# changelog

author: Sérgio Basto <sergio@serjux.com> - 0.99.3-7
changelog:
  - Remove sub-packages sysvinit, upstart and systemd to be more compatible with
    el6 .
  - Remove provides/obsoletes for very old sub-packges clamav-milter-core,
    clamav-milter-sendmail and clamav-milter-core
  - Call server and scanner sub-packages as clamd (el6 compatible and as uppstream
    call it)
  - clamav-data provides clamav-db (el6 compatible)
  - Explicitly enable-id-check and enable-dns in configure (as in el6).
  - Add missing build-time requirement pcre2-devel (it misses in el6 at least)


author: Orion Poplawski <orion@nwra.com> - 0.99.4-1
changelog:
  - Update to 0.99.4
  - Security fixes CVE-2012-6706 CVE-2017-6419 CVE-2017-11423 CVE-2018-1000085
    CVE-2018-0202


author: Sérgio Basto <sergio@serjux.com> - 0.99.4-2
changelog:
  - Revert fix for llvm, build using -std=gnu++98 (#1307378)
  - Revert CFLAG assignment in commmit a4a6d252 (made in 2006)
  - BR systemd-devel to fix detection in configure.
  - Disable llvm in ppc64 (#1534071)
  - "Disable llvm will use the internal bytecode interpreter rather than the llvm
    jit", so drop bytecode build condition and use condional on enable or disable
    llvm.


author: Sérgio Basto <sergio@serjux.com> - 0.100.0-2
changelog:
  - Try to mitigate bug #1583599
  - Move comments one line (to read before starting the scriptlet)
  - clamav-milter could work without clamd and without sendmail (#1583599)
  - Get rid of provides/requires with updateuser, virusgroup, scanuser and
    milteruser and just simply require clamav-filesystem


author: Sérgio Basto <sergio@serjux.com> - 0.100.0-3
changelog:
  - Remove sub-package clamav-data-empty
  - Also remove conflicts between clamav-data and clamav-data-empty


author: Sérgio Basto <sergio@serjux.com> - 0.100.1-3
changelog:
  - Modify group of /var/run/clamd.scan to virusgroup
  - Add some SELinux notes from (#787434)
  - Drop pointless clamav-0.99.1-setsebool.patch
  - Drop conditionalized build of noarch


author: Sérgio Basto <sergio@serjux.com> - 0.100.1-4
changelog:
  - Change the default location of configuration files in clamconf, binaries and
    man pages, replacing with our default packaging (#859339).


author: Sérgio Basto <sergio@serjux.com> - 0.100.2-1
changelog:
  - Update to 0.100.2
  - Fix logrotate example (#1610735)
  - Improve clamd@.service (enter in commit "clean whitespace" by mistake sorry)


author: Orion Poplawski <orion@nwra.com> - 0.102.2-5
changelog:
  - Do not log freshclam output to syslog by default - creates double entries
    in the journal (bz#1822012)
  - (#1820069) add try-restart clamav-freshclam.service on logrotate


author: Orion Poplawski <orion@nwra.com> - 0.102.2-7
changelog:
  - Move /etc/clamd.d/scan.conf to clamav-filesystem
  - Add patch to build with EL7 libcurl - re-enable on-access scanning
    (bz#1820395)
  - Add clamonacc.service


author: Orion Poplawski <orion@nwra.com> - 0.102.4-1
changelog:
  - Update to 0.102.4 (bz#1857867,1858262,1858263,1858265,1858266)
  - Security fixes CVE-2020-3327 CVE-2020-3350 CVE-2020-3481


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.10.0-18
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run 
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files. 
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun; 
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-1
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.2-1
changelog:
  - update to 1.7.2
  - use modern 'make install' macro
  - remove needless gsettings convert file
  - use --with-gnome --all-name for find locale
  - add BR libICE-devel
  - fix ld scriptlets


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: - Andreas Schneider <asn@redhat.com> - 0.6.1-1
changelog:
  - Update to version 0.6.1.
  - resolves: #1056757 - Fix scp mode.
  - resolves: #1053305 - Fix known_hosts heuristic.


author: Martin Pitt <mpitt@redhat.com> - 0.7.1-7
changelog:
  - resolves: #1637182 - Add SHA256 fingerprint support
  - Fix regression with keyboard interactive authentication introduced in
    previous update


