# changelog

author: Tim Waugh <twaugh@redhat.com> 1.3.7-2
changelog:
  - Fixed typo in check-device-ids.py when looking for ID-less matches.
  - Handle new CUPS 1.5 IPP error response IPP_AUTHENTICATION_CANCELED
    (Ubuntu #653132).


author: Tim Waugh <twaugh@redhat.com> 1.3.7-1
changelog:
  - 1.3.7:
    - Show private job attributes for "my jobs" (bug #742279).
    - Enable Test Page button when application/postscript is supported.
    - Some preferreddrivers.xml fixes (Ubuntu #855412).
    - Handle errors saving troubleshoot.txt (Ubuntu #789602).
    - Removed some stale code.
    - Make connections list more easily accessible (Ubuntu #842092).
    - Improved handling of remote CUPS queues via DNS-SD, and IPP devices.
    - Better display of CUPS servers from "Find Network Printer".
    - Fixed SMB method for printer finder.
    - Don't handle tooltips during mainloop recursion (bug #664044,
      bug #739734).
    - Fixed bold print of tab labels on option conflicts.
    - Preserve installable options on driver change.
    - Update printer properties dialog correctly when PPD changed.
    - Fixed typo triggered by private job attributes (Ubuntu #827573).
    - Marked some translatable strings that weren't (bug #734313).


author: Tim Waugh <twaugh@redhat.com> 1.3.6-1
changelog:
  - 1.3.6:
    - Updated translations.
    - IPPAuthConnection: avoid traceback (Ubuntu #828030).
    - Allow entering @,?,=,& characters in Device URI text field
      (Ubuntu #826958).
    - Removed PackageKit client code in missingPackagesAndExecutables
      (bug #726938).
    - Properties dialog: make OK button sensitive even when no changes
      to save (Ubuntu #444280).


author: Tim Waugh <twaugh@redhat.com> 1.3.5-1
changelog:
  - 1.3.5:
    - Driver selection, missing executables checking, and physical
      device grouping now exposed via D-Bus.
    - Fixed cupsFilter search in missing executables check.
    - Use PackageKit to resolve missing executable filenames to
      packages.
    - Fixed DNSSD hostname resolution.
    - Fixed firewall code to handle json errors when used with the older
      system-config-firewall D-Bus service.
    - Fixed LPD probing (726383).
    - Use "hostname" instead of "IP address" when asking for names of
      browse servers (bug #726134).
    - Updated translations.
  - Also: applied patch to fix serversettings traceback, from upstream
    post-1.3.5 (bug #726682).
  - Move files around so the libs sub-package provides the D-Bus service.


author: Tim Waugh <twaugh@redhat.com> 1.3.4-1
changelog:
  - 1.3.4:
    - Don't rely on retriggering printers; enumerate them from systemd
      instead.
    - Don't complain about missing/invalid device ID for devices we've
      already handled.
    - Removed unused Printer Groups feature.
    - Don't show "No printers configured" page if the printers are
      filtered in any way.
    - URL-quote URIs when using "Find Network Printer" (Ubuntu #808137).
    - Downloadable drivers: don't display printers for which there are
      no drivers (bug #668154).
    - Kerberos support for the SMB 'Verify' button (requires new enough
      pycups).
    - Removed IPP/HTTP device screen in favour of "Enter URI"
      (bug #685091).
    - Converted ComboBoxEntry widgets to Entry+EntryCompletion in
      NewPrinterWindow.ui.
    - Robustness in ppdsloader in the face of errors (Ubuntu #766818).
    - Changed Make/Model/State labels into GtkEntry widgets so contents
      are always fully selectable (bug #719217).
    - Convert iters to paths before comparing (bug #717062, Ubuntu #791690,
      trac #221).
    - Set translation domain in D-Bus service (Ubuntu #783967).
    - Ensure consistency in jobviewer if add_job fails (bug #693055,
      bug #632551).
    - Avoid PostScript for HP LaserJet 2100 Series (bug #710231).
    - Raised priority for SpliX driver (Ubuntu bug #793741).
    - Updated Free Software Foundation (FSF) address.
    - Adjusted test code in asyncpk1.py so it doesn't look like a
      tempfile vulnerability.


author: Jiri Popelka <jpopelka@redhat.com> 1.3.3-1
changelog:
  - 1.3.3:
    - Set translation domain for ServerSettingsDialog (Ubuntu #777188).
    - scp-dbus-service: Ignore setlocale() errors (Ubuntu #748964).
    - Renamed ui/*.glade to ui/*.ui again (Ubuntu #759811).
    - Allow % character in SMB URI (Ubuntu #747400).
    - More error handling (Ubuntu #744783).
    - Avoid traceback if printer duplication fails (bug #694629).
    - Fixed off-by-one error in monitor.
    - Fixed printer renaming (Ubuntu #726954).
    - Added PrinterModified D-Bus signal to printer properties interface.
    - More robustness for printer properties dialog
      when printer removed (Ubuntu #741987).
    - Fixed PPDs loader when using CUPS remotely or
      when DBus not available (bug #693515).
    - Handle failure to load PPDs more gracefully (Ubuntu #742409).
    - Avoid traceback when cancelling New Printer dialog after failure.
    - Make sure everything is ready before handlers might be called (bug #689336).
    - Ensure consistency in jobviewer if add_job fails (bug #693055, bug #632551).
    - Be defensive against CUPS returning incorrect job IDs (Ubuntu #721051).
    - Job viewer's attribute window: Convert job numbers and
      attribute values to strings (Ubuntu bug #733088).
    - udev-configure-printer: be more defensive when
      parsing CUPS response (Ubuntu #760661).


author: Tim Waugh <twaugh@redhat.com> 1.3.2-2
changelog:
  - Fixed traceback in newprinter.py (bug #680683).
  - Improvements for check-device-ids from upstream.
  - Don't start the applet in GNOME at all (bug #677676), now that GNOME
    Shell is capable of handling New Printer notifications. (Note that
    automatic driver installation won't work until GNOME Shell implements
    that part.)


author: Tim Waugh <twaugh@redhat.com> 1.3.2-1
changelog:
  - 1.3.2:
    - Set connected state when connecting to server fails (bug #685098).
    - Handle the situation where cupsd has died/restarted more gracefully.
    - Renamed ui/*.ui -> ui/*.glade again, fixing translations.
    - Just hide Printer Properties dialog on delete-event (Ubuntu #729966).
    - Extra job options: print-quality, printer-resolution, output-bin.
    - Automatically show horizontal scrollbar in job options screen.
    - Ignore "output-mode-default" attribute as it is not settable.
    - Handle IPP_TAG_RESOLUTION types (requires pycups-1.9.55).
    - Don't traceback if option value cannot be handled.
    - Fixed traceback in options.py (bug #679103).
    - Handle URIs in Find Network Printer entry, and use 'Enter URI'
      instead of 'Other' (bug #685091).
    - Use "Do It Later" instead of "Cancel" for adjust firewall dialog
      (trac #213).
    - Fixed an instance where NewPrinterGUI might not have self.printers
      set (bug #680683).
    - IPPHostname can contain colon (to specify port).
    - Fixed automatic driver installation when changing the driver.
    - Removed stale code left over from conversion to gobjects.
    - Ensure all uses of ppdsloader supply the Device ID.
    - Fixed some small typos in newprinter --help output.
    - Prevent traceback after 2nd drivers search dialog is cancelled
      (bug #680288).
    - Activated and fixed testing mode for device ID/driver association
    - Match HP-Fax2/3/... PPDs, as well as Ubuntu/Debian hpijs-ppds
      packages.
    - preferreddrivers.xml: Identify hpcups and hpijs fax PPDs.
    - Match native hpijs driver (drv:///hp/hpijs.drv/...) as "hpijs".
    - Handle Ubuntu locations of hpcups.drv and hpijs.drv.
    - preferreddrivers.xml: match OpenPrinting gutenprint PPD names as
      gutenprint.
    - Removed DES field check altogether.
    - xmldriverprefs.test: show order more clearly.
    - Make xmldriverprefs.test() debugging optional.
    - More debugging during PPD selection.
    - Prefer foomatic PostScript drivers before PCL drivers (except
      foomatic-recommended ones).


author: Tim Waugh <twaugh@redhat.com> 1.3.1-1
changelog:
  - 1.3.1:
    - Fixed page sequence when adding a printer with an exactly-matching
      driver.
    - firewall: fixed cache behaviour.
    - Defer calls to populateList initiated by monitor.
    - Removed duplicate method definition.
    - monitor: always set self.bus even when D-Bus not available.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-2
changelog:
  - Don't show job notifications from the applet, just do New Printer
    notifications and handle requests to install printer drivers
    (bug #677676).


author: Tim Waugh <twaugh@redhat.com> 1.3.0-1
changelog:
  - 1.3.0:
    - Prevent look-up failures in dnssdresolve (Ubuntu #716357).
    - Install libsane-hpaio when appropriate (bug #585362).
    - Avoid double-checking networked HPLIP-able devices.
    - Use #!/usr/bin/python throughout, even for non-executables.
    - Don't display tooltips in the jobviewer as they do not work at
      all.
    - Translation updates.


author: Jiri Popelka <jpopelka@redhat.com> 1.2.97-1
changelog:
  - 1.2.97:
    - Handle failure to connect in PrinterURIIndex (bug #668568).
    - Fixed bugs in gtk_label_autowrap.py (bug #637829).
    - Avoid Foomatic/pxlmono until output size issue is fixed (bug #661814).
    - Avoid traceback when notification daemon has persistence (bug #671375).
    - Don't crash when DISPLAY is unset (bug #676339, #676343).
    - Improvements for DNS-SD support from Till Kamppeter
    - troubleshoot: handle wrong server name but right IP address.
    - Update printer properties after NewPrinter dialog has changed PPD/device.
    - Don't rely on CUPS_PRINTER_COMMANDS alone.
    - Use set_autowrap() from slip.gtk module when possible.


author: Jiri Popelka <jpopelka@redhat.com> 1.2.96-3
changelog:
  - Fixed driver selection when there are duplicate PPDs available. (#667571)
  - Grabbing focus for editing breaks it (bug #650995).


author: Jiri Popelka <jpopelka@redhat.com> 1.2.96-1
changelog:
  - 1.2.96:
    - Remove reference to current printer on exit (bug #556548).
    - Handle cups.Connection() failure in PrinterURIIndexr (bug #648014).
    - Block unwanted characters when editing queue name (bug #658550).
    - Initialise D-Bus threading in timedops module (bug #662047).
    - many other fixes


author: Tim Waugh <twaugh@redhat.com> - 1.2.95-1
changelog:
  - 1.2.95.
  - Removed pycups and pysmbc tarballs as they are now packaged
    separately as python-cups and python-smbc.


author: Tim Waugh <twaugh@redhat.com> - 1.2.5-1
changelog:
  - 1.2.5:
    - CMD-field matching for PPDs (bug #630058).
    - Avoid crash in jobviewer (bug #640904).
    - Don't try to modify firewall for SNMP broadcast responses
      as it doesn't work (trac #214).
    - Correctly parse snmp backend output when fetching
      Device ID (bug #639394).
    - XmlHelper: Don't indent output when saving to file (bug #639586).
    - GroupsPaneModel: Avoid crash when removing queue (bug #639586).
    - Use "Do It Later" instead of "Cancel" for adjust firewall
      dialog (trac #213).
    - Delete Bluetooth printer's queue when unpaired.
    - Show examples of IPP URIs (bug #575795).
    - Use actual Device ID strings in 'no match' debug
      message (bug #630350).
    - Prevent disallowed characters in text entry fields when adding
      new printer (bug #621199).
    - Fixed race condition while renaming printer (bug #625502).
    - Request required job attributes rather than assuming they will
      be present in response (bug #635719).
    - Discard disallowed characters when renaming (bug #612315).
    - Mark more translatable strings (bug #634436).


author: Jiri Popelka <jpopelka@redhat.com> 1.2.4-1
changelog:
  - Updated to 1.2.4:
    - Error checking in on_job_cancel_prompt_response (bug #608283).
    - Fixed UDEV_RULES conditional; also, avoid unnecessary tests.
    - Fill in username before calling set_auth_info (bug #609515).
    - Make the 'Add' button actually do something.
    - Initialise downloadable_drivers dict earlier (bug #608815).
    - Strip ' BR-Script3' from the names of Brother PPDs.
    - Sanitize loading of non-existing icon (bug #612415).
    - udev helper: use CUPS defaults when connecting.
    - Blacklist certain printer state reasons (bug #520815).
    - Exclude dnssd backend from udev search.
    - Avoid double-destroy in ppdsloader.
    - Catch KeyError in jobviewer when printer uri not known (bug #615727).
    - Changed shebang in executables (bug #618357).
    - Make udev-configure-printer work for Bluetooth (Bastien Nocera).
    - Merged Till Kamppeter's patches.
      - Access OpenPrinting via the web query API with redirect support.
      - Prioritize DNS-SD-based URIs against IP-based URIs.
      - Added missing "import gobject" to probe_printer.py.
      - On discovered network printers do not only cache make and model but also the device ID.
      - Fix recognition of remote CUPS queues when setting up an IPP queue.
      - Added delay to the auto-start of the applet.
      - Do not error out on missing firewall D-Bus service.
      - Make multi-threaded driver package search via Jockey work.
      - Prioritize HP's hpcups driver against HPIJS.
      - Silence error messages of missing PrinterDriversInstaller D-Bus service.
      - Improvements for setting up Bluetooth printers.
      - udev-configure-printer: Match usblp, libusb, HPLIP, and USB device file URIs.
      - Fill the queue list when clicking "Probe" in LPD printer setup screen.
      - Remove the ":9100" from discovered "socket://..." URIs.
      - Integration of the dnssd CUPS backend and assosiation of DNS-SD names and IPs.
      - When setting up a printer search for local drivers before searching the internet.


