# changelog

author: Don Zickus <dzickus@redhat.com> 5.40-2
changelog:
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  - set 'AutoEnable=true' in /etc/bluetooth/main.conf file


author: Peter Robinson <pbrobinson@fedoraproject.org> 5.44-1
changelog:
  - Update to 5.44
  - Enable deprecated option to keep all usual tools
  - Ship btattach tool
  - Minor spec cleanups


author: Jonathan Wakely <jwakely@redhat.com> - 1.63.0-2
changelog:
  - Use correct sources for release, not a snapshot.
  - Add -Wno-deprecated-declarations to build flags.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-3
changelog:
  - add back -devel subpackage as a stop-gap measure for software
    that cannot be ported to new API easily


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3
changelog:
  - Unable to print from Windows (7) on a Cups-Server(2.2.1-1) with german umlauts in the filename (bug #1386751)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.2-5
changelog:
  - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd


author: David King <amigadave@amigadave.com> - 0.102-1
changelog:
  - Update to 0.102
  - Use pkgconfig for BuildRequires
  - Remove outdated gtk subpackage
  - Use license for COPYING
  - Tighten subpackage dependencies with the isa macro
  - Tidy spec file
  - Preserve timestamps during install


author: David King <amigadave@amigadave.com> - 0.104-1
changelog:
  - Update to 0.104
  - Remove RPATH
  - Remove executable bit from sourced script
  - Move man page to main package and update glob
  - Make the build output more verbose


author: Till Maas <opensource@till.name> - 0.104-2
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Athmane Madjoudj <athmane@fedoraproject.org> 3.0.1.20090203svn-1
changelog:
  - Update to trunk
  - Add patch to remove timestamp for reproducible builds (RHBZ #1122654)
  - Rebase default img format patch
  - Fix bugus date/time in the changelog
  - Add patch to fix relative import parsing (RHBZ #1166283)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Ville Skyttä <ville.skytta@iki.fi> - 1.44-11
changelog:
  - Install macros to %{_rpmconfigdir}/macros.d where available (#1074274)
  - Fix bogus date in %changelog


author: Todd Zullinger <tmz@pobox.com> - 2.11.1-3
changelog:
  - Remove unnecessary rsync requirement from git-core
  - Move gnome-keyring credential helper from git-core to git
  - Enable libsecret credential helper
  - Run git test suite
  - Use %{_mandir} in git/git-core file list filters
  - Fix version of emacs-git and emacs-git-el provides
  - Clean up contrib/{credential,subtree} to avoid cruft in git-core-doc
  - Fix a number of macro-in-comment warnings from rpmlint


author: Petr Stodulka <pstodulk@redhat.com> - 2.11.1-3
changelog:
  - remove non-ASCII characters from description and title of packages
  - fix requiremets
  - fix spec to be compatible for other systems
  - remove deprecated credential-gnome-keyring


author: Colin Walters <walters@verbum.org> - 2.52.1-3
changelog:
  - Backport patches for gmain wakeup for qemu
    See: https://bugzilla.gnome.org/show_bug.cgi?id=761102


author: jchaloup <jchaloup@redhat.com> - 1-11
changelog:
  - Reduce build section after update of go-srpm-macros
  - BUILD_ID for debug is needed only for golang compiler
    related: #1222796


author: jchaloup <jchaloup@redhat.com> - 1-12
changelog:
  - Change deps on compiler(go-compiler)
  - Update %build, %test and main section accordingaly
    related: #1222796


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Raphael Groner <projects.rg@smart.ms> - 56.1-5
changelog:
  - even more verbosity and debug output
  - add path to extend ICU's internal cache of codes
  - use license macro
  - provide samples in devel subpackage
  - modernize generally


author: Fridolin Pokorny <fpokorny@redhat.com> - 2.1-1
changelog:
  - Update to 2.1
  - Removed jbigkit-CVE-2013-6369.patch (accepted by upstream)
  - Updated jbigkit-2.0-warnings.patch to fix only fread() checks
  - Updated jbigkit-2.0-shlib.patch


author: Björn Esser <besser82@fedoraproject.org> - 0.12.1-1
changelog:
  - Update to new upstream release
  - Introduces SONAME bump, that should have been in 0.12 already
  - Unify %doc
  - General spec-file cleanup