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.16.0-2
changelog:
  - fix for https://github.com/mate-desktop/marco/issues/251
  - https://bugzilla.redhat.com/show_bug.cgi?id=1419634


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.12.1-1
changelog:
  - update to 1.12.0 release
  - add mate-mimeapps.list
  - add runtime require mate-user-guide
  - remove upstreamed patch
  - user-guide is now a single package again
  - update rpm scriptlets


author: Wolfgang Ulbrich <chat-to-me@raveit.de> 1.7.1-1
changelog:
  - update to 1.7.1 release
  - add missing changelog entry from previous build
  - add --with-gnome --all-name for find language
  - use modern 'make install' macro


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.16.2-2
changelog:
  - fix crash on unknown dbus signal name
  - https://github.com/mate-desktop/mate-power-manager/issues/225


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.16.0-2
changelog:
  - fix resizing the startup applications preferences window
  - https://github.com/mate-desktop/mate-session-manager/commit/d8da9ef


author: Wolfgang Ulbrich <fedora@raveit.de> - 3.22.19-2
changelog:
  - add some upstream patches
  - improvements for using metacity-theme-3 with Menta themes
  - highcontrast icon-theme improvement


author: Ben Woodard <woodard@redhat.com
changelog:
  - removed dot at end of summary
  - removed unused/broken smp build
  - changed to using initrddir macro
  - changed depricated Prereq to Requires


author: Ben Woodard <woodard@redhat.com>
changelog:
  - add parameters to make
  - replace etc with _sysconfdir in most places
  - remove post section with unexplained removing of cached man pages.
  - removed dots at end of all summaries.


author: John K. Harvey <john.harvey@crunchydata.com> - 9.6.6-3PGDG
changelog:
  - Fixes for CVE-2017-12172 (EL-6 only)
  - Update TimeOutSec parameter to match systemd docs (EL-7 only)


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.7-1PGDG-1
changelog:
  - Update to 9.6.7, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-7.html


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.8-1PGDG-1
changelog:
  - Update to 9.6.8, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-8.html


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.9-1PGDG-1
changelog:
  - Update to 9.6.9, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-9.html
  - Build hstore_plpyton and ltree_plpython with PY3 as well. This
    is a backport of 969cf62e70e6f97725f53ac70bf07214555df45d .


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.10-1PGDG-1
changelog:
  - Update to 9.6.10, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-10.html


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.11-1PGDG-1
changelog:
  - Update to 9.6.11, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-11.html
  - Fix upgrade path setup script, and add check_upgrade as well.


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.11-2PGDG
changelog:
  - Initial attempt for RHEL 8 packaging updates.
  - Rename plpython macro to plpython2, to stress that it is for Python 2.


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.12-1PGDG-1
changelog:
  - Update to 9.6.12, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-12.html


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.5-2PGDG-1
changelog:
  - Fix #1289 (OOM killer control for PostgreSQL)
  - Do not set any timeout value, so that systemd will not kill postmaster
    during crash recovery. Fixes #2786.


author: Devrim Gündüz <devrim@gunduz.org> - 9.6.6-1PGDG-1
changelog:
  - Update to 9.6.6, per changes described at:
    https://www.postgresql.org/docs/devel/static/release-9-6-6.html


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Orion Poplawski <orion@cora.nwra.com> - 2.07-1
changelog:
  - Update to 2.07 (bug 1159526) fixes:
    CVE-2013-4440 (bug 1020222, 1020223)
    CVE-2013-4442 (bug 1020259, 1020261)


author: Luke Macken <lmacken@redhat.com> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Run the test suite
  - Add a python3 subpackage
  - Remove obsolete buildroot tag and cleanup


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.1.0-1
changelog:
  - Update to 3.1.0 in Rawhide.
  - Build the python3 subpackage
  - Update to new-style filtering of provides


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 1.4.2-8
changelog:
  - Add /dev/shm/qb* files to whitelist. Fixes bug #1403602
  - Add /dev/shm/squid-ssl_session_cache.shm to whitelist. Fixes bug #1411130