author: Tim Waugh <twaugh@redhat.com> - 1.2.3-1
changelog:
  - Updated to 1.2.3:
    - Use toolbar instead of menubar in JobsViewer (trac #205).
    - Fixed HTTPError status code handling when changing server
      settings.
    - Fixed traceback with driver auto-selection (bug #590193).
    - Only local filenames can be selected for troubleshoot.txt
      (bug #590529).
    - Fixed cups-pk-helper FileGet usage (bug #587744).
    - Escape printer names in error dialog markup (Ubuntu #567324).
    - Avoid traceback changing PPD for queue with bad PPD.
    - Attempt to translate backend device-info strings (Ubuntu #557199).
    - Don't buffer debugging output.
    - Avoid leaking Connection objects when cancelling jobs.
    - Threading fixes (trac #206).
    - Canon naming fixes from vendor.
    - Make deep copy of list of job ids to cancel (bug #598249).
    - Bluetooth auto-config support.
    - Restored keybindings/tooltips lost in switch to action groups
      (trac #208).
    - Spinner icon has to have more than one frame (bug #603034).
    - Add job to active_jobs only if we're interested in it
      (bug #604492).
    - Make sure automatically-created queues will work; delete queue if
      missing executables.
    - Don't add queues for Graphtec devices (bug #547171).
    - Avoid KeyError in AdvancedServerSettings.py (bug #606798).
    - Handle empty notify-subscribed-event subscription attributes
      (bug #606909).


author: Tim Waugh <twaugh@redhat.com> - 1.2.2-1
changelog:
  - Updated to 1.2.2:
    - Check we are connected to the local server for server firewall
      changes and package installation.
    - Avoid Yes/No buttons (trac #204).
    - Set gettext domain for new printer dialog (Ubuntu #557199).
    - Make sure the printer we are changing the PPD for still exists
      and close New Printer window if not (bug #581668).
    - Specify requested_attributes in getJobs if possible (bug #584806).
    - Resolve DNS-SD hostnames for physical device comparision
      (trac #179).
    - jobviewer: PrinterURIIndex fix when no initial printer names and
      when looking up by name.
    - Don't fetch Device ID from network printer if we already know it.
    - Applet module no longer needs to import statereason.
    - Removed doubled-up 'translatable' attribute in UI file
      (Ubuntu #571662).
    - Fixed indentation in PK1Connection.getDevices.
    - No need to introspect CupsPkHelper every time, just once.
    - troubleshoot: turn off debugging before fetching error log.
    - Fixed localized state reasons (bug #587718).
    - Match Kyocera as manufacturer when only model name reported
      (Ubuntu #564633).
    - Fixed TreeIter handling in update_job_creation_times (bug #588409).
    - Make Verify buttons auto-sized (Ubuntu #575048).
    - Fixed a troubleshooter string and some SMB auth dialog strings
      that were not being translated (Ubuntu #557199).
    - Show unmatched IEEE 1284 Device IDs in less confusing format.
    - check-device-ids: run SNMP query for lpd URIs too.
    - Handle HTTPError from AdvancedServerSettingsDialog, and treat any
      HTTP errors as failures (bug #587744).
    - asyncconn/asyncipp: some fixes for connection/reconnection
      failures.
    - ppdsloader: watch out for errors when connecting.
    - Initialise GUI.printers in constructor (bug #589793).
    - Always use close_fds=True in subprocess.Popen calls (bug #587830).
    - Translation updates.


author: Tim Waugh <twaugh@redhat.com> - 1.2.1-2
changelog:
  - Specify requested attributes in getJobs if possible (bug #584806).
  - Added optional requested_attributes argument to Connection.getJobs
    (bug #584806).


author: Tim Waugh <twaugh@redhat.com> - 1.2.1-1
changelog:
  - Updated to 1.2.1:
    - Fixed missing translations (bug #580442).
    - Offer to adjust firewall when necessary.
    - Avoid tracebacks when adjusting server settings.
    - Handle IPP failure fetching printer attributes for completed jobs
      (Ubuntu #562679).
    - monitor: don't crash if job-state attribute is missing
      (Ubuntu #562441).
    - troubleshoot: handle IPPError in PrintTestPage module (bug #579957).
    - Lots of check-device-ids fixes.


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-10
changelog:
  - Better inklevel 25/50/75 markers.
  - Fixed window transience for 'Change Device URI'.
  - More async traceback fixes (Ubuntu #547075).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-8
changelog:
  - Fixed traceback in asyncipp (bug #576932).
  - check-device-ids: search harder for missing Device IDs.
  - Make inklevel widget easier to read (bug #576930).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-5
changelog:
  - Fixed pycups build with new distutils.
  - Fixed reconnection error handling in IPPAuthOperation class (bug #575198).


author: Tim Waugh <twaugh@redhat.com> - 1.2.0-1
changelog:
  - Updated to pycups-1.9.49.
  - 1.2.0:
    - Another error handling fix in check-device-ids.py.
    - Added StartupNotify=true to 'manage print jobs' desktop file.


author: Jiri Popelka <jpopelka@redhat.com> 1.1.93-6
changelog:
  - Fixed pycups to be more cautious when removing
    the Connection object from the list (bug #567386).


author: Tim Waugh <twaugh@redhat.com> - 1.1.92-4
changelog:
  - Removed Device ID hacks for Kyocera and HP.  This avoids a false
    positive for the incorrect-Device-ID warning.


author: Tim Waugh <twaugh@redhat.com> - 1.1.90-3
changelog:
  - Set model for LPD queue ComboEntry (bug #558484).
  - Only add current device to list when all devices found (bug #558524).
  - Fixed statereason localization for raw queues (bug #558156).
  - Fixed async fallback again (bug #557854).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-9
changelog:
  - Clean up temporary files when localizing statereason (bug #552768).
  - Make sure serial device widgets are always initialized (bug #556488).
  - Handle errors more gracefully in userdefault.py (bug #556345).
  - Don't rely on cups-pk-helper being around (bug #556170).
  - Avoid traceback when checking on connecting backends (bug #555552).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-3
changelog:
  - Fixed pycups IPPRequest attribute handling bug.
  - Make sure there are enough ink level values (bug #541882).
  - Make sure the printer we added still exists before selecting it
    (bug #551436).
  - Set notification timeouts appropriately (bug #550829).
  - Avoid traceback in NewPrinterGUI.init (bug #550442).
  - Avoid traceback in on_jobviewer_exit (bug #550437).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-2
changelog:
  - Prefer foomatic-recommended drivers (bug #550108).
  - Pre-select correct driver when adding or changing a queue (bug #550075).
  - Fixed typo (bug #550096).


author: Tim Waugh <twaugh@redhat.com> - 1.1.16-1
changelog:
  - Updated pycups to 1.9.47.
  - 1.1.16:
    - Ignore com.apple.print.recoverable state reason.
    - Prevent traceback in found_network_printer_callback (bug #547765).
    - Use asynchronous connection class for fetching device lists
      (bug #549749).
    - Prefer Foomatic/hpijs to hpcups for the time being.
    - Clear device screen each time a new dialog is presented.
    - Constraints handling fix.


author: Tim Waugh <twaugh@redhat.com> - 1.1.15-3
changelog:
  - Fixed cupsd.conf parsing when lines begin with blanks (bug #544003).
  - Don't overwrite BrowsePoll settings in basic settings dialog (bug #543986).


author: Tim Waugh <twaugh@redhat.com> 1.1.14-1
changelog:
  - 1.1.14:
    - Retry when reconnection fails (bug #541741).
    - Prevent traceback with bad marker-levels attribute (bug #541882).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-12
changelog:
  - Prevent display of marker levels from making the properties dialog
    too big (bug #540826).
  - Place the window in the middle of the screen (bug #539876).
  - Fixed editability of PPD options for explicit IPP queues
    (bug #541588).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-8
changelog:
  - Fail gracefully if the new printer has disappeared before the user
    has responded to the test page prompt (bug #533109).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-5
changelog:
  - Added upstream patch for custom state reasons (bug #531872).
  - Strip 'zjs' from make-and-model as well (bug #531869).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-4
changelog:
  - Troubleshoot: connect to the right server when choosing a network
    queue (bug #531482).
  - Strip 'zxs' and 'pcl3' from make-and-model (bug #531048).
  - Fixed visibility tracking for jobs window (bug #531438).
  - Don't display properties dialog for first test page (bug #531490).
  - Determine make/model for network printers (bug #524321).
  - Auto-select the correct driver entry for raw queues.
  - Avoid traceback in PhysicalDevice.py.
  - Let Return key activate the Find button for Find Network Printer.


author: Tim Waugh <twaugh@redhat.com> 1.1.13-3
changelog:
  - Fixed missing import in probe_printer module.
  - Fixed race when fetching device list (bug #521110).


author: Tim Waugh <twaugh@redhat.com> 1.1.13-2
changelog:
  - Iconify jobs window into status icon.
  - Avoid showing the publish-printers dialog when not necessary.
  - Fixed traceback when cancelling change-driver dialog.
  - Fixed data button state.


author: Tim Waugh <twaugh@redhat.com> 1.1.12-1
changelog:
  - 1.1.12:
    - Troubleshooting fix.
    - Fixed applet traceback when printing test page.
    - Removed completed job notifications (trac #181).
    - Show printer status in printer icons (bug #518020).
    - Use paused icon when printer state reason is 'paused'.
    - Driver preference order fixes.
    - Job status icon and state reason display in jobs list
      (bug #518070).
    - Fixed overactive job creation times update timer.
    - Use preferred D-Bus object path for AuthenticationAgent
      (bug #518427).
    - Fixed disabling a printer when PolicyKit call fails.
    - Set appropriate status icon tooltip when configuration printer
      (bug #518007).
    - Use separate thread for verifying IPP queue (bug #518065).
    - Use newer tooltip API to avoid deprecation warnings.
    - Compare MFG/MDL case-insensitively in udev rule.
    - Support for cups-pk-helper's DevicesGet method.
    - Don't attempt to use PolicyKit if running as root.
    - Support for localized marker names (trac #183).
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.1.11-6
changelog:
  - Applied patch from 1.1.x (52a73b6).
    - Better printer icons representing status (bug #518020).
    - Use paused ico nwhen printer state reason is 'paused'.
    - Job status icon and state reason in jobs treeview (bug #518070).
    - Job creation times display fixes.
    - Use preferred object path for AuthenticationAgent (bug #518427).


author: Tim Waugh <twaugh@redhat.com> 1.1.11-5
changelog:
  - Applied patch from 1.1.x (3f45e96):
    - Show a 'paused' emblem for rejecting/disabled printers
      (bug #518020).
    - Set appropriate tooltip when configuring printer (bug #518007).
    - Use separate thread for verifying IPP queue (part of bug #518065).
    - Better driver preference order (bug #518045).


author: Tim Waugh <twaugh@redhat.com> 1.1.11-4
changelog:
  - Compare MFG and MDL fields case insensitively when adding automatic
    queues, because HPLIP provides them with different case than the
    actual devices do.  Upstream HPLIP bug:
    https://bugs.launchpad.net/hplip/+bug/405804


author: Tim Waugh <twaugh@redhat.com> 1.1.11-1
changelog:
  - 1.1.11:
    - Several udev-configure-printer fixes.
    - Use case-insensitive PPD matching.
    - Better URI validity testing.
    - Another stale printer status icon fix.
    - Notice when jobs stop due to backend errors.
    - Warn about job history when renaming printers.
    - Small UI improvements.


author: Tim Waugh <twaugh@redhat.com> 1.1.10-3
changelog:
  - Removed gnome-packagekit dependency.  The presence of
    gpk-install-package-name is detected at run-time, and the program
    acts accordingly.


author: Tim Waugh <twaugh@redhat.com> 1.1.10-1
changelog:
  - 1.1.10:
    - New udev rules for adding/enabling/disabling USB printers
      automatically.
    - Now uses gnome-packagekit utility to install packages
      instead of the D-Bus API.
    - Fixed detection of stopped jobs with CUPS 1.4.
    - Fixed tracebacks when adding a new printer and when receiving
      IPP notifications.
    - Fixed 'location' field for printers added on remote CUPS servers.
    - Fixed handling of incorrect authentication.
    - Some UI and troubleshooter fixes have been made.


author: Tim Waugh <twaugh@redhat.com> 1.1.8-5
changelog:
  - Use gpk-install-package-name instead of trying to use the D-Bus API.
  - Spot stopped jobs with CUPS 1.4 as well (trac #177).  This, along
    with the previous fix, addresses bug #509177.
  - Map gutenprint filenames to the package name.
  - Fixed sensitivity of class member selection arrows (bug #508653).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-3
changelog:
  - Use correct 'location' field for printers added remotely.
  - Parse nmblookup failures correctly in troubleshooter.
  - Prevent traceback on IPP notification after properties dialog
    cancelled.
  - Fixed handling of incorrect authentication when not using
    PolicyKit (bug #508102).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-2
changelog:
  - Make sure we find https URIs from https backend (bug #507628).
  - Avoid showing a non-fatal exception when adding an IPP printer
    (bug #507629).
  - Fixed traceback when adding/modifying printer which could lead to
    display bugs (bug #507489).


author: Tim Waugh <twaugh@redhat.com> 1.1.8-1
changelog:
  - Updated pycups to 1.9.46.
  - Updated to 1.1.8:
    - Select a printer after adding it (trac #145).
    - Make sure the job and printer context menus cannot get out of date
      (trac #175, trac #172).
    - Fixed displayed hold time for held jobs.
    - Use grey ink-drop when there is no marker-colors value instead of
      crashing (bug #505399).
    - Scroll job list window to new job when appropriate.
    - Clean up temporary PPD files (bug #498743).
    - Fixed XML crash (Ubuntu #370469).
    - Fixed automatic printer model selection.
    - Fixed cupspk crash due to missing debugprint import (bug #496722,
      trac #161). 
    - Fixed PhysicalDevice crash (bug #496722, trac #161).
    - Adjusted border padding for New Printer window (bug #493862).
    - Set glade's textdomain in the job viewer (Ubuntu #341765).
    - Fixed URI parsing when verifying IPP URIs.
    - Set relaxed PPD conformance (trac #159).
    - Make troubleshooter work again by disabling cupspk for it.


author: Tim Waugh <twaugh@redhat.com> 1.1.7-4
changelog:
  - Changed requirement on notification-daemon to
    desktop-notification-daemon to allow for other implementations
    (bug #500587).


author: Tim Waugh <twaugh@redhat.com> 1.1.7-1
changelog:
  - Requires dbus-python (bug #495392).
  - Updated to 1.1.7:
    - Updated translations.
    - Don't abort if the jobviewer couldn't show a notification.
    - Don't use setlocale() for locale-independent case conversion.
    - Don't assume the notification daemon can show action buttons.
    - Use case-insensitive matching for model names.
    - HPLIP compatibility fixes.
    - Fixed typo in jobviewer keyring support (Ubuntu #343156).
    - Added support for https device URIs (bug #478677).
    - Prevent traceback in monitor when connection failed (Ubuntu #343387).