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.1.4-8
changelog:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps


author: Boris Ranto <branto@redhat.com> - 3.1-12.20150325cvs
changelog:
  - Rebase to latest upstream version
  - We no longer need the patch to not ignore extchars on utf8 charset -- the patch was merged upstream


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.4-1
changelog:
  - Upstream release of 1.07.4
  - Restored Liberation Sans Bold 'u' instructions
  - Resolved #1009650, renames serbian shapes as per AGL
  - Added new glyph for "imacron" and "g"
  - Added Correct shape for uni266B in all Liberation variants #1014357
  - Resolved Problematic shapes for macedonian alphabet #1013949


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Hans de Goede <hdegoede@redhat.com> - 1:0.2.999-8.gitdc16f8c
changelog:
  - Fix GLX_SGIX_fbconfig extension, this fixes games such as "The Binding of
    Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam not working


author: Hans de Goede <hdegoede@redhat.com> - 1:0.2.999-10.gitdc16f8c
changelog:
  - Drop 0007-GLX-Add-GLX_SGIX_fbconfig-functions.patch the bug this works
    around actually is in mesa


author: Simone Caronni <negativo17@gmail.com> - 1:0.2.999-12.20170308git8e6e102
changelog:
  - Update to latest snapshot, remove upstreamed patches.
  - Update release to packaging guidelines format.
  - Make sure that for Fedora 24 and RHEL the libraries are always private.


author: Milan Crha <mcrha@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Remove patch for RH bug #1176204 (fixed upstream)
  - Add patch to fix ARM build break


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Andreas Schneider <asn@redhat.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
    * Fixed SSH_AUTH_PARTIAL auth with auto public key
    * Fixed memory leak in session options
    * Fixed allocation of ed25519 public keys
    * Fixed channel exit-status and exit-signal
    * Reintroduce ssh_forward_listen()


author: Andreas Schneider <asn@redhat.com> - 0.7.2-1
changelog:
  - Update to version 0.7.2
    * Fixed OpenSSL detection on Windows
    * Fixed return status for ssh_userauth_agent()
    * Fixed KEX to prefer hmac-sha2-256
    * Fixed sftp packet handling
    * Fixed return values of ssh_key_is_(public|private)
    * Fixed bug in global success reply
  - resolves: #1267346


author: Andreas Schneider <asn@redhat.com> - 0.7.3-1
changelog:
  - resolves: #1311259 - Fix CVE-2016-0739
  - resolves: #1311332 - Update to version 0.7.3
    * Fixed CVE-2016-0739
    * Fixed ssh-agent on big endian
    * Fixed some documentation issues
  - Enabled GSSAPI support


author: Andreas Schneider <asn@redhat.com> - 0.7.4-1
changelog:
  - Update to version 0.7.4
    * Added id_ed25519 to the default identity list
    * Fixed sftp EOF packet handling
    * Fixed ssh_send_banner() to confirm with RFC 4253
    * Fixed some memory leaks
  - resolves: #1419007


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.4-2
changelog:
  - BR: compat-openssl10-devel (f26+, #1423088)
  - use %license
  - -devel: drop hardcoded pkgconfig dep (let autodeps handle it)
  - %files: track library sonames, simplify -devel
  - %install: use 'install/fast' target
  - .spec cosmetics, drop deprecated %clean section


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-14
changelog:
  - remove duplicate Requires: entry
  - use bcond_without instead of PostgreSQL-packaging 'runselftest'


author: Hans de Goede <hdegoede@redhat.com> - 1.0.21-0.1.git448584a
changelog:
  - Update to a pre 1.0.21 git snapshot to bring in libusb_interrupt_event_handler
    which chromium needs (rhbz#1270324)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.11-4
changelog:
  - fix fpath (use autoreconf -f)
  - -devel: tighten deps via %{?_isa}, drop Requires: pkgconfig (add explicit BR: pkgconfig)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.9.2-8
changelog:
  - Remove executable permissions from documentation.  Complies with packaging
    guidelines and solves issue of libxml2-python3 package depending on python2


author: Daniel Veillard <veillard@redhat.com> - 2.9.2-1
changelog:
  - upstream release of 2.9.3
  - Fixes for CVE-2015-8035, CVE-2015-7942, CVE-2015-7941, CVE-2015-1819
    CVE-2015-7497, CVE-2015-7498, CVE-2015-5312, CVE-2015-7499, CVE-2015-7500
    and CVE-2015-8242
  - many other bug fixes


author: Kevin Fenzi <kevin@scrye.com> - 2.9.4-1
changelog:
  - Update to 2.9.4.
  - Apply very hacky patch that removes the no longer in python-3.6 PyVerify_fd symbol.


