# changelog

author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.19.4-1
changelog:
  - Resolves: #1919391, #1926796 - Security fix for CVE-2021-20206
  - bump to v1.19.4
  - adjust dependencies


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.1.4-1
changelog:
  - first build for review
  - source copied from openSUSE @ https://build.opensuse.org/package/show/openSUSE:Factory/catatonit


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 4:1-2
changelog:
  - bump version to random number
  - no connection of package to github.com/containers/common
  - add conf files to dist-git repo
  - bring back update.sh


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 4:1-3
changelog:
  - Resolves: #1916922 - drop subscription-manager dep
  - use config files from minimum common versions of upstream libraries
  - list files in alphabetical order


author: Dan Walsh <dwalsh@fedoraproject.org> - 1:0.2.0-3
changelog:
  - Update registries.conf to use version 2 definitions
  - Update containers.conf to include latest changes
  - Update seccomp.json to allow a few more syscalls for contaners within containers.
  - Update storage.conf to match upstream


author: Dan Walsh <dwalsh@fedoraproject.org> - 1:1.1.1-2
changelog:
  - Update configuration files in containers-common
  - Update configuration files in containers-storage


author: Dave Dykstra <dwd@fnal.gov> - 1.2-2
changelog:
  - Change Obsoletes/Conflicts on cvmfs-keys and cvmfs-init-scripts to
    Obsoletes/Provides with specific version numbers, according to Fedora
    packaging guidelines


author: Dave Dykstra <dwd@fnal.gov> - 1.7-1
changelog:
  - Skipped versions 1.5 and 1.6 because debian packages with those 
    versions already exist
  - Replace BNL and FNAL stratum 1s with their OSG aliases for the
    cern.ch domain


author: Jonathan S. Billings <jsbillin@umich.edu> - 1.8.0-0.pre1
changelog:
  - Building 1.8.0 pre1 alpha
  - Disable packaging of kaserver, pam_afs pam modules, kpasswd, man pages
    and related software
  - Include dkms package (from openafs-kmod spec file)


author: Jonathan S. Billings <jsbillin@umich.edu> - 1.8.2-1
changelog:
  - Building 1.8.2
  - Add patches to fix bugs introduced in OPENAFS-SA-2018-001 and
    OPENAFS-SA-2018-003, one of which led to compile errors.


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.5.3-24.20130903gitb074e0b
changelog:
  - Disable autogen and parallel make on EL5
  - Add pregenerated autoconf tarball as Source1
  - Add script to pregenerate autoconf files as Source2


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.2.20140326git7e6b55
changelog:
  - Update git snapshot to latest tip of heimdal-1-6-branch
  - Rename Source11 with "heimdal-" prefix
  - Use newer macro for UnversionedDocdirs change


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.3.20140429gitd60ba47
changelog:
  - Add BR libdb-devel on Fedora (RHBZ #613001)
  - Add BR openssl-devel and libcap-ng-devel (RHBZ #613001)
  - Only set BuildRoot on el5
  - Alphabetize non-conditional BuildRequires
  - Remove duplicate BR openldap-devel


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.4.20140522git229d8c7
changelog:
  - Update git snapshot to latest tip of heimdal-1-6-branch
  - Drop upstreamed text-fx patch
  - Install Texinfo files (RHBZ #613001)
  - Add Provides: heimdal-static to -devel subpackage (RHBZ #613001)
  - Drop %defattr (RHBZ #613001)
  - Add text content to kadmind.acl to help users (and remove a zero-length file)
  - Install profile.d scripts with non-executable permissions
  - Remove .la files
  - Patch to remove AC_PROG_LIBTOOL macro
  - Reload xinetd when using systemd
  - Require logrotate and setup, since we drop config files into directories that
    these packages own.
  - Add unowned Heimdal directories in %files
  - Replace "heimdal" with %{name} in %files
  - Do not BR libcap-ng-devel on EL5