author: Tim Waugh <twaugh@redhat.com> 1.1.6-1
changelog:
  - No longer requires gnome-python2-gnome.
  - Updated to 1.1.6:
    - Translatable string fix for authconn.
    - Romanian allow/deny translation fix (bug #489748).
    - Set glade's textdomain in the jobviewer (Ubuntu #341765).


author: Tim Waugh <twaugh@redhat.com> 1.1.5-2
changelog:
  - Added patch for changes in 1.1.x since 1.1.5:
    - Strip " hpijs" from PPD names.
    - Handle there being no operation name set when authentication/retry
      is required.
    - Mark "Unauthorized" PolicyKit dialog strings for translation, and
      change that dialog to an error.
    - Work around marker-* attributes not being presented as lists
      (bug #489512).
    - D-Bus policy tweak.
    - Better PPD fallback searching.
    - Fixed model search oddity when no digits in model name.
    - Fixed locale save/restore in cupshelpers (bug #489313).
    - Use gtk.show_uri() instead of gnome.url_show() (trac #147).
    - Removed HPLIP probe screen (no longer needed).
    - Be certain of having the right cell when starting a rename
      (Ubuntu #333260).
    - Fixed strftime call (Ubuntu #334859).
    - Check dict before use when handling auth-info-required.
    - Handle timed operations being cancelled in the troubleshooter test
      print page (Ubuntu #325084).
    - Put pycups version requirement in monitor module.


author: Tim Waugh <twaugh@redhat.com> 1.1.4-1
changelog:
  - 1.1.4:
    - Skip model selection screen when adding a new printer for which we
      know the exact model.
    - Better integration for HPLIP hp and hpfax queues.
    - Work around HPLIP option parsing bug.
    - Pre-select the current device correctly.
    - Better descriptions for types of available connection.
    - Perform lowercase operations in a locale-independent manner (trac #151).


author: Tim Waugh <twaugh@redhat.com> 1.1.3-7
changelog:
  - Updated from git:
    - Avoid tracebacks in main application (bug #484130) and job viewer.
    - Avoid unnecessary modal dialog when adding printer (bug #484960).
    - Don't use notification when authentication is required, just
      display the dialog.


author: Tim Waugh <twaugh@redhat.com> 1.1.3-5
changelog:
  - Updated from git:
    - Handle D-Bus failures when querying Jockey (bug #484402).
    - Set operation when fetching PPD from server (bug #484130).
    - Don't allow prompting when updating the UI for a server failure
      (bug #484130).
    - Fixed printing a test page from the applet (bug #484130).


author: Tim Waugh <twaugh@redhat.com> 1.0.12-6
changelog:
  - Updated patch for 1.0.x changes:
    - Look harder for locale/page size issues in the troubleshooter
      (trac #118).
    - Troubleshooter speed improvement (trac #123).
    - Localization fixes for authentication dialog (trac #122).
    - Character encoding fixes (trac #124).
    - Handle model names with more than one set of digits (Ubuntu #251244).
    - Catch unable-to-connect error when trying to print a test page
      (Ubuntu #286943).
    - Prevent crash when copying PPD options (Ubuntu #285133).
    - Use get_cursor for the printer properties treeview (Ubuntu #282634).
    - Fix IPP browser when trying to connect to host:port (bug #476396).
    - Make sure we're authenticating as the correct user in authconn.
    - Prevent traceback when adding printer driven by HPLIP
      (bug #477107).
    - Better display of available local HP fax devices.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-5
changelog:
  - Added patch for pycups git changes since 1.9.44:
    - Look for test page file in new location for CUPS 1.4 (bug #476612).


author: Tim Waugh <twaugh@redhat.com> 1.0.12-4
changelog:
  - Updated patch for 1.0.x changes:
    - Fix for advanced server settings dialog.
    - Fixes for troubleshooter to restore error_log fetching.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-3
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed problem that prevented authentication prompt being
      displayed.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-2
changelog:
  - Added patch for 1.0.x changes since 1.0.12:
    - Smarter PPD cache in cupshelpers module.
    - Don't write back localized versions of globalized PPDs.


author: Tim Waugh <twaugh@redhat.com> 1.0.12-1
changelog:
  - Updated to 1.0.12:
    - Don't automatically replace network printer URIs with
      HPLIP URIs (bug #473129).
    - Fixed some file descriptor and temporary file leaks.
  - Updated pycups to 1.9.44.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-6
changelog:
  - Updated patch for 1.0.x changes:
    - Fixed SMB authentication dialog's cancel button (bug #467127).
    - Work around samba bug #5805 by sending debug output to stderr
      instead of stdout.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-4
changelog:
  - Updated patch for 1.0.x changes:
    - Removed unneeded debugging output.
    - Don't show the applet in KDE (bug #466945).
    - Auth/error dialog improvements for SMB as for IPP (bug #465407).


author: Tim Waugh <twaugh@redhat.com> 1.0.8-3
changelog:
  - Added patch for 1.0.x changes since 1.0.8:
    - Don't use a LinkButton for the 'Problems?' button (bug #465407).
    - Don't use a separator for the server settings dialog (bug
        - Don't set non-zero page size for SpinButtons.
    - Don't show an error dialog if an IPP operation's authentication
      dialog is cancelled by the user, but show an error dialog if the
      password was incorrect (bug #465407).
    - Set Server Settings... menu entry sensitive depending on whether
      we are connected to a server (Ubuntu #280736).
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.8-1
changelog:
  - 1.0.8:
    - Use modelName from custom PPD to suggest name for new printer
      (trac #97).
    - Avoid display problem with installable options.
    - Better matching for Lexmark printers.
    - Catch exceptions from advanced server settings dialog (Ubuntu
        - Added some missing OpenPrinting query fields.
    - Jockey support added.
    - Lots of translations updated.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-1
changelog:
  - 1.0.7:
    - Efficiency improvements.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.6-1
changelog:
  - Requires gnome-python2-gnome (bug #460021).
  - 1.0.6:
    - More delete-event fixes.
    - Fixed temporary file leak.
    - Fixed dialog leaks.
    - Small UI improvements for the New Printer dialog.
    - Other small fixes.


author: Tim Waugh <twaugh@redhat.com> 1.0.5-3
changelog:
  - Include other fixes from upstream including:
    - OpenPrinting API change (trac #74).
    - libnotify API change for 'closed' signal.
    - Notification for job authentication (trac #91).
    - Glade delete-event fixes (trac #88).
    - Pre-fill username in job authentication dialog (trac #87).


author: Tim Waugh <twaugh@redhat.com> 1.0.4-1
changelog:
  - 1.0.4.
  - Applied upstream patch for pycups to fix getPrinterAttributes when
    requested_attributes is specified.


author: Tim Waugh <twaugh@redhat.com> 0.9.91-1
changelog:
  - No longer requires system-install-packages (bug #444645).
  - Added pysmbc.  Build requires libsmbclient-devel.
  - Don't install consolehelper bits any more as they are no longer needed.
  - 0.9.91:
    - User interface overhaul, part 2.


author: Tim Waugh <twaugh@redhat.com> 0.7.82.1-1
changelog:
  - Requires /usr/bin/system-install-packages not pirut (bug #435622).
  - 0.7.82.1:
    - More trouble-shooting improvements.
    - applet: notify user about failed jobs (bug #168370).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Requires notification-daemon (Ubuntu #176929).
  - Requires gnome-python2 for theme support (Ubuntu #176929).
  - Requires gnome-icon-theme for printer icon (Ubuntu #176929).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No need to run update-desktop-database because there are no MimeKey
    lines in the desktop files.
  - Consistent macro style.


author: Tim Waugh <twaugh@redhat.com> 0.7.74.4-1
changelog:
  - Changed PreReq to Requires.
  - Mark console.apps file as a config file.
  - Mark pam file as a config file (not replaceable).
  - No need to ship empty NEWS file.
  - Give cupsd.py executable permissions to satisfy rpmlint.
  - Provides system-config-printer-gui.
  - Mark D-Bus configuration file as a config file.
  - Fixed libs summary.
  - Better buildroot tag.
  - Better defattr.
  - Preserve timestamps on explicitly install files.
  - Make example pycups program non-executable.
  - 0.7.74.4:
    - Updated translations.
    - Several small bugs fixed.


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-2
changelog:
  - Pull in SVN patch from stable branch for 'Allow printing from
    the Internet' check-box (bug #221003).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.2-1
changelog:
  - Updated pycups to 1.9.27.
  - 0.7.74.2:
    - When a class is removed on the server, remove it from the UI.
    - When deleting a printer, select the default printer again.
    - Select newly-copied printer.
    - Updated translation (fi).
    - Better --help message.
    - Use strcoll to sort manufacturer names.
    - Avoid duplicate 'recommended' marks.
    - Remove duplicate device URIs.
    - Handle IPP_TAG_NOVALUE attributes (for CUPS 1.3.x).


author: Tim Waugh <twaugh@redhat.com> 0.7.74.1-1
changelog:
  - 0.7.74.1:
    - Updated Polish translation (bug #263001).
    - Don't select the default printer after changes to another printer have
      been made.
    - Always construct URI from input fields when changing device (bug #281551).
    - Avoid busy-cursor traceback when window is not yet displayed.


author: Tim Waugh <twaugh@redhat.com> 0.7.72-1
changelog:
  - 0.7.72:
    - Fixed my-default-printer traceback.
    - Improvements to New Printer wizard (Till Kamppeter).


author: Tim Waugh <twaugh@redhat.com> 0.7.71-1
changelog:
  - 0.7.71:
    - Don't discard make/model-matched devices when there are ID-matched
      devices (Till Kamppeter).
    - Fixed fallback if no text-only driver is available (Till Kamppeter).
    - Initialise the make/model list when an ID match failed (Till Kamppeter).
    - Better error-handling in default-print application (Ubuntu #129901).
    - UI tweak in admin tool (Ubuntu #128263).
    - Handle socket: URIs (Ubuntu #127074).


author: Tim Waugh <twaugh@redhat.com> 0.7.70-1
changelog:
  - Requires pirut for system-install-packages.
  - 0.7.70:
    - Increased GetReady->NewPrinter timeout.
    - More binary names mapped to package named.
    - Run system-install-packages to install missing drivers (bug #246726).
    - Less debug output.
    - Desktop file fixes for KDE (bug #247299).


author: Tim Waugh <twaugh@redhat.com> 0.7.69-1
changelog:
  - No longer requires PyXML (bug #233146).
  - Moved applet to main package.
  - 0.7.69:
    - Use HardwareSettings category for my-default-printer desktop
      file (bug #244935).
    - Removed unused code.
    - Filter PPDs by natural language (bug #244173).


author: Tim Waugh <twaugh@redhat.com> 0.7.67-1
changelog:
  - Don't put TrayIcon or SystemSetup categories in the desktop file.
  - Updated pycups to 1.9.24.
  - 0.7.67:
    - Fixed desktop files to have capital letters at the start of each
      word in the Name field (bug #242859).
    - Fixed crash when saving unapplied changes.
    - Fixed Device ID parser to always split the CMD field at commas.
    - New PPDs class means we no longer parse the foomatic XML database.


author: Tim Waugh <twaugh@redhat.com> 0.7.66-1
changelog:
  - 0.7.66:
    - Allow job-hold-until to be set (bug #239776).
    - Implement new printer notifications.


author: Tim Waugh <twaugh@redhat.com> 0.7.65-1
changelog:
  - Build requires xmlto.
  - Updated to pycups-1.9.22.
  - 0.7.65:
    - Use urllib for quoting/unquoting (Val Henson, Ubuntu #105022).
    - Added kn translation.
    - Better permissions on non-scripts.
    - Added man pages.
    - Applet: status feedback.
    - Applet: fixed relative time descriptions.
    - Applet: limit refresh frequency.


author: Tim Waugh <twaugh@redhat.com> 0.7.62-1
changelog:
  - 0.7.62:
    - Use standard icon for admin tool desktop file.
    - Fixed env path in Python scripts.
    - Applet: stop running when the session ends.
    - Prevent a traceback in the SMB browser (bug #225351).
    - 'Manage print jobs' desktop file.


author: Tim Waugh <twaugh@redhat.com> 0.7.60-1
changelog:
  - Updated to pycups-1.9.19.
  - Avoid %makeinstall.
  - 0.7.60:
    - Handle reconnection failure.
    - New applet name.


author: Tim Waugh <twaugh@redhat.com> 0.7.59-1
changelog:
  - 0.7.59:
    - Fixed a translatable string.
    - Set a window icon (bug #233899).
    - Handle failure to start the D-Bus service.
    - Ellipsize the document and printer named (bug #233899).
    - Removed the status bar (bug #233899).
    - Added an icon pop-up menu for 'Hide' (bug #233899).


author: Tim Waugh <twaugh@redhat.com> 0.7.57-1
changelog:
  - Added URL tag.
  - 0.7.57:
    - Prevent traceback when removing temporary file (Ubuntu #92914).
    - Added print applet.


author: Tim Waugh <twaugh@redhat.com> 0.7.56-1
changelog:
  - 0.7.56:
    - Parse Boolean strings correctly in job options.
    - Small command-set list/string fix (bug #230665).
    - Handle hostname look-up failures.
    - Updated filter-to-driver map.
    - Don't parse printers.conf (bug #231826).


author: Tim Waugh <twaugh@redhat.com> 0.7.53-1
changelog:
  - No longer requires rhpl (since 0.7.53).
  - 0.7.53:
    - Use gettext instead of rhpl.translate.
    - Better layout for PPD options.
    - Added scrollbars to main printer list (bug #229453).
    - Set maximum width of default printer label (bug #229453).
    - Handle applying changes correctly when switching to another
      printer (bug #229378).
    - Don't crash when failing to fetch the PPD (bug #229406).
    - Make the text entry boxes sensitive but not editable for remote
      printers (bug #229381).
    - Better job options screen layout (bug #222272).


author: Tim Waugh <twaugh@redhat.com> 0.7.52-1
changelog:
  - 0.7.52:
    - Sort models using cups.modelSort before scanning for a close
      match (bug #228505).
    - Fixed matching logic (bug #228505).