author: Marek Skalicky <mskalick@redhat.com> - 38.2.1-8
changelog:
  - Disable two optimizations which caused regressions with new gcc
  - Use fedora default -O2 instead of mozjs -O3


author: Sandro Mani <manisandro@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Fixes: CVE-2016-3183, CVE-2016-3181, CVE-2016-3182, CVE-2016-4796, CVE-2016-4797, CVE-2015-8871


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-5 + 0.10.2-4
changelog:
  - Build against OpenSSL 1.1.0 with compat changes
  - Recommend crypto-policies
  - Fix chroot dropping capabilities (#1386755)


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-7 + 0.10.2-4
changelog:
  - Properly deserialize received RSA certificates in ssh-agent (#1402029)
  - Move MAX_DISPLAYS to a configuration option


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.2-5
changelog:
  - New upstream release (#1406204)
  - Cache supported OIDs for GSSAPI key exchange (#1395288)
  - Fix typo causing heap corruption (use-after-free) (#1409433)
  - Prevent hangs with long MOTD


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.2-5
changelog:
  - Fix ssh-agent cert signing error (#1416584)
  - Fix wrong path to crypto policies
  - Attempt to resolve issue with systemd


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Properly report errors from included files (#1408558)
  - New pam_ssh_agent_auth 0.10.3 release
  - Switch to SD_NOTIFY to make systemd happy


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-4 + 0.10.3-1
changelog:
  - Avoid sending the SD_NOTIFY messages from wrong processes (#1427526)
  - Address reports by coverity


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-2 + 0.10.3-2
changelog:
  - Fix various after-release typos including failed build in s390x (#1434341)
  - Revert chroot magic with SELinux


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-19
changelog:
  - seobject: Handle python error returns correctly
  - policycoreutils/sepolicy/gui: fix current selinux state radiobutton
  - policycoreutils: semodule_package: do not fail with an empty fc file


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-5
changelog:
  - semanage: Unify argument handling (#1398987)
  - setfiles: set up a logging callback for libselinux
  - setfiles: Fix setfiles progress indicator
  - setfiles: stdout messages don't need program prefix
  - setfiles: don't scramble stdout and stderr together (#1435894)
  - restorecond: Decrease loglevel of termination message (#1264505)
  - fixfiles should handle path arguments more robustly
  - fixfiles: handle unexpected spaces in command
  - fixfiles: remove useless use of cat (#1435894)
  - semanage: Add checks if a module name is passed in (#1420707)
  - semanage: fix export of fcontext socket entries (#1435127)
  - selinux-autorelabel: remove incorrect redirection to /dev/null (#1415674)


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Dan Walsh <dwalsh@redhat.com> - 0.81-9
changelog:
  - Move python3 bindings to separate package to shrink minimal/cloud install until we change to python3 by default


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.4.0-1
changelog:
  - Update to 3.4.0 (#1400227).
  - Use new install macros.
  - Drop unneeded BuildRequires on python-nose.
  - pymongo now requires bson by arch as it should.


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-1
changelog:
  - Update to 2.7.13
  - Don't blow up on EL7 kernel (random generator) (rhbz#1410175, rhbz#1410187)
  - Require glibc >= 2.24.90-26 (rhbz#1410644)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-8
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update description to reflect that Python 2 is not the default Python


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250
changelog:
  - Merge pull request #4 from lslebodn/sssd_socket_activated
  - Remove typo bugs
  - Remove /proc <<none>> from fedora policy, it's no longer necessary
  - Allow iptables get list of kernel modules
  - Allow unconfined_domain_type to enable/disable transient unit
  - Add interfaces init_enable_transient_unit() and init_disable_transient_unit
  - Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
  - Label sysroot dir under ostree as root_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251
changelog:
  - Allow sbd_t to read/write fixed disk devices
  - Add sys_ptrace capability to radiusd_t domain
  - Allow cockpit_session_t domain connects to ssh tcp ports.
  - Allow pcp_pmcd_t net_admin capability. Allow pcp_pmcd_t read net sysctls Allow system_cronjob_t create /var/run/pcp with pcp_var_run_t
  - Allow sendmail to search network sysctls
  - Allow chronyd_t net_admin capability to allow support HW timestamping.
  - Allow certmonger to start haproxy service
  - Fix init Module
  - Allow staff user to read fwupd_cache_t files
  - Remove typo bugs
  - Remove /proc <<none>> from fedora policy, it's no longer necessary