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-1
changelog:
  - Upgrade to 1.4.6. Fixes bug #1524456
  - Allow KRA vault log files. Fixes bug #1541472
  - ipc_shared_mem warning fixed upstream. Fixes bug #1524456


author: Melissa Stone <melissa@puppetlabs.com> - 0.4.1-3
changelog:
  - Use RbConfig rather than Config to find sitelibdir
  - Use vendorlibdir and vendorarchdir for rhel 7


author: Steve Traylen <steve.traylen@cern.ch> - 0.9.16-1
changelog:
  - New updstream 0.9.16, upstream moved to source and rubygems.org
  - Update to ruby package guidelines.
  - Fix for EPEL7.


author: Moses Mendoza <msoes@puppetlabs.com> - 0.6.2-1
changelog:
  - Package rgen as a library. The tarball is created from a `gem unpack`
  - of rubygem-rgen and tarring up the resulting contents.


author: Ryan McKern <ryan.mckern@puppetlabs.com> - 1:2.2.0-2
changelog:
  - Bump release to version 1:2.2.0 in order to override a broken 2.3.2 package
    that was shipped and later yanked. The incompatable package broke user resources,
    and was removed from distribution on Feb 19 2014.
  - "Epoch is forever"


author: Melissa Stone <melissa@puppetlabs.com> - 1.6.2-1
changelog:
  - Update to upstream latest v1.6.2
  - Rework spec file to comply with modern fedora requirements
  - Stop building doc package


author: Trevor Vaughan <tvaughan@onyxpoint.com> - 1.8.2-0
changelog:
  - Updated gem to 1.8.2
  - Removed pinning to specific version of puppetserver
  - Removed obsolete dependency on blankslate
  - Added 'puppetserver' to the gem name to not conflict with native packages


author: Trevor Vaughan <tvaughan@onyxpoint.com> - 0.2.0-0
changelog:
  - Updated gem to 0.2.0
  - Removed pinning to specific version of puppetserver
  - Updated dependency on parslet
  - Added 'puppetserver' to the gem name to not conflict with native packages


author: Trevor Vaughan <tvaughan@onyxpoint.com> - 0.2.0-1
changelog:
  - Obsolete rubygem-puppetserver-blankslate <= 2.1.2.4
    - This is not wonderful, but the trade off between a clean upgrade to the
      latest puppetserver and having the blankslate gem hanging around seems
      worthwhile.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
changelog:
  - Rebased to Ruby 2.0.0-p598.
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
        -succ.patch; subsumed
    * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
    Resolves: rhbz#1071187
  - Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
    Resolves: rhbz#1164000
  - Fix for Proxy Realm feature.
    Resolves: rhbz#1122140
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164000


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: XXX <x.x@x.x> - 477.0.0-0
changelog:
  - An update to TPM 2.0 draft specification revision 124
  - A command line parameter to force remanufacturing. The previous release
    performed manufacturing each time the simulator was started. All NV memory
    was initialized. By default, without the new command line parameter, this
    build retains NV state.


author: XXX <x.x@x.x> - 832.0.0-0
changelog:
  - The TPM state NVChip is not compatible with previous builds.
    - Remove NVChip before running the first time.
  - An update to TPM specification revision 138.
    - 138 includes 4 new commands and a refactoring of the crypto code to make it
      easier to replace the crypto library.


author: XXX <x.x@x.x> - 1119.0.0-0
changelog:
  - Support for OpenSSL 1.1.x.
  - Support for big endian platforms, using BIG_ENDIAN_TPM=YES
  - An update to TPM specification draft revision 146
    - avalable for public review
    - includes changes to TPM2_CreateLoaded and TPM2_EncryptDecrypt
  - Support for Nuvoton TPM vendor specific commands
  - A contributed makefile.mac for Mac
  - The TPM starts powered up, so the initial power up command is not necessary
  - Non-deterministic random numbers are used when SIMULATION is not set
  - A few tweaks for better cygwin support


author: Nick Miller <nick.miller@onyxpoint.com> - 2.6.2
changelog:
  - Update rpm to include r10k 2.6.2 and other components.
  - Gems are now built from source and not contained in the repo.
    See build/sources.yaml.
  - Added a basic docker test: rake test


author: Liz Nemsick <lnemsick.simp@gmail.com> - 2.6.2-1
changelog:
  - Fixed bug in RPM variable used in simp-vendored-r10k description
  - Fixed bug in which release for r01k gem in sources.yaml was not being
    used for the RPM release number of simp-vendored-r10k and
    simp-vendored-r10k-doc packages.


