlets


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.35-5
changelog:
  - Change URL to https
  - Get the tarball directly from upstream rather than from Ubuntu
  - Remove redundant "-n %{name}-%{version}" from %setup
  - Use %py3_build and %py3_install macros
  - Add Python 3.6 to check-requirements


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.35-6
changelog:
  - Change permissions of the *.rules files from 0640 to 0644
  - Change permissions of the before.init and after.init hooks from 0640 to 0755
  - Don't prepend /usr/bin/env to sys.executable, which is always an absolute path


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-1.20190401gitac96d055
changelog:
  - New version, switched to git snapshot
  - Conditionalized wireshark support
  - Disabled wireshark support, it's currently broken (upstream ticket #268)
  - Disabled tests, it's currently broken (upstream ticket #267)
  - Dropped boost169 patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-2.201904023gitc52f3f41
changelog:
  - New git snapshot
  - Added python2-numpy build requirement
  - Re-enabled tests for upstream to easily reproduce the problem


author: Jeremy Newton <alexjnewt AT hotmail DOT com> 1.0-2.20190403git1139876
changelog:
  - Update to newer git, fixes install issues and all patches upstreamed
  - Add missing static provides for devel


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.8.20171022svn14722
changelog:
  - update to new upstream snapshot
  - fix SSL to build against newer OpenSSL (works with older too)
  - update default config to have Fedora SSL path
  - update systemd service file to restart on failure
  - sync Fedora and EPEL SRPMS, drop EPEL 5


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.13.20171022svn14722
changelog:
  - clean up spec file and remove conditionals - spec file is for F28+
  - remove tcp-wrappers (obsolete, use iptables to control access)
  - add gcc BR for future Fedora
  - switch to private user, fix default config parse (BZ 1543142)
  - switch to foreground for systemd unit


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 2.3.6-1
changelog:
  - update to 2.3.6
  - new upstream location
  - use cmake and run tests
  - switch main package to archful per
    https://docs.fedoraproject.org/en-US/packaging-guidelines/#_do_not_use_noarch


author: Scott Tsai scottt.tw@gmail.com - 3.922-5
changelog:
  - Remove duplicate copies of 'examples' in /usr/share/doc
  - https://bugzilla.redhat.com/show_bug.cgi?id=1592057#c3


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1-3.20170830gitafc8ea9
changelog:
  - change license tag to GPLv2
  - fix warning _FORTIFY_SOURCE requires compiling with optimization (-O)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.1.7-5
changelog:
  - Build using mariadb-connector-c for Fedora 28+
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: Christoph Junghans <junghans@votca.org> - 1.6~rc2-1
changelog:
  - Version bump to 1.6~rc2
  - Drop 345.patch & 347.patch - merged upstream
  - Add 381.patch to fix 32-bit build


author: James Hennessy <jphxxxx@gmail.com>
changelog:
  - Fixed issue where vpnc-script is using resolvconf on systems where "resolve" isn't enabled in /etc/nsswitch.


author: Hans de Goede <hdegoede@redhat.com> - 0.4.2-1
changelog:
  - New upstream release 0.4.2 (rhbz#1433550)
  - Fixes CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 (#1479315)


author: Joe Doss <joe@solidadmin.com> - 1.0.20191226-1
changelog:
  - Update to 1.0.20191226
  - Split wireguard-tools back into it's own spec file
  - Add in patch to fix dns-hatchet path


author: Leigh Scott <leigh123linux@gmail.com> - 1.0.20200319-2
changelog:
  - Add missing config directory
  - Remove default buildroot BuildRequires
  - Simplify doc install
  - Remove commented lines
  - Use correct macro for bash-completion


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Sérgio Basto <sergio@serjux.com> - 0.9.16-1
changelog:
  - Update to 0.9.16
  - Java viewers moved to
    https://github.com/LibVNC/libvncserver/tree/master/webclients/java-applet
  - classes and jars have been removed from upstream sources.
  - Remove support to EL5
  - Encoding and permissions of files seems that are correct, no need to fix.
  - rpmlint doesn't find any hardcoded rpath


author: Petr Pisar <ppisar@redhat.com> - 0.9.16-2
changelog:
  - Modernize a spec file
  - License corrected from GPLv2 to GPLv2+
  - Enforce system crypto policy
  - Normalize ChangeLog encoding
  - Fix building with GCC 10 properly
  - Fix a NULL pointer dereference in a cursor handler (upstream bug #123)


author: Jerry James <loganjerry@gmail.com> - 21.5.34-29.20171230hg92757c2b8239
changelog:
  - Update to latest mercurial snapshot for miscellaneous bug fixes
  - Remove obsolete scriptlets
  - Drop upstreamed -endian, -gcpro, and -format-overflow patches
  - Install a scalable icon


author: Jerry James <loganjerry@gmail.com> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Update to latest mercurial snapshot for miscellaneous bug fixes
  - Switch from NSS to OpenSSL
  - Build with openldap support
  - Compress the Lisp source files


author: Tim Landscheidt <tim@tim-landscheidt.de> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Obsolete -el subpackage
  - Remove needless use of %defattr
  - Simplify generation of file list
  - Enable test suite


author: Jerry James <loganjerry@gmail.com> - 20190315-1
changelog:
  - Update all packages
  - Include mew again, since xemacs-mew no longer exists
  - Add -python3 patch and build with python3 instead of python2
  - Add -eval-when and -deps patches to fix FTBFS