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253
changelog:
  - auth_use_nsswitch can call only domain not attribute
  - Fix broken cermonger module
  - Fix broken apache module
  - Dontaudit net_admin cap for winbind_t
  - Allow tlp_t domain to stream connect to system bus
  - Allow hypervkvp_t domain execute hostname
  - Dontaudit sssd_selinux_manager_t use of net_admin capability
  - Allow sssd_selinux_manager_t to ioctl init_t sockets
  - Improve ipa_cert_filetrans_named_content() interface to also allow caller domain manage ipa_cert_t type.
  - Allow pki_tomcat_t domain read /etc/passwd.
  - Label new path for ipa-otpd
  - Allow radiusd_t domain stream connect to postgresql_t
  - Allow rhsmcertd_t to execute hostname_exec_t binaries.
  - Allow virtlogd to append nfs_t files when virt_use_nfs=1
  - Allow httpd_t domain read also httpd_user_content_type lnk_files.
  - Allow httpd_t domain create /etc/httpd/alias/ipaseesion.key with label ipa_cert_t
  - Dontaudit <user>_gkeyringd_t stream connect to system_dbusd_t
  - Label /var/www/html/nextcloud/data as httpd_sys_rw_content_t
  - Add interface ipa_filetrans_named_content()
  - Allow tomcat use nsswitch
  - Allow dirsrv read cgroup files.
  - Allow certmonger_t start/status generic services
  - Allow ganesha_t domain read/write infiniband devices.
  - Allow sendmail_t domain sysctl_net_t files
  - Allow targetd_t domain read network state and getattr on loop_control_device_t
  - Allow condor_schedd_t domain send mails.
  - Allow ntpd to creating sockets. BZ(1434395)
  - Alow certmonger to create own systemd unit files.
  - Add kill namespace capability to xdm_t domain
  - Revert "su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization."
  - Revert "Allow <role>_su_t to create netlink_selinux_socket"
  - Allow <role>_su_t to create netlink_selinux_socket
  - Allow unconfined_t to module_load any file
  - Allow staff to systemctl virt server when staff_use_svirt=1
  - Allow unconfined_t create /tmp/ca.p12 file with ipa_tmp_t context
  - Allow netutils setpcap capability
  - Dontaudit leaked file descriptor happening in setfiles_t domain BZ(1388124)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254
changelog:
  - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
  - ejabberd small fixes
  - Update targetd policy to accommodate changes in the service
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  - Allow glusterd_t domain start ganesha service
  - Made few cosmetic changes in sssd SELinux module
  - sssd-kcm should not run as unconfined_service_t BZ(1447411)
  - Update virt_rw_stream_sockets_svirt() interface to allow confined users set socket options.
  - Allow keepalived_t domain read usermodehelper_t
  - Allow radius domain stream connec to postgresql
  - Remove ejabberd from the RabbitMQ policy.
  - Add a policy for ejabberd.
  - Add fs_manage_configfs_lnk_files() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255
changelog:
  - devicekit wants to getattr blk devices when unconfined disabled
  - Use stricter fc rules for sssd sockets in /var/run
  - Allow certmonger reads httpd_config_t files
  - Allow keepalived_t domain creating netlink_netfilter_socket.
  - Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
  - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
  - ejabberd small fixes
  - Update targetd policy to accommodate changes in the service
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  - Add interface to allow types to associate with cgroup filesystems
  - Dontaudit net_admin capability for useradd_t domain
  - Allow systemd_localed_t and systemd_timedated_t create files in /etc with label locate_t BZ(1443723)
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  - Add fs_manage_configfs_lnk_files() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256
changelog:
  - Allow keepalived domain connect to squid tcp port
  - Allow krb5kdc_t domain read realmd lib files.
  - Allow ganesha to connect to all rpc ports
  - Update ganesha with few allow rules
  - Update rpc_read_nfs_state_data() interface to allow read also lnk_files.
  - virt_use_glusterd boolean should be in optional block
  - Add new boolean virt_use_glusterd
  - Add capability sys_boot for sbd_t domain Allow sbd_t domain to create rpc sysctls.
  - Allow ganesha_t domain to manage glusterd_var_run_t pid files.
  - Create new interface: glusterd_read_lib_files() Allow ganesha read glusterd lib files. Allow ganesha read network sysctls
  - Add few allow rules to ganesha module
  - Allow condor_master_t to read sysctls.
  - Add dac_override cap to ctdbd_t domain
  - Add ganesha_use_fusefs boolean.
  - Allow httpd_t reading kerberos kdc config files
  - Allow  dnsmasq_t domain to read systemd-resolved pid files.
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  - Allow condor_master_t write to sysctl_net_t
  - Allow nagios check disk plugin read /sys/kernel/config/
  - Allow pcp_pmie_t domain execute systemctl binary
  - Allow nagios to connect to stream sockets. Allow nagios start httpd via systemctl
  - xdm_t should view kernel keys
  - Hide broken symptoms when machine is configured with network bounding.
  - Label 8750 tcp/udp port as dey_keyneg_port_t
  - Add interface fs_read_configfs_dirs()
  - Add interface fs_read_configfs_files()
  - Fix systemd_resolved_read_pid interface
  - Add interface systemd_resolved_read_pid()
  - Allow sshd_net_t domain read/write into crypto devices