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.5.20140529gitddde77b
changelog:
  - Update git snapshot to latest tip of heimdal-1-6-branch
  - Use /sbin path in %pre/%post scripts for EL6 and EL5
  - Install login.users(5) normally, since it doesn't conflict with anything
    (RHBZ #613001)
  - Don't ship ftpusers(5) (RHBZ #613001)
  - Patch heimtools to deal with the commands' "heimdal-" prefixes (RHBZ #613001)
  - Use "simple" systemd service type for kdc, kadmind, kpasswdd
  - Add "--detach" flag in heimdal-ipropd-slave-wrapper to match the systemd
    forking service type
  - Patch kadmind to handle systemd's restrictions on setpgid() (RHBZ #613001)


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.6.20140606git966108b
changelog:
  - Update git snapshot to latest tip of heimdal-1-6-branch
  - Don't ship xinetd support if the distro has systemd (RHBZ #613001)


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.8.20140621gita5adc06
changelog:
  - Patch for parallel build failure in kadm5. Thanks Jakub Čajka.
  - Remove comments about X11 binaries (we will never ship those).


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 1.6.0-0.9.20140621gita5adc06
changelog:
  - Remove OpenSSL BR and go back to using hcrypto with bundled libtommath.
    OpenSSL is not thread safe without callbacks (RHBZ #1118462)


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-142.el8]
changelog:
  - [drm] drm/virtio: use virtio_max_dma_size (Gerd Hoffmann) [1739291]
  - [mm] hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined (Rafael Aquini) [1706088]
  - [powerpc] kvm: ppc: book3s: Enable XIVE native capability only if OPAL has required functions [BZ1744884] (David Gibson) [1744884]
  - [scsi] scsi: lpfc: Fix oops when fewer hdwqs than cpus (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Limit xri count for kdump environment (Dick Kennedy) [1745731]
  - [scsi] scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (Dick Kennedy) [1745731]
  - [scsi] scsi: qla2xxx: Fix hardirq-unsafe locking (Himanshu Madhani) [1719941]
  - [x86] Revert "[x86] x86/kexec/64: Prevent kexec from 5-level paging to a 4-level only kernel" (Baoquan He) [1669088]
  - [x86] Revert "[x86] x86/boot: Add xloadflags bits to check for 5-level paging support" (Baoquan He) [1669088]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-143.el8]
changelog:
  - [net] netfilter: nft_set: fix allocation size overflow in privsize callback. (Florian Westphal) [1746338]
  - [net] net: route dump netlink NLM_F_MULTI flag missing (Stefano Brivio) [1745971]
  - [net] sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue (Davide Caratti) [1745390]
  - [net] sched: pfifo_fast: fix wrong dereference when qdisc is reset (Davide Caratti) [1745387]
  - [scsi] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1746597]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-144.el8]
changelog:
  - [md] Revert "[md] dm: eliminate 'split_discard_bios' flag from DM target interface" (Mike Snitzer) [1749929]
  - [md] Revert "[md] dm: make sure to obey max_io_len_target_boundary" (Mike Snitzer) [1749929]
  - [pci] PCI: Restore Resizable BAR size bits correctly for 1MB BARs (Myron Stowe) [1717760]
  - [net] netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled (Phil Sutter) [1743945]
  - [net] netfilter: bridge: Drops IPv6 packets if IPv6 module is not loaded (Phil Sutter) [1743945]
  - [drm] drm/qxl: get vga ioports (Gerd Hoffmann) [1728936]
  - [drm] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (Lyude Paul) [1724363]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-145.el8]
changelog:
  - [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734842]
  - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750882] {CVE-2019-14835}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-146.el8]
changelog:
  - [fs] gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Robert S Peterson) [1750939]
  - [s390] kvm: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() (Thomas Huth) [1753260]
  - [fs] cifs: fix credits leak for SMB1 oplock breaks (Leif Sahlberg) [1752243]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.el8]
changelog:
  - [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755110]
  - [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755110]
  - [netdrv] drivers: tap.c: fix wrong backport causing WARN_ON_ONCE(1) in skb_flow_dissect() (Davide Caratti) [1750711]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746804] {CVE-2019-14821}