author: Tim Waugh <twaugh@redhat.com> 0.7.51-1
changelog:
  - 0.7.51:
    - Prevent display glitch in job options list when clicking on a printer
      repeatedly.
    - List conflicting PPD options, and embolden the relevant tab
      labels (bug #226368).
    - Fixed typo in 'set default' handling that caused a traceback (bug #227936).
    - Handle interactive search a little better (bug #227935).


author: Tim Waugh <twaugh@redhat.com> 0.7.50-1
changelog:
  - 0.7.50:
    - Fixed hex digits list (bug #223770).
    - Added bs translation.
    - Don't put the ellipsis in the real device URI (bug #227643).
    - Don't check for existing drivers for complex command lines (bug #225104).
    - Allow floating point job options (bug #224651).
    - Prevent shared/published confusion (bug #225081).
    - Fixed PPD page size setting.
    - Avoid os.remove exception (bug #226703).
    - Handle unknown job options (bug #225538).


author: Tim Waugh <twaugh@redhat.com> 0.7.49-1
changelog:
  - 0.7.49:
    - Fixed a traceback in the driver check code.
    - Fixed a typo in the conflicts message.
    - Handle InputSlot/ManualFeed specially because libcups does (bug #222490).


author: Tim Waugh <twaugh@redhat.com> 0.7.47-1
changelog:
  - 0.7.47:
    - Fixed minor text bugs (bug #177433).
    - Handle shell builtins in the driver check (bug #222413).


author: Tim Waugh <twaugh@redhat.com> 0.7.44-1
changelog:
  - 0.7.44:
    - Fixed traceback in error display (bug #220136).
    - Preserve case in model string when dumping debug output.


author: Tim Waugh <twaugh@redhat.com> 0.7.43-1
changelog:
  - 0.7.43:
    - Don't check against IEEE 1284 DES field at all.
    - Merged device matching code (bug #219518).
    - Catch non-fatal errors when auto-matching device.
    - Fixed driver checking bug involving pipelines (bug #220347).
    - Show PPD errors (bug #220136).


author: Tim Waugh <twaugh@redhat.com> 0.7.42-1
changelog:
  - 0.7.42:
    - Fixed typo in command set matching code.
    - Case-insensitive matching when Device ID not known to database.


author: Tim Waugh <twaugh@redhat.com> 0.7.41-1
changelog:
  - Updated pycups to 1.9.16.
  - 0.7.41:
    - Reconnect smoothly after uploading new configuration.
    - Update lpoptions when setting default printer if it conflicts with
      the new setting (bug #217395).
    - Fixed typo in show_HTTP_Error (bug #217537).
    - Don't pre-select make and model when not discoverable for chosen
      device (bug #217518).
    - Set Forward button sensitive on Device screen in new-printer
      dialog (bug #217515).
    - Keep Server Settings selected after applying changes if it was selected
      before.
    - Set Connecting dialog transient for main window.
    - Center Connecting dialog on parent.
    - Optional 'reason' argument for cupshelpers.Printer.setEnabled.
    - Describe devices that have no optional parameters.


author: Tim Waugh <twaugh@redhat.com> 0.7.40-1
changelog:
  - 0.7.40:
    - Removed username:password from hint string because we add that in
      afterwards.
    - Don't set button widths in create-printer dialog (bug #217025).


author: Tim Waugh <twaugh@redhat.com> 0.7.39-1
changelog:
  - 0.7.39:
    - Busy cursor while loading foomatic and PPD list (bug #215527).
    - Make PPD NickName selectable.
    - Added SMB hint label on device screen (bug #212759).


author: Tim Waugh <twaugh@redhat.com> 0.7.38-1
changelog:
  - Updated pycups to 1.9.15.
  - 0.7.38:
    - Fixed a bug in the 'ieee1284'/'ppd-device-id' parsing code.


author: Tim Waugh <twaugh@redhat.com> 0.7.36-1
changelog:
  - 0.7.36:
    - Match against commandset (bug #214181).
    - Parse 'ieee1284' foomatic autodetect entries (bug #214761).
    - Don't remove foomatic PPDs from the list (bug #197331).


author: Tim Waugh <twaugh@redhat.com> 0.7.32-1
changelog:
  - Updated to pycups-1.9.13 for HTTP_FORBIDDEN.
  - 0.7.32:
    - Handle HTTP errors during connection (bug #208824).
    - Updated translations (bug #208873).


author: Tim Waugh <twaugh@redhat.com> 0.7.31-1
changelog:
  - 0.7.31:
    - Select recommended driver automatically (bug #208606).
    - Better visibility of driver list (bug #203907).


author: Tim Waugh <twaugh@redhat.com> 0.7.7-2
changelog:
  - Ship PAM and userhelper files.
  - Requires usermode.
  - Added missing options.py file.
  - Fix getClasses() in pycups.


author: Tim Waugh <twaugh@redhat.com> 0.7.7-1
changelog:
  - Updated to system-config-printer-0.7.7.
  - Updated to pycups-1.9.9.
  - Desktop file.
  - Requires PyXML.


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-29.3
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Iain Arnell <iarnell@gmail.com> 2.44-8
changelog:
  - patch to avoid issue with ExtUtils::MakeMaker and CCFLAGS
    see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628522
  - clean up spec for modern rpmbuild
  - use perl_default_filter


author: Stepan Kasal <skasal@redhat.com> - 2.44-1
changelog:
  - new upstream version
  - run tests always
  - do not add bdf_scripts/ to docs
  - switch off the test that fails in i686 koji


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.35-7
changelog:
  - tests work fine locally, one fails in mock, maybe needs a desktop? 
    conditionalized them, default off.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.19-1
changelog:
  - Update to 2.19.
  - GIF support has been restored in gd 2.0.28.
  - Module autoconfigures itself with the gdlib-config program.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.12-0.fdr.3
changelog:
  - Avoid RPATH problem in FC1 (bug 1756).
  - Replaced hardcoded value by rpmmacro (%{__perl}) (bug 1756).


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-1
changelog:
  - Upstream update to 0.3.3
    + Fix memory access violation.
    + Improved Python binding.
    + Merged with libchewing-data project. (r455)
    + Improved random key stroke tester.
    + Fix the handling of phonetic symbols in Hsu's keyboard.
    + Fix unexpected candidate disorder when doing symbol choice.
    + Revised phrase choice from rearward logic.
    + Fix cross compilation.
    + Improved shell script to merge changes form libchewing-data.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-27
changelog:
  - Fix Dvorak Hsu 4th tone key (ibus google issue 755 comment 12,
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-24
changelog:
  - Fix Hsu and Dvorak Hsu input (ibus google issue 755,
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-21
changelog:
  - Revised phrase choice from rear logic.
    Thus update phraseChoiceRearward.patch as phraseChoiceRearward.2.patch
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-17
changelog:
  - Add zh_TW summary and description
  - Split out python binding into a subpackage.
  - Fix for package wrangler.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-16
changelog:
  - Fix chewing Google issue 352:
    zuin_count in chewing_zuin_String( ChewingContext *ctx, int *zuin_count )
    does not count correctly.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-15
changelog:
  - Fix [Bug 512108:issue 11] ibus-chewing crash the application
    by move cursor_orig to chewingio.c global.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-11
changelog:
  - Revise phraseChoiceRearward.patch so the cursor won't move to left
    when repeatly press down key.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-10
changelog:
  - Need autoreconf and BuildRequires: pkgconfig to make changes in
    Makefile.am effective, thus actually fix [Bug 477960] libchewing multilib conflict.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-9
changelog:
  - Possible Fix of Bug 501220 - RFE: edit last preedit character from end of line
    Chewing upstream does not handle if phrase choice rearward is enabled.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-4
changelog:
  - touch python-<ver>/site-packages/libchewing/__init__.py,
    So python thinks libchewing is a library.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-2
changelog:
  - [Bug 477690] libchewing multilib conflict
    Move /usr/share/chewing/fonetree.dat to corresponding libdir.


author: Caius Chance <cchance@redhat.com> - 0.3.0-5.fc7
changelog:
  - Fixed bz#216581: Ported the following bugfix:
  - (bz#216337: Page Up / Page Down key doesn't when Chewing is activated.)
  - (bz#209575: preedit buffer is not cleared when framework calls for
    instance reset.)


author: Jan Černý <jcerny@redhat.com> - 1.2.17-3
changelog:
  - Fix unwanted recursion into mounted remote filesystems (#1655943)
  - Evaluate SCAP 1.3 datastreams without downloading remote data (#1709423)


author: Matěj Týč <matyc@redhat.com> - 1.2.17-1
changelog:
  - Rebased to the 1.2.17 upstream release (#1564900).
  - Fixed the offline scanning (#1547107, #1556988).
  - HTML Guide user experience improvements.
  - New options in HTML report "Group By" menu.
  - oscap-ssh supports --oval-results.
  - For more news, see https://github.com/OpenSCAP/openscap/releases/tag/1.2.17


author: Matěj Týč <matyc@redhat.com> - 1.2.16-2
changelog:
  - moved oscap-docker to newly created openscap-containers.
  - moved man of oscap-chroot to oscap-scanner.


author: Matěj Týč <matyc@redhat.com> - 1.2.16-1
changelog:
  - upgrade to the latest upstream release
  - moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies


author: Jan Černý <jcerny@redhat.com> - 1.2.15-1
changelog:
  - upgrade to the latest upstream release
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information (#1439813)
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe
  - added Fedora 28 CPE
  - fixed oscap-docker with Docker >= 2.0
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts
  - severity of tailored rules is not discarded
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap
  - fixed pkgconfig file


author: Martin Preisler <mpreisle@redhat.com> - 1.2.14-2
changelog:
  - RPM probes to return not applicable on non-rpm systems (#1447629)
  - fixed sysctl tests on s390x architecture (#1447649)
  - Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)


author: Jan Černý <jcerny@redhat.com> - 1.2.14-1
changelog:
  - Upgrade to the latest upstream release
  - Detailed information about ARF files in 'oscap info'
  - Generating remediation scripts from ARF
  - HTML report UX improvements
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
  - Fixed systemd probes crashes inside containers (#1431186)
  - Fixed output on terminals with white background (#1365911)
  - Error handling in oscap-vm (#1391754)
  - Fixed SCE stderr stalling (#1420811)
  - Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
  - Fixed segmentation faults in RPM probes (#1414303, #1414312)
  - Fixed missing header in result-oriented Ansible remediations


author: Martin Preisler <mpreisle@redhat.com> - 1.2.13-1
changelog:
  - Upgrade to the latest upstream release
  - Added --thin-results CLI override to oscap xccdf eval
  - Added --without-syschar CLI override to oscap xccdf eval
  - Remediations are not filtered by applicability
  - Fixed segmentation faults in XCCDF and OVAL processing
  - Added a warning on generating an ARF from XCCDF 1.1


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Šimon Lukašík <slukasik@redhat.com> - 1.1.1-2
changelog:
  - STIG-generated results contain var_ref without var_check (#1159289)
  - Probes failed to stop by USR1 signal as specified (#1165139)


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-29
changelog:
  - Change RPCBDIR to be /run since that will exist after a
    reboot and bindings wil be perserved during upgrades
    but not reboots. (bz 1240817)


author: Steve Dickson <steved@redhat.com> - 0.2.0-27
changelog:
  - Add nss-altfiles to rpcbind user lookup path (bz 1171291)
  - Add support for systemd socket activation (bz 1203820)
  - Added a tmpfiles.d configuration (bz 1181779)
  - Shutdown cleanly (bz 1174653)


author: Steve Dickson <steved@redhat.com> - 0.2.0-25
changelog:
  - Fixed some warnings in in6_fillscopeid() (bz 884165)
  - Fixed typo in rpcinfo manpage (bz 963512)
  - Removed unnecessary targets from rpcbind.service  (bz 1036791)


author: Steve Dickson <steved@redhat.com> - 0.2.0-18
changelog:
  - Fixed typo causing rpcbind to run as root (bz 734598)
  - Added /etc/sysconfig/rpcbind config file (bz 861025)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 4.8.5-39.0.1
changelog:
  - [Orabug: 27987827] (Michael Ploujnikov)
  - Enable stable binary output for Ksplice
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Marek Polacek <polacek@redhat.com> 4.8.5-36.2
changelog:
  - allow libitm to use HTM (#1674383)
  - fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-13
changelog:
  - add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
    and -mstack-protector-guard-offset= options on ppc* (#1415952,
    PR target/78875)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-12
changelog:
  - fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
  - use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
  - fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
  - fix ICE in gfc_compare_derived_types (#1369183)
  - fix EH from C++ thunks (#1427412, PR ipa/68184)
  - on ppc64{,le} emit nop after recursive call if the current function
    is replaceable (#1420723, PR target/79439)
  - on aarch64 with -frounding-math use fnmul only with -(a*b) and not
    with (-a)*b (#1418446, PR target/66731)
  - constrain std::valarray functions and operators (#1416214,
    PR libstdc++/69116)
  - fix gimplification of aggregate assignments when lhs is used
    (#1396298, PR middle-end/72747, PR c/78408)
  - fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
  - fix aarch64 reloading of floating point constants into general purpose
    registers (#1349067, PR target/70549)
  - fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
    definitions following forward declarations (#1423460, PR c/79969)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-11
changelog:
  - on aarch64 emit scheduling barriers before stack deallocation in
    function epilogues (#1362635, PR target/63293)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-9
changelog:
  - backport OpenMP 4.5 support to libgomp (library only; #1357060,
    PRs libgomp/68579, libgomp/64625)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-8
changelog:
  - fix a bug in C++ ref-to-ptr conversion (#1344807)
  - fix combiner handling of jumps on aarch64 (#1344672,
    PR rtl-optimization/52714)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-6
changelog:
  - backport s390 z13 support (#1182152)
  - fix up -fsanitize=address on powerpc64 with 46-bit virtual address space
    (#1312850)
  - throw exception on std::random_device::_M_getval() failure (#1262846,
    PR libstdc++/65142, CVE-2015-5276)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-5
changelog:
  - fix up libitm HTM fastpath (#1180633)
  - on ppc64le default to -mcpu=power8 instead of -mcpu=power7 (#1213268)
  - fix up size in .debug_pubnames (#1278872)
  - turn powerpc* HTM insns into memory barriers (#1282755, PR target/67281)
  - make sure to handle __builtin_alloca_with_align like alloca in
    -fstack-protector* (#1289022, PR tree-optimization/68680)
  - improve DW_AT_abstract_origin of DW_TAG_GNU_call_site on s390 with -fPIC
    (#1312436)
  - fix up libstdc++ pretty-printers (#1076690, PR libstdc++/53477)
  - don't pass explicit --oformat option to ld on powerpc* (#1296211)
  - backport Intel Memory Protection Keys ISA support - -mpku (#1304449)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-3
changelog:
  - backport aarch64 crc enablement - -mcpu=generic+crc (#1179935)
  - rebuild against fixed binutils to fix up systemtap markers on aarch64
    (#1238462)