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 4.13.8-1
changelog:
  - Update to 4.13.8
  - Enable gobject introspection
  - Following upstream, disable perl bindings and obsolete xfconf-perl sub-pkg


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-6
changelog:
  - Fix font issues (rhbz#1523624) :
   - Adjust xfig-3.2.5-urwfonts.patch for new font names in urw-base35-fonts
   - Except for the symbols font, use the old un-scalable Adobe PCF Symbol font
     for now as StandardSymbolsPS.otf from urw-base35-fonts is currently broken
   - Add a patch to deal with some fonts being scalable, while Symbol is not
   - Note the dingbats font is also broken in urw-base35-fonts, but there is no
     replacement for it, so that font is still broken, see rhbz#1534206
  - ghostscript-core no longer exists, instead require ghostscript (rhbz#1536581)
  - Remove obsolete icon-cache and desktop-database scriptlets
  - Add a patch from Debian fixing some issues with arrows


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-7
changelog:
  - Fix font issues take 2 (rhbz#1523624) :
   - It turns out the new urw fonts are completely unusuable as X11 core fonts,
     stop using them for now (see bug rhbz#1551219)
   - Add a patch to use the fallback fonts for non-scalable fonts too, so that
     we at least show something somewhat reasonable for Bookman, New Century
     Schoolbook and Palatino
   - This means that display of Zapf Chancery and Zapf Dingbats currently
     falls back to the "fixed" font, which is completely wrong for Dingbats


author: Hans de Goede <hdegoede@redhat.com> - 3.2.7a-1
changelog:
  - New upstream release 3.2.7a
  - Add Requires: transfig to make sure esp export works (rhbz#1642033)
  - Switch back to URW fonts so that Bookman, New Century Schoolbook and
    Palatino work again. This uses the old version of the URW fonts which are
    now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
  - Trim the changelog


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-2
changelog:
  - Very reluctantly add a Suggests: tag to work around dnf/kernel bug
  - Resolves: rhbz#1192189 Both kernel-debug-core and kernel-core are installed


author: Paul Wouters <pwouters@redhat.com> - 1.3.14-1
changelog:
  - Resolves: rhbz#1322190 Updated to 1.3.14
  - Resolves: rhbz#1722121 Use proper /run directory
  - Resolves: rhbz#1399648 Review Request: xl2tpd


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.11-5
changelog:
  - Make xrdp-selinux a weak dependency on versions that support them.
  - Drop xrdp-selinux dependency completely.


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.12-4
changelog:
  - README.Fedora: VSOCK support
  - README.Fedora: possibly incorrect SELinux context of the sessions
  - Add polkit-1 rules for colord access and repo refresh


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Michal Ambroz <rebus at, seznam.cz> - 3.9.0-1
changelog:
  - bump to 3.9.0 release (#1680203)
  - switch from python-sphinx to python3-sphinx for generating the documentation for fc31+
  - should fix also #1660398 (CVE-2018-19974 CVE-2018-19975 CVE-2018-19976),
    but by design it might be always dangerous to run yara signatures compiled by 3rd party,
    so it is advised to re-compile yara rules instead
  - BUGFIX: Denial of service when using "dex" module. Found by the Cisco Talos team. (upstream #1023, CVE-2019-5020)
  - BUGFIX: Buffer overflow in "dotnet" module.
  - BUGFIX: Regexp regression when using nested quantifiers {x,y} for certain values of x and y. (#1018)


author: Michal Ambroz <rebus at, seznam.cz> - 3.10.0-1
changelog:
  - bump to 3.10.0 release (#1680204)
  - Harden virtual machine against malicious code.
  - BUGFIX: Regression bug in hex strings containing wildcards (upstream #1025).
  - BUGFIX: Buffer overrun in “elf” module.
  - BUGFIX: Buffer overrun in “dotnet” module.


author: Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
changelog:
  - bump to 3.11.0 release (#1760678)
  - BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
  - BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
  - BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
  - BUGFIX: Memory leak while attaching to a process fails (upstream #1070)


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.4.8-4
changelog:
  - Add explicit requirement on javapackages-tools since yuicompressor
    script uses java-functions. See RHBZ#1600426.


author: Orion Poplawski <orion@nwra.com> - 4.0.4-2
changelog:
  - Move update-altertives from %post to %posttrans to support upgrades from zabbixXX in EPEL
  - Fix changes for custom install paths


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.1-2
changelog:
  - Fix compilation on GCC 4.4.7 so it builds on EL6
  - Add missing sources
  - Also, zchunk will now automatically do all your taxes


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