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-147.1.1.el8_1]
changelog:
  - [arm64] arm64/sve: Fix wrong free for task->thread.sve_state (Andrew Jones) [1767358 1756450]
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1766056 1756805] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756871 1756873] {CVE-2019-0155}
  - [x86] x86/tsx: Add config options to set tsx=on|off|auto (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Josh Poimboeuf) [1766550 1766551] {CVE-2019-11135}
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86/cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] KVM: x86/mmu: Reintroduce fast invalidate/zap for flushing memslot (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [kvm] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1698416 1690344] {CVE-2018-12207}
  - [zstream] switch to zstream (Frantisek Hrbata)


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.2.1.el8_1]
changelog:
  - [sched] fair: Scale bandwidth quota and period without losing quota/period ratio precision (Phil Auld) [1773568 1706247]
  - [sched] fair: Fix -Wunused-but-set-variable warnings (Phil Auld) [1773568 1706247]
  - [sched] fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1773568 1706247]
  - [powerpc] powerpc/pseries: Track LMB nid instead of using device tree (Steve Best) [1772110 1758742]
  - [powerpc] powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (Steve Best) [1772110 1758742]
  - [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Steve Best) [1772109 1758651]
  - [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Steve Best) [1772109 1758651]
  - [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1770177 1752498]
  - [fs] CIFS: Fix use after free of file info structures (Dave Wysochanski) [1767357 1757865]
  - [fs] cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1767357 1757865]
  - [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1764830 1756943]
  - [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1764830 1756943]
  - [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1764832 1749873]
  - [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1764832 1749873]
  - [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1764832 1749873]
  - [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1764832 1749873]
  - [cpuidle] cpuidle: governor: Add new governors to cpuidle_governors again (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: do not set an owner to allow modunload (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: set haltpoll as preferred governor (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: allow governor switch on cpuidle_register_driver() (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: Add cpuidle.governor= command line parameter (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: header file stubs must be "static inline" (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1764831 1759282]
  - [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1764831 1759282]
  - [x86] kvm: x86: add host poll control msrs (Vitaly Kuznetsov) [1764831 1749495]
  - [s390] s390/setup: Fix kernel lock down for s390 (Philipp Rudo) [1764827 1748343]
  - [powerpc] powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB (Steve Best) [1764826 1744062]
  - [fs] mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (Jeff Moyer) [1764825 1743159]
  - [mm] mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd() (Jeff Moyer) [1764825 1743159]
  - [pci] PCI: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1764634 1671288]
  - [pci] PCI: hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1764634 1671288]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.3.1.el8_1]
changelog:
  - [x86] kvm: svm: taint module and print taint message iff nested is enabled (Bandan Das) [1776114 1775410]


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.7.8-8
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Tomas Zvonik <tom.zvon@gmail.com> 1.7-1
changelog:
  - Documents directory can be configured
  - Create archive symlink in mkuser
  - Create directories for link in link_dirs when needed
  - Added help to mkuser


author: John Dennis <jdennis@redhat.com> - 1.8.8-1
changelog:
  - Update to 1.8.8 (#1316528)
  - Add missing unpackaged files/directories

    Add to doc: README.md, DISCLAIMER, AUTHORS
    Add to httpd/conf.d: auth_openidc.conf
    Add to /var/cache: /var/cache/httpd/mod_auth_openidc/cache
                       /var/cache/httpd/mod_auth_openidc/metadata