author: Jakub Jelinek <jakub@redhat.com> 4.8.5-1
changelog:
  - update from the 4.8 branch (#1230103)
    - GCC 4.8.5 release
    - fix -imacros handling (#1004526, PR c/57653)
    - fix up IPA type handling (#1217267, PRs ipa/63551, ipa/64153)
    - add PowerPC analyze swaps optimization pass (#1208103, #1200336)
    - fix PowerPC vsx_extract_<mode>* patterns (#1206341)
    - fix PowerPC -mcrypto handling (#1200335)
    - Power8 unaligned vectorization improvements (#1199221, PR target/65456)
    - PRs ada/47500, ada/63225, bootstrap/64213, c++/56710, c++/58624,
  	c++/63415, c++/63455, c++/64251, c++/64297, c++/64487, c++/65721,
  	c++/65727, c/52769, c/61553, c/64766, debug/63342, debug/65549,
  	fortran/56674, fortran/56867, fortran/57023, fortran/58813,
  	fortran/59016, fortran/59024, fortran/59488, fortran/60898,
  	fortran/61138, fortran/61407, fortran/63733, fortran/63744,
  	fortran/63938, fortran/64244, fortran/64528, fortran/65024,
  	gcov-profile/64634, inline-asm/63282, ipa/59626, ipa/63838,
  	libfortran/63589, libgfortran/59513, libgfortran/60956, libgomp/61200,
  	libstdc++/57440, libstdc++/59603, libstdc++/61947, libstdc++/63449,
  	libstdc++/63840, libstdc++/65279, libstdc++/65543, lto/65015,
  	lto/65193, middle-end/43631, middle-end/56917, middle-end/57748,
  	middle-end/58624, middle-end/59990, middle-end/63608,
  	middle-end/63665, middle-end/63704, middle-end/64067,
  	middle-end/64111, middle-end/64199, middle-end/64225,
  	middle-end/65409, middle-end/65680, middle-end/66133,
  	middle-end/66251, pch/65550, preprocessor/60436,
  	rtl-optimization/61058, rtl-optimization/63475,
  	rtl-optimization/63483, rtl-optimization/63659,
  	rtl-optimization/64037, rtl-optimization/64557, sanitizer/64265,
  	target/49423, target/52941, target/53988, target/55351, target/56846,
  	target/59593, target/60111, target/61413, target/62218, target/62642,
  	target/63335, target/63428, target/63673, target/63947, target/64113,
  	target/64115, target/64304, target/64358, target/64387, target/64409,
  	target/64452, target/64453, target/64479, target/64513, target/64579,
  	target/64580, target/64795, target/64882, target/64979, target/65138,
  	target/65163, target/65196, target/65286, target/65368, target/65787,
  	target/65849, target/66140, target/66148, target/66215, target/66275,
  	target/66470, target/66474, tree-optimization/59124,
  	tree-optimization/60656, tree-optimization/61634,
  	tree-optimization/61686, tree-optimization/61969,
  	tree-optimization/62031, tree-optimization/62167,
  	tree-optimization/63375, tree-optimization/63379,
  	tree-optimization/63551, tree-optimization/63593,
  	tree-optimization/63605, tree-optimization/63841,
  	tree-optimization/63844, tree-optimization/64269,
  	tree-optimization/64277, tree-optimization/64493,
  	tree-optimization/64495, tree-optimization/64563,
  	tree-optimization/65063, tree-optimization/65388,
  	tree-optimization/65518, tree-optimization/66123,
  	tree-optimization/66233, tree-optimization/66251,
  	tree-optimization/66272


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-8
changelog:
  - fix PowerPC unaligned vectorization bug (#1146871,
    PR tree-optimization/63341)
  - fix another -fcompare-debug issue (PR debug/63284)


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-6
changelog:
  - update from the 4.8 branch (#1140019)
    - PRs c++/58714, c++/59823, c++/59956, c++/60241, c++/60361, c++/61959,
  	c/61271, debug/55794, debug/60655, debug/61923, fortran/61999,
  	fortran/62214, fortran/62270, ipa/61986, ipa/62015, libgfortran/62188,
  	libstdc++/58962, libstdc++/61946, middle-end/61010, middle-end/61045,
  	middle-end/62103, rtl-optimization/62004, rtl-optimization/62030,
  	target/61996, target/62038, target/62195, testsuite/56194,
  	tree-optimization/60196, tree-optimization/60707,
  	tree-optimization/61452, tree-optimization/62073,
  	tree-optimization/62075, tree-optimization/63189


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-4
changelog:
  - update from the 4.8 branch
    - PRs fortran/61780, libobjc/61920, target/47230, tree-optimization/61375,
  	tree-optimization/61964
    - fix libgfortran overflows on allocation (CVE-2014-5044)
  - backport ibm-ldouble performance improvements (#1090620)


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-2
changelog:
  - update from the 4.8 branch
    - PRs c++/61500, c++/61539, c++/61647, fortran/58883, fortran/61459,
  	middle-end/53590, rtl-optimization/61801, target/61542, target/61586,
  	tree-optimization/61306, tree-optimization/61684
  - for rhel 7.1 keep the old 4.8.2 pathnames and use 4.8.3 symlinks
  - merge in aarch64 support (#1070290)
  - small improvements on s390x for z196 and later (#1088542)
  - make sure OpenMP outlined artificial functions have DW_AT_name (#844959)


author: Jakub Jelinek <jakub@redhat.com> 4.8.3-1
changelog:
  - update from the 4.8 branch
    - GCC 4.8.3 release
    - PRs c++/60605, c++/60731, c++/61134, fortran/45187, ipa/61393,
  	libfortran/61187, libfortran/61310, libstdc++/60734, libstdc++/60966,
  	rtl-optimization/60866, rtl-optimization/60901, rtl-optimization/61094,
  	rtl-optimization/61446, target/61044, target/61193, target/61202,
  	target/61208, target/61231, target/61239, target/61249, target/61300,
  	target/61415, target/61423, target/61431, target/61443, target/61483,
  	target/61545, target/61570, tree-optimization/61383


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-18
changelog:
  - update from the 4.8 branch
    - PRs c++/60367, c++/60628, c++/60689, c++/60708, c++/60713, debug/60603,
  	driver/61106, libfortran/56919, libfortran/60810, libstdc++/60497,
  	libstdc++/60594, libstdc++/61117, middle-end/36282, middle-end/55022,
  	middle-end/60635, middle-end/60729, middle-end/60750,
  	middle-end/60849, middle-end/60895, rtl-optimization/60769,
  	target/57589, target/58595, target/59952, target/60516, target/60609,
  	target/60672, target/60693, target/60839, target/60909, target/60941,
  	target/60991, target/61026, target/61055, tree-optimization/57864,
  	tree-optimization/59817, tree-optimization/60453,
  	tree-optimization/60502, tree-optimization/60740,
  	tree-optimization/60766, tree-optimization/60836,
  	tree-optimization/60903, tree-optimization/60930,
  	tree-optimization/60960
  - backport OpenMP 4.0 support to libgomp (library only; PR libgomp/58691)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-17
changelog:
  - update from the 4.8 branch
    - PRs ada/51483, ada/60703, c/37743, c/59891, c/60101, c++/37140, c++/41174,
  	c++/54652, c++/55800, c++/57043, c++/57524, c++/57899, c++/58466,
  	c++/58504, c++/58606, c++/58632, c++/58639, c++/58672, c++/58812,
  	c++/58814, c++/58835, c++/58837, c++/58845, c++/58873, c++/58965,
  	c++/59097, c++/59224, c++/59646, c++/59989, c++/60108, c++/60146,
  	c++/60182, c++/60187, c++/60216, c++/60219, c++/60248, debug/59776,
  	fortran/49397, fortran/52370, fortran/55907, fortran/57033,
  	fortran/58007, fortran/58803, fortran/59395, fortran/59414,
  	fortran/59599, fortran/59700, fortran/59906, fortran/60231,
  	fortran/60283, fortran/60341, fortran/60450, fortran/60522,
  	fortran/60543, fortran/60576, fortran/60677, ipa/55260, ipa/60026,
  	ipa/60419, ipa/60640, libfortran/38199, libfortran/58324,
  	libfortran/59700, libfortran/59764, libfortran/59771,
  	libfortran/59774, libfortran/59836, libfortran/60128, libgcc/60166,
  	libgcj/55637, libstdc++/59215, libstdc++/59392, libstdc++/59548,
  	libstdc++/59680, libstdc++/59738, libstdc++/60564, libstdc++/60658,
  	middle-end/57499, middle-end/58809, middle-end/60004,
  	middle-end/60221, middle-end/60291, objc/56870, other/56653,
  	preprocessor/56824, preprocessor/58844, preprocessor/60400,
  	rtl-optimization/56356, rtl-optimization/57422,
  	rtl-optimization/57425, rtl-optimization/57569,
  	rtl-optimization/57637, rtl-optimization/60116,
  	rtl-optimization/60452, rtl-optimization/60601,
  	rtl-optimization/60700, target/43546, target/48094, target/54083,
  	target/54407, target/55426, target/56843, target/57052, target/57935,
  	target/57949, target/58675, target/58710, target/59054, target/59379,
  	target/59396, target/59462, target/59718, target/59777, target/59844,
  	target/59880, target/59909, target/59929, target/60017, target/60032,
  	target/60039, target/60062, target/60151, target/60193, target/60203,
  	target/60207, target/60486, target/60568, target/60735,
  	tree-optimization/56490, tree-optimization/59903,
  	tree-optimization/60115, tree-optimization/60183,
  	tree-optimization/60276, tree-optimization/60382,
  	tree-optimization/60429, tree-optimization/60454,
  	tree-optimization/60485
    - powerpc64 little endian support
  - enable ppc64le in the spec file


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-15
changelog:
  - fix exception spec instantiation ICE (#1067398, PR c++/60046)
  - fix pch on aarch64 (#1058991, PR pch/60010)
  - configure with --enable-gnu-indirect-function on architectures
    and distros that support it and don't support it by default
    yet (#1067245)
  - fix vector permutation handling on i?86/x86_64 (PR target/57896)
  - fix __atomic_compare_exchange_* not to store into *expected
    on success (PR c++/60272)
  - fix -march=native on VMs where saving/restoring of YMM state
    is not supported, yet CPU supports f16c (PR driver/60233)
  - add ref7.C testcase (PR c++/60274)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-13
changelog:
  - when removing -Wall from CXXFLAGS, if -Werror=format-security
    is present, add -Wformat to it, so that GCC builds on F21


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-12
changelog:
  - update from the 4.8 branch (#1052892)
    - PRs c++/59838, debug/54694, fortran/34547, fortran/58410,
  	middle-end/59827, middle-end/59860, target/58139, target/59142,
  	target/59695, target/59794, target/59826, target/59839
  - fix handling of initialized vars with flexible array members
    (#1035413, PR middle-end/28865)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-10
changelog:
  - update from the 4.8 branch (#1052892)
    - PRs ada/55946, ada/59772, c++/56060, c++/58954, c++/59255, c++/59730,
  	fortran/57042, fortran/58998, fortran/59493, fortran/59612,
  	fortran/59654, ipa/59610, middle-end/59584, pch/59436,
  	rtl-optimization/54300, rtl-optimization/58668,
  	rtl-optimization/59137, rtl-optimization/59647,
  	rtl-optimization/59724, target/57386, target/59587, target/59625,
  	target/59652, testsuite/58630, tree-optimization/54570,
  	tree-optimization/59125, tree-optimization/59362,
  	tree-optimization/59715, tree-optimization/59745
  - default to -march=z196 instead of -march=z10 on s390/s390x (#1052890)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-7
changelog:
  - update from the 4.8 branch
    - PRs libgomp/59467, rtl-optimization/58295, target/56807,
  	testsuite/59442
    - fix LRA coalescing for real (PR middle-end/59470)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-6
changelog:
  - temporarily revert PR middle-end/58956 to avoid libstdc++
    miscompilation on i?86 (PR middle-end/59470)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-5
changelog:
  - update from the 4.8 branch
    - PRs ada/59382, bootstrap/57683, c++/58162, c++/59031, c++/59032,
  	c++/59044, c++/59052, c++/59268, c++/59297, c/59280, c/59351,
  	fortran/57445, fortran/58099, fortran/58471, fortran/58771,
  	middle-end/58742, middle-end/58941, middle-end/58956,
  	middle-end/59011, middle-end/59037, middle-end/59138,
  	rtl-optimization/58726, target/50751, target/51244, target/56788,
  	target/58854, target/58864, target/59021, target/59088,
  	target/59101, target/59153, target/59163, target/59207,
  	target/59343, target/59405, tree-optimization/57517,
  	tree-optimization/58137, tree-optimization/58143,
  	tree-optimization/58653, tree-optimization/58794,
  	tree-optimization/59014, tree-optimization/59047,
  	tree-optimization/59139, tree-optimization/59164,
  	tree-optimization/59288, tree-optimization/59330,
  	tree-optimization/59334, tree-optimization/59358,
  	tree-optimization/59388
  - aarch64 gcj enablement (#1023789)
  - look for libgfortran.spec and libitm.spec in %{_lib} rather than lib
    subdirs (#1023789)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-3
changelog:
  - update from the 4.8 branch
    - PRs c++/58282, c++/58979, fortran/58355, fortran/58989, libstdc++/58839,
  	libstdc++/58912, libstdc++/58952, lto/57084, middle-end/58789,
  	rtl-optimization/58079, rtl-optimization/58831, rtl/58542,
  	target/58690, target/58779, target/58792, target/58838,
  	tree-optimization/57488, tree-optimization/58805,
  	tree-optimization/58984
  - fix ICEs in get_bit_range (PR middle-end/58970)
  - fix ICEs in RTL loop unswitching (PR rtl-optimization/58997)


author: Jakub Jelinek <jakub@redhat.com> 4.8.2-2
changelog:
  - update from the 4.8 branch
    - PRs c++/58596, libstdc++/58800
  - power8 TImode fix (#1014053, PR target/58673)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-12
changelog:
  - update from the 4.8 branch
    - PRs c++/58568, fortran/55469, fortran/57697, fortran/58469,
  	libstdc++/57465, libstdc++/57641, libstdc++/58659, target/58460,
  	tree-optimization/58539
    - fix asm goto handling (#1017704, PR middle-end/58670)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-11
changelog:
  - update from the 4.8 branch
    - PRs c++/58535, libstdc++/58437, libstdc++/58569, middle-end/56791,
  	middle-end/58463, middle-end/58564, target/58330,
  	tree-optimization/56716
    - fix s390x z10+ chunkification (#1012870, PR target/58574)
  - disable ppc{,64} -mvsx-timode by default (#1014053, PR target/58587)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-10
changelog:
  - update from the 4.8 branch
    - PRs ada/58264, c++/58457, c++/58458, libstdc++/58358,
  	tree-optimization/58088
  - on RHEL7, configure on ppc/ppc64 with default -mcpu=power7,
    on s390/s390x with default -march=z10 -mtune=zEC12 and
    on i?86 default to -march=x86-64 -mtune=generic (#805157)
  - on Fedora 20+ and RHEL7 default to -fdiagnostics-color=auto
    rather than -fdiagnostics-color=never, if GCC_COLORS isn't
    in the environment; to turn it off by default, set GCC_COLORS=
    in the environment