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257
changelog:
  -  Add a boolean to enable the use of dac_override
  - Add support for userns for sandbox domains
  - Allow zabbix_t to kill zabbix_script_t processes
  - Allow kdumpgui to read removable disk device
  - Allow systemd_dbusd_t domain read/write to nvme devices
  - Allow udisks2 domain to read removable devices BZ(1443981)
  - Allow virtlogd_t to execute itself
  - Allow keepalived to read/write usermodehelper state
  - Allow named_t to bind on udp 4321 port
  - Fix interface tlp_manage_pid_files()
  - Allow collectd domain read lvm config files. BZ(1459097)
  - Allow RabbitMQ to use systemd-notify
  - Allow samba_manage_home_dirs boolean to manage user content
  - udev wants this when unconfined disabled
  - Allow systemd_modules_load_t to load modules


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258
changelog:
  - Allow rpcbind_t to execute systemd_tmpfiles_exec_t binary files.
  - Allow qemu to authenticate SPICE connections with SASL GSSAPI when SSSD is in use
  - Fix dbus_dontaudit_stream_connect_system_dbusd() interface to require TYPE rather than ATTRIBUTE for systemd_dbusd_t.
  - Allow httpd_t to read realmd_var_lib_t files
  - Allow unconfined_t user all user namespace capabilties.
  - Add interface systemd_tmpfiles_exec()
  - Add interface libs_dontaudit_setattr_lib_files()
  - Dontaudit xdm_t domain to setattr on lib_t dirs
  - Allow sysadm_r role to jump into dirsrv_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
  - Allow boinc_t nsswitch
  - Dontaudit firewalld to write to lib_t dirs
  - Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
  - Allow thumb_t domain to allow create dgram sockets
  - Disable mysqld_safe_t secure mode environment cleansing
  - Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
  - Allow dirsrv domain setrlimit
  - Dontaudit staff_t user read admin_home_t files.
  - Add interface lvm_manage_metadata
  - Add permission open to files_read_inherited_tmp_files() interface


author: Petr Lautrbach <plautrba@redhat.com> - 4.1.0-2
changelog:
  - Move python networkx dependency to -gui and -console-analyses
  - Ship sedta and seinfoflow in setools-console-analyses


author: Bastien Nocera <bnocera@redhat.com> - 1.6-3
changelog:
  - Remove file-roller as handler for cbz/cbr files
    See https://bugzilla.gnome.org/show_bug.cgi?id=767244


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.2.RC1
changelog:
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.25-6
changelog:
  - drop hard requirement for text-www-browser (any package that
    needs docbook->txt for build  may buildrequire any of
    w3m/lynx/elinks as suggested by script)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Simone Caronni <negativo17@gmail.com> - 1:7.5-25
changelog:
  - Restore font-utils provider, required by some packages for building.
   examine all platform=3 encodings (fixes #578460)