author: Jeanne Greulich <jeanne.greulich@onyxpoint.com> - 3.1.1-0
changelog:
  - Updated source versions to use r10k 3.1.1 and updated
    dependency gems where possible.  Latest puppet_forge
    gem relies on faraday ~> 0.9.0 so that gem
    cannot be updated until next release of puppet_forge gem.
  - Remove puppet 4 support.
  - Updated the version of simp-rake-helpers in Gemfile
    because earlier version has r10k dependency set to ~> 2.2.
  - Updated release for all dependencies so they would all be reinstalled
    in the new simp-r10k directory.  Gem dependencies were being installed 
    in r10k-<version> directory.  If r10k was
    updated it create a new r10k-<version> directory but if dependencies had
    not been updated they were not reinstalled in new directory. To fix this
    the version number was removed off the gem sub-directory. The release
    versions had to be updated this one time to force reinstall in the new
    versionless directory.
  - Add fixtures file so FIPS tests will pass.
  - updated Gemfile for simp-beaker-helpers to include new functions used in
    testing


author: Morgan Haskel <morgan.haskel@onyxpoint.com> - 1.0.2-0
changelog:
  - Updated with all sorts of goodness including:
    - Some code cleanup
    - The ability to dump to syslog
    - The ability to replay from syslog
    - A rate limiter to not collect things that don't seem to be
      originating from a human.


author: John Jackson <jjackson@prophasys.com> - 1.0.2-1
changelog:
  - Determined that the sudosh.sh overlay in /etc/profile.d did not
    properly pass arguments to sudosh when called with -c and whitespace
    separation. This has been fixed.


author: Trevor Vaughan <tvaughan@ponyxpoint.com> - 1.0.2-2
changelog:
  - Rewrote some of the code to work better with syslog.
  - Fixed some typos
  - Removed some unnecessary code
  - Updated the spec file to properly use the WITH_SYSLOG calls


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 1-1
changelog:
  - Release v1. Not ready for production. Following features are included.
  - Recording of user input, program output and window size changes.
  - Support for writing into syslog and files.
  - Tlog-rec configuration through system-wide configuration file
    /etc/tlog/tlog-rec.conf, environment variables and command line.
  - Very basic playback directly from ElasticSearch.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2-1
changelog:
  - Release v2. Not ready for production. Following features are added.
  - Fully-fledged command-line interface to tlog-play, along with config file
    and man pages.
  - Support for playback from file in tlog-play.
  - Make tlog-play follow mode controllable and off by default.
  - Get tlog-rec shell also from TLOG_REC_SHELL environment variable.
  - Support non-TTY stdin/stdout in tlog-rec, allowing its use with
    non-interactive SSH sessions.
  - Support building on and packaging for EPEL5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
  - Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
  - Add BuildRequires to specify version tpm2-tss-devel needed
  - Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
  resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Remove pkg_version to avoid dupliate use of version
  - Remove redundant BuildRequires for autoconf/automake/pkgconfig
  - Add comments for BuildRequires of sapi/tcti-device/tcti-socket
  - Use ExclusiveArch instead of ExcludeArch
  - Requires tpm2-tss version updated to 1.0-2
  - Updated release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-3
changelog:
  - Change spec file permission to 644 to avoid rpmlint complain
  - Update Requires to fix dependency check error reported in Bodhi
  - Remove tpm2-tss-devel version in BuildRequires comment
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
  - Remove epel dependencies
  - Change tpm2-tss dependency to not be tied to 1 version
  - Fix resource leak in InitSysContext
  - Clean up HashEKPublicKey
  - Add needed null checks to tpm2_getmanufec
  - clean up resource leak in tpm2_getmanufec
  - use strdup to get server address in tpm2_getmanufec
  - change preparePcrSelections_g to void
  - return on success in print_rc_tpm_error_code
  - Update release version
  resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
  - Remove global macro pkg_version to avoid duplicate of version
  - Use ExclusiveArch instead of ExcludeArch
  - Use less wildcard in %files section to be more specific
  - Add trailing slash at end of added directory in %file section
  - Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
  - Increase release version to 2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
  - Add systemd unit for resourcemgr
  - Add utils subpackage
  - Add Makefile.am patch to install test programs
  - Add patch to swap out AX_PTHREAD for different check
  - Increase release version to 3
  resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