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-9
changelog:
  - update from the 4.8 branch
    - PRs c++/58273, libstdc++/58415, middle-end/58377, rtl-optimization/58365,
  	target/58314, target/58361, target/58382, tree-optimization/58385
  - add arm_neon.h on aarch64 (#1007490)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-8
changelog:
  - update from the 4.8 branch
    - PRs c++/58325, libstdc++/58302, libstdc++/58341, middle-end/57656,
  	other/12081, target/57735, tree-optimization/57521,
  	tree-optimization/57685, tree-optimization/58010,
  	tree-optimization/58223, tree-optimization/58228,
  	tree-optimization/58246, tree-optimization/58277,
  	tree-optimization/58364


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-7
changelog:
  - update from the 4.8 branch
    - PRs c++/58083, c++/58119, c++/58190, fortran/57798, fortran/58185,
  	middle-end/56977, middle-end/57381, middle-end/58257, target/56979,
  	target/57865, target/57927, target/58218, tree-optimization/57343,
  	tree-optimization/57396, tree-optimization/57417,
  	tree-optimization/58006, tree-optimization/58164,
  	tree-optimization/58165, tree-optimization/58209
  - fix up x86-64 -mcmodel=large -fpic TLS GD and LD model
    (#994244, PR target/58067)
  - power8 fusion support fixes (#731884, PR target/58160)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-6
changelog:
  - update from the 4.8 branch
    - PRs c++/57825, c++/57901, c++/57981, c++/58022, fortran/57435,
  	fortran/58058, libstdc++/56627, libstdc++/57914, libstdc++/58098,
  	middle-end/58041, rtl-optimization/57459, rtl-optimization/57708,
  	rtl-optimization/57878, sanitizer/56417, target/51784, target/57516,
  	target/58067, target/58132, tree-optimization/57980
  - power8 fusion support (#731884)
  - fix up ABI alignment patch (#947197)
  - fix up SRA with volatile struct accesses (PR tree-optimization/58145)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-5
changelog:
  - update from the 4.8 branch
    - PRs target/55656, target/55657
    - update to Go 1.1.1
  - backport power8 HTM support from trunk (#731884)
  - backport s390 zEC12 HTM support from trunk


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-4
changelog:
  - update from the 4.8 branch
    - PRs c++/57437, c++/57526, c++/57532, c++/57545, c++/57550, c++/57551,
  	c++/57645, c++/57771, c++/57831, fortran/57785,
  	rtl-optimization/57829, target/56102, target/56892, target/56987,
  	target/57506, target/57631, target/57736, target/57744,
  	target/57777, target/57792, target/57844
  - backport some raw-string literal handling fixes (#981029,
    PRs preprocessor/57757, preprocessor/57824)
  - improve convert_to_* (PR c++/56493)
  - tune for power7 on RHEL7


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-3
changelog:
  - update from the 4.8 branch
    - PRs c++/53211, c++/56544, driver/57652, libstdc++/57619, libstdc++/57666,
  	libstdc++/57674, rtl-optimization/57518, target/57623, target/57655,
  	tree-optimization/57358, tree-optimization/57537
    - fix up gcc-{ar,nm,ranlib} (#974853, PR driver/57651)
  - fix two libitm HTM handling bugs (PR libitm/57643)
  - speed up __popcount[sdt]i2 library function (PR middle-end/36041)
  - backport power8 support from trunk (#731884, PR target/57615)
  - for Fedora 20+ test -fstack-protector-strong during %check instead
    of -fstack-protector


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-2
changelog:
  - update from the 4.8 branch
    - PRs fortran/57364, fortran/57508, target/56547, target/57379, target/57568
  - backport backwards compatible alignment ABI fixes (#947197, PR target/56564)
  - fix up widening multiplication vectorization on big-endian
    (PR tree-optimization/57537)


author: Jakub Jelinek <jakub@redhat.com> 4.8.1-1
changelog:
  - update from the 4.8 branch
    - GCC 4.8.1 release
    - PRs c++/56930, c++/57319, fortran/57217, target/49146, target/56742
  - backport Intel Silvermont enablement and tuning from trunk
  - backport 3 small AMD improvement patches from trunk


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-7
changelog:
  - update from the 4.8 branch
    - PRs c++/57016, c++/57317, c++/57325, c++/57388, libffi/56033,
  	libstdc++/57336, middle-end/57344, middle-end/57347, plugins/56754,
  	rtl-optimization/57341, target/56732, target/57356,
  	tree-optimization/57303, tree-optimization/57318,
  	tree-optimization/57321, tree-optimization/57330, tree-ssa/57385
    - std::chrono::steady_clock now really steady


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-6
changelog:
  - update from the 4.8 branch
    - PRs c++/56782, c++/56998, c++/57041, c++/57196, c++/57243, c++/57252,
  	c++/57253, c++/57254, c++/57274, c++/57279, middle-end/57251,
  	rtl-optimization/57281, rtl-optimization/57300, target/45359,
  	target/46396, target/57264
  - backport color diagnostics support from trunk, enable with
    -fdiagnostics-color=auto, -fdiagnostics-color=always or
    having non-empty GCC_COLORS variable in environment
  - backport -fstack-protector-strong support from trunk


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-5
changelog:
  - update from the 4.8 branch
    - PRs bootstrap/54281, bootstrap/54659, c++/57047, c++/57068, c++/57222,
  	fortran/57142, libstdc++/57212, middle-end/56988, target/55033,
  	target/57237, tree-optimization/57200, tree-optimization/57214
  - fix up strlen pass (PR tree-optimization/57230)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-4
changelog:
  - update from the 4.8 branch
    - PRs ada/56474, c++/50261, c++/56450, c++/56859, c++/56970, c++/57064,
  	c++/57092, c++/57183, debug/57184, fortran/51825, fortran/52512,
  	fortran/53685, fortran/56786, fortran/56814, fortran/56872,
  	fortran/56968, fortran/57022, libfortran/51825, libfortran/52512,
  	libfortran/56786, libstdc++/57010, middle-end/57103,
  	rtl-optimization/56605, rtl-optimization/56847,
  	rtl-optimization/57003, rtl-optimization/57130,
  	rtl-optimization/57131, rtl-optimizations/57046, sanitizer/56990,
  	target/44578, target/55445, target/56797, target/56866, target/57018,
  	target/57091, target/57097, target/57098, target/57106, target/57108,
  	target/57150, tree-optimization/57051, tree-optimization/57066,
  	tree-optimization/57083, tree-optimization/57104,
  	tree-optimization/57149, tree-optimization/57185
    - fix gcj with -fsection-anchors (#952673, PR libgcj/57074)
  - enable libitm on s390{,x}
  - error when linking with both -fsanitize=address and -fsanitize=thread
    (#957778)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-3
changelog:
  - update from the 4.8 branch
    - PRs c++/56388, fortran/56816, fortran/56994, rtl-optimization/56992,
  	target/56890, target/56903, target/56948, tree-optimization/56962,
  	tree-optimization/56984
  - fix up LRA caused miscompilation of xulrunner on i?86
    (#949553, PR rtl-optimization/56999)
  - reassoc fix for -Ofast -frounding-math (PR tree-optimization/57000)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-2
changelog:
  - update from the 4.8 branch
    - PRs c++/35722, c++/45282, c++/52014, c++/52374, c++/52748, c++/54277,
  	c++/54359, c++/54764, c++/55532, c++/55951, c++/55972, c++/56039,
  	c++/56447, c++/56582, c++/56646, c++/56692, c++/56699, c++/56722,
  	c++/56728, c++/56749, c++/56772, c++/56774, c++/56793, c++/56794,
  	c++/56821, c++/56895, c++/56913, debug/56819, fortran/54932,
  	fortran/56696, fortran/56735, fortran/56737, fortran/56782,
  	libstdc++/55977, libstdc++/55979, libstdc++/56002, libstdc++/56678,
  	libstdc++/56834, lto/56777, middle-end/56694, middle-end/56768,
  	middle-end/56883, other/55274, rtl-optimization/48182,
  	rtl-optimization/56745, sanitizer/55702, target/54805, target/55487,
  	target/56560, target/56720, target/56771, tree-optimization/48184,
  	tree-optimization/48186, tree-optimization/48762,
  	tree-optimization/56407, tree-optimization/56501,
  	tree-optimization/56817, tree-optimization/56837,
  	tree-optimization/56899, tree-optimization/56918,
  	tree-optimization/56920


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-1
changelog:
  - update from the 4.8 branch
    - GCC 4.8.0 release
    - PRs c++/56607, other/43620
    - fix length in .debug_aranges in some cases
  - improve debug info for optimized away global vars (PR debug/56608)
  - don't warn about signed 1-bit enum bitfields containing values 0 and -1
    or just -1 (PR c/56566)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.18
changelog:
  - update from the 4.8 branch
    - PRs libstdc++/56468, target/56640, tree-optimization/56635,
  	tree-optimization/56661
  - package libasan_preinit.o


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.17
changelog:
  - update from trunk and the 4.8 branch
    - PRs ada/52123, c++/51412, c++/51494, c++/51884, c++/52183, c++/56222,
  	c++/56346, c++/56565, c++/56567, c++/56611, c++/56614, debug/56307,
  	fortran/56575, fortran/56615, libstdc++/56492, libstdc++/56609,
  	libstdc++/56613, lto/56557, middle-end/56524, middle-end/56571,
  	target/40797, target/49880, target/56470, target/56591, target/56619,
  	testsuite/54119, tree-optimization/53265, tree-optimization/56478,
  	tree-optimization/56570, tree-optimization/56608


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.16
changelog:
  - updated from trunk
    - PRs bootstrap/56509, c++/54383, c++/55135, c++/56464, c++/56530,
  	c++/56534, c++/56543, debug/55364, debug/56510, libquadmath/55473,
  	lto/50293, lto/56515, middle-end/50494, middle-end/56294,
  	middle-end/56525, middle-end/56526, middle-end/56548,
  	rtl-optimization/56484, rtl-optimization/56494, target/56529,
  	tree-optimization/56270, tree-optimization/56521,
  	tree-optimization/56539, tree-optimization/56559
    - include arm-cores.def in gcc-python-plugin on arm (#910926)
  - include vxworks-dummy.h in gcc-python-plugin where needed (PR plugins/45078)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.15
changelog:
  - updated from trunk
    - PRs c++/10291, c++/40405, c++/52688, c++/55632, c++/55813, c++/56243,
  	c++/56358, c++/56359, c++/56377, c++/56395, c++/56403, c++/56419,
  	c++/56438, c++/56481, fortran/54730, fortran/56385, fortran/56416,
  	fortran/56477, fortran/56491, libfortran/30162, libstdc++/56011,
  	libstdc++/56012, middle-end/45472, middle-end/56077,
  	middle-end/56108, middle-end/56420, middle-end/56461,
  	rtl-optimization/50339, rtl-optimization/56466, sanitizer/56393,
  	sanitizer/56454, target/48901, target/52500, target/52501,
  	target/52550, target/54639, target/54640, target/54662, target/56444,
  	target/56445, target/56455, testsuite/52641, tree-optimization/55481,
  	tree-optimization/56175, tree-optimization/56294,
  	tree-optimization/56310, tree-optimization/56415,
  	tree-optimization/56426, tree-optimization/56443,
  	tree-optimization/56448
  - fnsplit fix (PR tree-optimization/56424)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.14
changelog:
  - updated from trunk
    - PRs asan/56330, c++/51242, c++/54276, c++/56373, libquadmath/56379,
  	middle-end/55889, middle-end/56349, pch/54117,
  	rtl-optimization/56348, target/52555, target/54685, target/56214,
  	target/56347, tree-optimization/55334, tree-optimization/56321,
  	tree-optimization/56350, tree-optimization/56366,
  	tree-optimization/56381, tree-optimization/56384,
  	tree-optimization/56396, tree-optimization/56398
  - add BuildRequires: /usr/bin/pod2man to fix man pages generation
  - don't ICE on bogus inline asm in kernel (#912857, PR inline-asm/56405)
  - fix up info page building with texinfo 5.0 (PR bootstrap/56258)
  - devirtualization ICE fix (PR tree-optimization/56265)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.13
changelog:
  - updated from trunk
    - PRs bootstrap/56327, c++/52026, c++/54922, c++/55003, c++/55220,
  	c++/55223, c++/55232, c++/55582, c++/55670, c++/55680, c++/56323,
  	c++/56343, fortran/53818, fortran/56224, fortran/56318,
  	libstdc++/56111, lto/50494, target/55431, target/55941,
  	testsuite/56138
  - asan fixes (PR sanitizer/56330)
  - asan speedup - use 0x7fff8000 shadow offset instead of 1LL << 44 on
    x86_64