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5.1-1
changelog:
  - Update to 1.5.1 (tdockendorf@osc.edu)
  - Prep for 1.5.0 build (tdockendorf@osc.edu)
  - Remove ondemand-scl patch (tdockendorf@osc.edu)
  - Have ondemand depend on ondemand meta packages and not direct SCLs
    (tdockendorf@osc.edu)
  - Need pun_config_path too (tdockendorf@osc.edu)
  - Only kill off old PUNs if upgrade and old PUN config directory still exists,
    hopefully once someone cleans up old config directory the upgrade steps will
    stop (tdockendorf@osc.edu)
  - Add logic to kill of PUNs before upgrading so stray processes are not left
    behind (tdockendorf@osc.edu)
  - Apply ondemand-scl patch (tdockendorf@osc.edu)
  - Use /var/lib/ondemand-nginx and add logic to migrate /var/lib/nginx to
    /var/lib/ondemand-nginx (tdockendorf@osc.edu)
  - Update ondemand package to support ondemand SCL (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5.2-1
changelog:
  - Bump ondemand to 1.5.2 Improve 1.4 to 1.5 upgrade and don't suppress ood-
    portal-generator output during package installs (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5.2-2
changelog:
  - Handle 1.3 to 1.5 upgrades and better upgrade handling Add /var/tmp/ondemand-
    nginx (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5.2-3
changelog:
  - No longer set HTTPD24_HTTPD_SCLS_ENABLED, causes problems on RHEL 6 and not
    needed (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5.2-4
changelog:
  - Copy from config.rpmsave because earlier step removed app configs from
    original path (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.4-4
changelog:
  - Disable nfsmountable for ondemand-runtime to hopefully avoid files ending up
    in /etc (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5-2
changelog:
  - Add symlink /opt/rh/ondemand so that httpd24 assumption of loading SCL from
    /opt/rh will work (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5-4
changelog:
  - Fix meta packages to actually get created Ensure SCL variables are used
    everywhere so only one place to update dependencies (tdockendorf@osc.edu)


author: Trey Dockendorf <tdockendorf@osc.edu> 1.5-5
changelog:
  - Depend on apache devel and add some more marcos to aid in package development
    using ondemand (tdockendorf@osc.edu)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.0-1
changelog:
  - update to upstream release 1.4.0
  - enable SPDY module (new in this version)
  - enable http gunzip module (new in this version)
  - enable google perftools module and add gperftools-devel to BR
  - enable debugging (#956845)
  - trim changelog


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.1-1
changelog:
  - update to upstream release 1.4.1 (#960605, #960606):
    CVE-2013-2028 stack-based buffer overflow when handling certain chunked
    transfer encoding requests


author: OSP Prod Chain <dev-null@redhat.com> 2.23.0-1
changelog:
  - Update patches
  - Merge "Update TOX/UPPER_CONSTRAINTS_FILE for stable/train" into stable/train
  - Imported Translations from Zanata
  - Update TOX/UPPER_CONSTRAINTS_FILE for stable/train


author: OSP Prod Chain <dev-null@redhat.com> 2.23.0-1
changelog:
  - Update patches
  - Merge "py3: fix swift-account-audit" into stable/train
  - Merge "Imported Translations from Zanata" into stable/train
  - Merge "py3: fix swift-dispersion-populate" into stable/train
  - Merge "py3: Fix swift-recon" into stable/train
  - Merge "py3: Fix swift-drive-audit" into stable/train
  - py3: fix swift-account-audit
  - py3: Fix swift-recon
  - py3: fix swift-dispersion-populate
  - Fix kms_keymaster under Python 3
  - py3: Fix swift-drive-audit
  - Imported Translations from Zanata


author: OSP Prod Chain <dev-null@redhat.com> 2.23.1-1
changelog:
  - Update patches
  - Merge "Fix misleading error msg if swift.conf unreadable" into stable/train
  - Make our py2 func tests more explicitly py2
  - Fix misleading error msg if swift.conf unreadable


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Tomas Zvonik <tom.zvon@gmail.com> 1.2-1
changelog:
  - Add option to find out if reservation exists for a specific time/list reservations before a specific time


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:3.0.0-0.6.rc3
changelog:
  - set GO111MODULE=off go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \n') -extldflags '-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld '" -a -v -x for centos;


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 3.15-1
changelog:
  - Update to 3.15
  - Use HTTPS URLs
  - Remove Group tag
  - Enable parallel make with smpflags
  - Switch to %autosetup
  - cherry-pick "Fix passing CFLAGS to PHP configure" from upstream
  - set REMCTL_PYTHON_VERSIONS=python2 (rhbz#1606109)


author: Dan Walsh <dwalsh@fedoraproject.org> - 1:1.2.0-8
changelog:
  - Add initial shortnames.conf file for expanding shortnames
  - Update man pages and storage.conf
  - Add update.sh to make getting man pages and configuration files easier