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.12
changelog:
  - updated from trunk
    - PRs c++/55710, c++/55879, c++/55993, c++/56135, c++/56155, c++/56285,
  	c++/56291, c/44938, fortran/46952, fortran/56204, inline-asm/56148,
  	libitm/55693, lto/56295, lto/56297, middle-end/56288,
  	sanitizer/56128, target/52122, testsuite/56082
    - fix IRA bug that caused reload ICE on ARM (#910153, target/56184)
    - attempt harder to fold "n" constrainted asm input operands in C++
      with -O0 (#910421, c++/56302)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.11
changelog:
  - updated from trunk
    - PRs c++/56238, c++/56247, c++/56268, fortran/55362, libstdc++/56267,
  	libstdc++/56278, libstdc++/56282, rtl-optimization/56246,
  	rtl-optimization/56275, target/56043, tree-optimization/56264,
  	tree-optimization/56273
  - improve expansion of mem1 op= mem2 (PR rtl-optimization/56151)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.10
changelog:
  - updated from trunk
    - PRs bootstrap/56227, c++/56235, c++/56237, c++/56239, c++/56241,
  	debug/53363, fortran/54339, fortran/55789, libstdc++/56193,
  	libstdc++/56216, lto/56231, middle-end/56181,
  	rtl-optimization/56195, rtl-optimization/56225, target/50678,
  	target/54009, target/54131, tree-optimization/56250
    - fix Ada frontend miscompilation with profiledbootstrap (#906516,
      PR rtl-optimization/56178)
  - restore parsing of ppc inline asm dialects (#909298, PR target/56256)
  - fix up libiberty old regex (PR other/56245)
  - fix IRA -O0 -g code debug regression (PR debug/53948)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.9
changelog:
  - updated from trunk
    - PRs c++/54122, c++/56177, c++/56208, debug/54793, fortran/47517,
  	fortran/50627, fortran/54195, fortran/56008, fortran/56054,
  	libstdc++/56202, lto/56168, middle-end/56113, middle-end/56167,
  	middle-end/56217, rtl-optimization/56131, sanitizer/55617,
  	target/52123, target/54601, target/55146, target/56186,
  	tree-optimization/53185, tree-optimization/53342,
  	tree-optimization/54386, tree-optimization/55789,
  	tree-optimization/56188
    - fix up stdarg pass (PR tree-optimization/56205, #906367)
    - remove unused thread_local bitfield (#907882)
  - fix cselim pass on calls that might free memory (PR tree-optimization/52448)
  - fix libgfortran internal_pack (PR fortran/55978)
  - fix up .debug_loc for first function in CU, if it contains empty ranges
    at the beginning of the function (PR debug/56154, #904252)
  - fix ppc64 indirect calls (PR target/56228, #908388)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.8
changelog:
  - updated from trunk
    - PRs c++/56162, debug/54410, debug/54508, debug/55059, fortran/54107,
  	fortran/56138, libgomp/55561, libstdc++/54314, lto/56147,
  	middle-end/53073, other/53413, other/54620, rtl-optimization/56144,
  	sanitizer/55374, target/39064, target/56121, tree-optimization/55270,
  	tree-optimization/56064, tree-optimization/56113,
  	tree-optimization/56150, tree-optimization/56157


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.7
changelog:
  - updated from trunk
    - PRs c++/56095, c++/56104, c/56078, fortran/53537, fortran/55984,
  	fortran/56047, inline-asm/55934, libstdc++/56085, libstdc++/56112,
  	other/54814, other/56076, rtl-optimization/56117, target/54663,
  	target/56114, testsuite/56053, tree-optimization/55927,
  	tree-optimization/56034, tree-optimization/56035,
  	tree-optimization/56094, tree-optimization/56098,
  	tree-optimization/56125


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.6
changelog:
  - updated from trunk
    - PRs c++/53609, c++/55944, c++/56067, c++/56071, fortran/56081,
  	libgomp/51376, libgomp/56073, libquadmath/56072, middle-end/56074,
  	sanitizer/55989, target/49069, target/54222, target/55686,
  	target/56028
  - update TeX related BuildRequires (#891460)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.5
changelog:
  - updated from trunk
    - PRs c++/56059, fortran/55919, rtl-optimization/56023,
  	tree-optimization/56051
  - fix up cloog dlopen patches for upgrade to cloog-0.18.0
  - fix Fortran OpenMP OOP ICE (PR fortran/56052)


author: Jakub Jelinek <jakub@redhat.com> 4.8.0-0.4
changelog:
  - updated from trunk
    - PRs ada/864, bootstrap/55792, bootstrap/55961, c++/52343, c++/55663,
  	c++/55753, c++/55801, c++/55878, c++/55893, c/48418, debug/49888,
  	debug/53235, debug/53671, debug/54114, debug/54402, debug/55579,
  	debug/56006, driver/55470, driver/55884, fortran/42769, fortran/45836,
  	fortran/45900, fortran/47203, fortran/52865, fortran/53876,
  	fortran/54286, fortran/54678, fortran/54990, fortran/54992,
  	fortran/55072, fortran/55341, fortran/55618, fortran/55758,
  	fortran/55763, fortran/55806, fortran/55852, fortran/55868,
  	fortran/55935, fortran/55983, libmudflap/53359, libstdc++/51007,
  	libstdc++/55043, libstdc++/55233, libstdc++/55594, libstdc++/55728,
  	libstdc++/55847, libstdc++/55861, libstdc++/55908, lto/45375,
  	middle-end/55114, middle-end/55851, middle-end/55882,
  	middle-end/55890, middle-end/56015, other/55973, other/55982,
  	rtl-optimization/52573, rtl-optimization/53827,
  	rtl-optimization/55153, rtl-optimization/55547,
  	rtl-optimization/55672, rtl-optimization/55829,
  	rtl-optimization/55833, rtl-optimization/55845,
  	rtl-optimization/56005, sanitizer/55488, sanitizer/55679,
  	sanitizer/55844, target/42661, target/43961, target/54461,
  	target/54908, target/55301, target/55433, target/55565,
  	target/55718, target/55719, target/55876, target/55897,
  	target/55940, target/55948, target/55974, target/55981,
  	target/56058, testsuite/54622, testsuite/55994,
  	tree-optimization/44061, tree-optimization/48189,
  	tree-optimization/48766, tree-optimization/52631,
  	tree-optimization/53465, tree-optimization/54120,
  	tree-optimization/54767, tree-optimization/55273,
  	tree-optimization/55569, tree-optimization/55823,
  	tree-optimization/55862, tree-optimization/55875,
  	tree-optimization/55888, tree-optimization/55920,
  	tree-optimization/55921, tree-optimization/55955,
  	tree-optimization/55964, tree-optimization/55995,
  	tree-optimization/56029, tree-optimization/55264
  - fix up multiversioning (PR c++/55742)
  - fix up ICE with target attribute (PR middle-end/56022)
  - update isl to 0.11.1 and cloog to 0.18.0


author: Terje Rosten <terje.rosten@ntnu.no> - 1.00-2
changelog:
  - fix license, buildroot and group
  - remove hardcoded packager tag
  - use %configure macro
  - dist tag
  - make install on single line
  - fix files section
  - remove strange use of macros (name, version and release)
  - untabify


author: Rex Dieter <rdieter@fedoraproject.org> 1:6.1.4-4
changelog:
  - make proper optimized build 
  - -utils: include both normal and iodbc variants
  - -utils: include -vt symlinks for compatiblity with opensuse packaging


author: Than Ngo <than@redhat.com> - 2.0.13-17
changelog:
  - Resolves: bz#1258363 - gtkWarning showing in terminal while launch kdump
  - Resolves: bz#1279298 - system-config-kdump throws traceback on keyboard interruption
  - Resolves: bz#1082420 - error display Basic Settings option "Current kdkump Memory" value
  - Resolves: bz#1077470 - target settings option "Raw device" does not list VirtIO devices
  - Resolves: bz#1384943 - add fadump memory reservation support in system-config-kdump (fadump)
  - Resolves: bz#1404780 - add support variable amount of memory as crashkernel value


author: Martin Milata <mmilata@redhat.com> - 2.0.13-9
changelog:
  - Set PATH in backend so that zipl knows where to find dmsetup (affects only s390x)
  - Resolves: #1077113


author: Martin Milata <mmilata@redhat.com> - 2.0.13-5
changelog:
  - Fix broken Reload button
  - Resolves: #1052042
  - Update default core_collector to use LZO compression
  - Resolves: #1047816


author: Martin Milata <mmilata@redhat.com> - 2.0.13-1
changelog:
  - Update to 2.0.13
  - New version incorporates several bugfixes and adds support for x86 EFI
    systems


author: Roman Rakus <rrakus@redhat.com> - 2.0.10-3
changelog:
  - Use kdumpctl and systemctl instead of service command
  - Default action changed so accordingly change also our message
  - Configuration for nfs and ssh changed
    Resolves: #886321,#883769,#883638


author: Roman Rakus <rrakus@redhat.com> - 2.0.10-1
changelog:
  - always enable auto option
  - always use memory info from /proc/meminfo
  - Resolves: #859096, #859020


author: Dave Lehman <dlehman@redhat.com> 1.0.13-1.el7
changelog:
  - handle kdump service start/stop
    Resolves: rhbz#239324
  - only suggest reboot if memory reservation altered
    Related: rhbz#239324
  - preserve unknown config options
    Resolves: rhbz#253603
  - add 'halt' default action
    Related: rhbz#253603


author: Dave Lehman <dlehman@redhat.com> 1.0.12-1.el7
changelog:
  - prompt user for a PAE kernel for 32-bit xen with >4G memory (Jarod Wilson)
    Resolves: rhbz#284851


author: Dave Lehman <dlehman@redhat.com> 1.0.10-1.el7
changelog:
  - handle ia64 bootloader correctly
    Resolves: #220231
  - align memory requirements with documented system limits
    Resolves: #228711


author: Dave Lehman <dlehman@redhat.com> 1.0.7-1.el7
changelog:
  - rework memory constraints for increased flexibility (#215990)
  - improve consistency WRT freezing/thawing of widgets (#215991)
  - update translations (#216596)


author: Dave Lehman <dlehman@redhat.com> 1.0.5-1.el7
changelog:
  - fix install make target to specify modes where needed
  - remove unnecessary %preun
  - various specfile fixes to appease rpmlint


author: Dave Lehman <dlehman@redhat.com> 1.0.4-1
changelog:
  - all location types now in combo box (no text entry for type)
  - preserve comment lines from kdump.conf instead of writing config header
  - add hicolor icon from Diana Fong


author: Dave Lehman <dlehman@redhat.com> 1.0.2-1
changelog:
  - add support for "core_collector" and "path" handlers
  - give choices of "ssh" and "nfs" instead of "net"
  - validate results of edit location dialog
  - add choice of "none" to default actions
  - remove "ifc" support since it's gone from kexec-tools
  - update kdump config file header
  - fix a couple of strings that weren't getting translated


author: Dave Lehman <dlehman@redhat.com> 1.0.1-1
changelog:
  - Fix bugs in writeDumpConfig and writeBootloaderConfig
  - Fix handling of pre-existing "ifc" and "default" directives
  - Always leave network interface checkbutton sensitive
  - Various minor fixes


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Kevin Fenzi <kevin@scrye.com> 1.3.2-7
changelog:
  - Add patch to not switch tty's, so systemd-logind works right with startx. 
  - Partially Fixes bug #806491


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-15
changelog:
  - Add xinit-compat script
    Patch from Rex Dieter, bug 540546
    Move xinit-compat script to -session subpackage.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.9-14
changelog:
  - Eliminate dependency on which.
  - Change Xclients, Xsession and xinitrc-common to make fewer stat calls.
  - Install xinitrc-common non-executable.


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Matthias Clasen <mclasen@redhat.com> 1.0.9-4
changelog:
  - Make the gnome session actually take the gnome case in the switch (#458694)
  - Update patches
  - Drop upstreamed patch


author: Adam Jackson <ajax@redhat.com> 1.0.7-7
changelog:
  - Xsession: Don't start ssh-agent for gnome sessions anymore, gnome-keyring
    acts as an agent now. (#441123)


author: Adam Jackson <ajax@redhat.com> 1.0.7-4
changelog:
  - xinit-1.0.7-unset.patch: Unset various session-related environment
    variables at the top of startx. (#431899)


author: Ray Strode <rstrode@redhat.com> 1.0.7-3
changelog:
  - don't special case dbus-launch. dbus-x11 now installs
    a script into /etc/X11/xinit/xinitrc.d.
  - Drop the weird grep rule for extensions ending in .sh
    when sourcing /etc/X11/xinit/xinitrc.d


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.7-2
changelog:
  - Try opening the console-kit session after the user's UID has already
    been granted access to the server by localuser.sh, so that console-kit-daemon
    can connect and ask the server for information just by having switch to the
    user's UID (#287941).


author: Soren Sandmann <sandmann@redhat.com> 1.0.2-23
changelog:
  - Fix Xsession to run the login shell inside the setgid ssh-agent, rather
    than the other way around. This preserves LD_LIBRARY_PRELOAD.
    Patch from Stefan Becker, bug 164869.


author: Warren Togami <wtogami@redhat.com> 1.0.2-19
changelog:
  - disable SCIM by default in non-Asian languages #237054
    If you want to use SCIM, use im-chooser to enable it.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xinit 1.0.0 from X11R7 RC4.
  - Changed manpage dir from man1x to man1 to match upstream default.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added Xsession script from xinitrc, as it is very similar codebase, which
    shares "xinitrc-common" anyway, and all of the display managers use it.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added "Provides: xinitrc = 5.0.0-1" for temporary compatibility between
    monolithic and modular X.  This will be removed however for FC5.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Import custom Red Hat xinit scripts from xinitrc package.
  - Obsolete xinitrc package, as we include the scripts/configs here now.
  - Fix all scripts/configs to avoid the now obsolete /usr/X11R6 prefix.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Use Fedora-Extras style BuildRoot tag.
  - Update BuildRequires to use new library package names.
  - Tidy up spec file a bit.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.8.15-8
changelog:
  - Fixed crash that can occur if term is resized during irssi init
    (init-resize-crash-fix patch)
    Resolves: rhbz#796457


author: Dams <anvil[AT]livna.org> - 0.8.10-0.1.rc7
changelog:
  - Dropped patch 2 (seems applied upstream) and 3 (no longer needed)
  - Removed conditionnal build against glib1 parts


author: Dams <anvil[AT]livna.org> 0:0.8.9-0.fdr.2
changelog:
  - Fixed changelog typo
  - Added trigger.pl as replace.pl wont be maintained anymore
  - Updated replace.pl to 0.1.4 version
  - Added replace.pl URL in Source tag
  - Removed .packlist files
  - Added as doc a script to convert pref from replace.pl to trigger.pl


author: Ray Strode <rstrode@redhat.com> - 3.28.1-5
changelog:
  - Fix gnome-disk-utility timeout at startup
    Resolves: #1593215
  - add back session properties icons
    Related: #1568620


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-5
changelog:
  - Bump version to 1.3.8.4-5
  - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-4
changelog:
  - Bump version to 1.3.8.4-4
  - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans
  - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry
  - Resolves: Bug 1598718 - import fails if backend name is "default" 
  - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds
  - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS
  - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-3
changelog:
  - Bump version to 1.3.8.4-3
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-2
changelog:
  - Bump version to 1.3.8.4-2
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5.17
changelog:
  - Bump version to 1.3.7.5.17
  - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
  - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
  - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-16
changelog:
  - Bump version to 1.3.7.5-16
  - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-15
changelog:
  - Bump version to 1.3.7.5-15
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
  - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-14
changelog:
  - Bump version to 1.3.7.5-14
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-13
changelog:
  - Bump version to 1.3.7.5-13
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
  - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
  - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-12
changelog:
  - Bump version to 1.3.7.5-12
  - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
  - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
  - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
  - Resolves: Bug 1518287 - heap-use-after-free in csn_as
  - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
  - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
  - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-11
changelog:
  - Bump version to 1.3.7.5-11
  - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
  - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
  - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
  - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-10
changelog:
  - Bump version to 1.3.7.5-10
  - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
  - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
  - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
  - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
  - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
  - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
  - Resolves: Bug 1498980 - heap corruption during import
  - Resolves: Bug 1511462 - scope one searches give incorrect results
  - Resolves: Bug 1514033 - opened connection are hanging, no longer poll


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-8
changelog:
  - Bump version to 1.3.7.5-8
  - Resolves: Bug 1509016 - cleanallruv task is not logging any information


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-7
changelog:
  - Bump version to 1.3.7.5-7
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging
  - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV
  - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-6
changelog:
  - Bump version to 1.3.7.5-6
  - Resolves: Bug 1488836 - directory server fails to start because maxdisksize 
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv
  - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry
  - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-5
changelog:
  - Bump version to 1.3.7.5-5
  - Resolves: Bug 1476207 - Enabling instance service doesn't work 
  - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace
  - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured
  - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex 
  - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import
  - Resolves: Bug 1469567 - Activating roles returns error 16
  - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin
  - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
  - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-2
changelog:
  - Bump version to 1.3.7.5-2
  - specfile updates: add asan support, make nunc-stans default, and general cleanup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-6
changelog:
  - Bump version to 1.3.6.1-6
  - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages
  - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set
  - Resolves: bug 1397288 - typo in logconv.pl man page
  - Resolves: bug 1436994 - incorrect pathes in pkg-config files
  - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-5
changelog:
  - Bump version to 1.3.6.1-5
  - Resolves: bug 1377452 - Integer overflow in counters and monitor
  - Resolves: bug 1425907 - Harden password storage scheme
  - Resolves: bug 1431207 - ns-slapd killed by SIGABRT


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-4
changelog:
  - Bump version to 1.3.6.1-4
  - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init
  - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch
  - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch
  - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch
  - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch
  - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch
  - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch
  - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch
  - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors
  - Resolves: bug 1432206 - content sync plugin can hang server shutdown
  - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  - Release 1.3.5.10-1
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.9-1
changelog:
  - Release 1.3.5.9-1
  - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.8-1
changelog:
  - Release 1.3.5.8-1
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.7-1
changelog:
  - Release 1.3.5.7-1
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)
  - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354)
  - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636)
  - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234)
  - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833)
  - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862)
  - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275)
  - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336)
  - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747)
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752)
  - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854)
  - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844)
  - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834)
  - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - release 1.3.5.4-1
  - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828)
  - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - release 1.3.5.3-1
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815)
  - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822)
  - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS  (DS 48798)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.2-1
changelog:
  - release 1.3.5.2-1
  - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 
  - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757)
  - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777)
  - Resolves: bug 190862  - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142)
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548)
  - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285)
  - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332)
  - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016)
  - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129)
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280)
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951)
  - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326)
  - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289)
  - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244)
  - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290)
  - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: bug 1258610 - total update request must not be lost (DS 48255)
  - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258)
  - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269)
  - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267)
  - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295)
  - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294)
  - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299)
  - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302)
  - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT
  - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312)
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)
  - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394)
  - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840)
  - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328)
  - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339)
  - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341)
  - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344)
  - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363)
  - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362)
  - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)
  - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338)
  - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400)
  - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3]
  - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446)
  - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536)
  - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759)
  - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145)
  - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775)
  - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383)
  - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799)
  - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369)
  - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-9
changelog:
  - release 1.3.4.0-9
  - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215)
  - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232)
  - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-8
changelog:
  - release 1.3.4.0-8
  - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910)
  - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179)
  - Resolves: bug 1243970 -  In MMR, double free coould occur under some special condition (DS 48226)
  - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-7
changelog:
  - release 1.3.4.0-7
  - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203)
  - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-6
changelog:
  - release 1.3.4.0-6
  - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799)
  - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013)
  - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217)
  - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216)
  - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119)
  - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878)
  - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)
  - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-4
changelog:
  - release 1.3.4.0-4
  - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119)
  - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-3
changelog:
  - release 1.3.4.0-3
  - Resolves: bug 1228823 - async simple paged results issue (DS 48192)
  - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212)
  - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-2
changelog:
  - release 1.3.4.0-2
  - Resolves: bug 1235060 - Fix coverity issues 
  - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0-1 (rebase)
  - Enable nunc-stans for x86_64.
  - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640)
  - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669)
  - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801)
  - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927)
  - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957)
  - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526)
  - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)
  - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980)
  - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934)
  - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617)
  - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001)
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
  - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723)
  - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966)
  - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025)
  - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-19
changelog:
  - release 1.3.3.1-19
  - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-2
changelog:
  - release 1.3.3.1-2
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-1
changelog:
  - release 1.3.3.1-1
  - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync
  - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Resolves: bug 920597 - Possible to add invalid ACI value
  - Resolves: bug 921162 - Possible to add nonexistent target to ACI
  - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Resolves: bug 951754 - Self entry access ACI not working properly
  - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin
  - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1
  - Resolves: bug 966443 - Plugin library path validation
  - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme
  - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued
  - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env
  - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart
  - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config
  - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error
  - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly
  - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default
  - Resolves: bug 1024541 - start dirsrv after ntpd
  - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry
  - Resolves: bug 1031216 - add dbmon.sh
  - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Resolves: bug 1044135 - make connection buffer size adjustable
  - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD
  - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry
  - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls
  - Resolves: bug 1044140 - Allow search to look up 'in memory RUV'
  - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock
  - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Resolves: bug 1044144 - resurrected entry is not correctly indexed
  - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads
  - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute
  - Resolves: bug 1044148 - The backend name provided to bak2db is not validated
  - Resolves: bug 1044149 - Winsync should support range retrieval
  - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword
  - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Resolves: bug 1044153 - mods optimizer
  - Resolves: bug 1044154 - multi master replication allows schema violation
  - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations
  - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv
  - Resolves: bug 1044162 - enhance retro changelog
  - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog
  - Resolves: bug 1044164 - Password administrators should be able to violate password policy
  - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema
  - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable
  - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable
  - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Resolves: bug 1044173 - make referential integrity configuration more flexible
  - Resolves: bug 1044177 - allow configuring changelog trim interval
  - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Resolves: bug 1044180 - memberOf on a user is converted to lowercase
  - Resolves: bug 1044181 - report unindexed internal searches
  - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values
  - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Resolves: bug 1044188 - Recognize compressed log files
  - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS
  - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected.
  - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations
  - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset
  - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory
  - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area
  - Resolves: bug 1044205 - Allow memberOf to use an alternate config area
  - Resolves: bug 1044210 - idl switch does not work
  - Resolves: bug 1044211 - make old-idl tunable
  - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1044213 - backend performance - introduce optimization levels
  - Resolves: bug 1044215 - using transaction batchval violates durability
  - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information
  - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation
  - Resolves: bug 1049030 - Windows Sync group issues
  - Resolves: bug 1052751 - Page control does not work if effective rights control is specified
  - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN
  - Resolves: bug 1057803 - logconv errors when search has invalid bind dn
  - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction
  - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page.
  - Resolves: bug 1063990 - single valued attribute replicated ADD does not work
  - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate
  - Resolves: bug 1064986 - Replication retry time attributes cannot be added
  - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration
  - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart
  - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict
  - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Resolves: bug 1077897 - Memory leak with proxy auth control
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing
  - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution
  - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Resolves: bug 1086902 - mem leak in do_bind when there is an error
  - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors
  - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors
  - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list
  - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value.
  - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority
  - Resolves: bug 1097004 - Problem with deletion while replicated
  - Resolves: bug 1098654 - db2bak.pl error with changelogdb
  - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation
  - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=*
  - Resolves: bug 1108870 - ACI warnings in error log
  - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors
  - Resolves: bug 1108874 - logconv.pl memory continually grows
  - Resolves: bug 1108881 - rsearch filter error on any search filter
  - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication
  - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ?
  - Resolves: bug 1108909 - single valued attribute replicated ADD does not work
  - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs
  - Resolves: bug 1109339 - Nested tombstones become orphaned after purge
  - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Resolves: bug 1109357 - Coverity issue in 1.3.3
  - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage
  - Resolves: bug 1109375 - provide default syntax plugin
  - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service
  - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs
  - Resolves: bug 1113605 - server restart wipes out index config if there is a default index
  - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Resolves: bug 1117021 - Server deadlock if online import started while server is under load
  - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix.
  - Resolves: bug 1117979 - harden the list of ciphers available by default
  - Resolves: bug 1117981 - Fix various typos in manpages & code
  - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes
  - Resolves: bug 1118002 - server crashes deleting a replication agreement
  - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations
  - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request
  - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Resolves: bug 1118032 - Schema Replication Issue
  - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients
  - Resolves: bug 1118043 - Failed deletion of aci: no such attribute
  - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking
  - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions
  - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache
  - Resolves: bug 1118057 - online import crashes server if using verbose error logging
  - Resolves: bug 1118059 - add fixup-memberuid.pl script
  - Resolves: bug 1118060 - winsync plugin modify is broken
  - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees
  - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144
  - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages
  - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages
  - Resolves: bug 1118077 - Improve import logging and abort handling
  - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master
  - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value
  - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code
  - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result
  - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)

    Tue Mar 11 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-15
changelog:
  - release 1.3.1.6-15
  - Resolves: bug 918702 -  better error message when cache overflows (Ticket 342)
  - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516)
  - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620)
  - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408)
  - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-14
changelog:
  - release 1.3.1.6-14
  - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) 
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620)
  - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620)
  - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571)
  - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606)
  - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623)
  - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620)
  - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-12
changelog:
  - release 1.3.1.6-12
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620)
  - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592)
  - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614)
  - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591)
  - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596)
  - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599)
  - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598)
  - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597)
  - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587)
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-11
changelog:
  - Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  Ticket #28 	MOD operations with chained delete/add get back error 53 on backend config
  Ticket #173 	ds-logpipe.py script's man page and script help should be updated for -t option.
  Ticket #196 	RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  Ticket #218 	RFE - Make RIP working with Replicated Entries 
  Ticket #328 	make sure all internal search filters are properly escaped 
  Ticket #329 	389-admin build fails on F-18 with new apache 	
  Ticket #344 	deadlock in replica_write_ruv
  Ticket #351 	use betxn plugins by default
  Ticket #352 	make cos, roles, views betxn aware 
  Ticket #356 	logconv.pl - RFE - track bind info
  Ticket #365 	Audit log - clear text password in user changes 
  Ticket #370 	Opening merge qualifier CoS entry using RHDS console changes the entry. 
  Ticket #372 	Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing 	
  Ticket #386 	Overconsumption of memory with large cachememsize and heavy use of ldapmodify 	
  Ticket #402 	unhashedTicket #userTicket #password in entry extension 	
  Ticket #408 	Create a normalized dn cache 	
  Ticket #453 	db2index with -tattrname:type,type fails 	
  Ticket #461 	fix build problem with mozldap c sdk 	
  Ticket #462 	add test for include file mntent.h 	
  Ticket #463 	different parameters of getmntent in Solaris


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Kalev Lember <kalev@smartlink.ee> - 2.26.2-2
changelog:
  - Co-own /usr/share/gtk-doc/ directory (#604407)
  - Dropped pkgconfig dep from -devel subpackage which is now automatically added


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: Jon Ciesla <limburgher@gmail.com> - 0.50.2-1
changelog:
  - Latest stable release.
  - Merge review BZ 225902 fixes:
  - Removed Obsoletes/Provides for xml-i18n-tools.
  - Swapped gettext/gettext-devel Requires, BuildRequires.
  - Added %check section.


author: Alon Levy <alevy@redhat.com>
changelog:
  - Update to 0.50.0
  - Drop patch carried for bz#568845 (schemas-merge) per last comment
    in that bug.


author: Matthias Clasen <mclasen@redhat.com> - 0.36.0-1
changelog:
  - Update to 0.36.0
  - Update license field
  - Drop patch rejected, obsolete and upstreamed patches
  - Some spec file cleanups
  - Require automake


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 0.14
  - Try again on DBM fix
  - Patch to use AnyDBM_File rather than NDBM_File for caching
  - Version 0.14


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - Shorter summary
  - Remove empty post/postun scripts
  - Don't define name and ver on the top and use this in the headers later


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up files list so that there aren't non-standard dirs and so
    that it owns the xml-i18n-tools dir


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Joe Orton <jorton@redhat.com> 1.95.8-10
changelog:
  - remove trailing dot in Summary (#225742)
  - use preferred BuildRoot per packaging guidelines (#225742)


author: Joe Orton <jorton@redhat.com> 1.95.8-9
changelog:
  - regenerate configure/libtool correctly (#199361)
  - strip DSP files from examples (#186889)
  - fix expat.h compilation with g++ -pedantic (#190244)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-13
changelog:
  - Replace tomcat6 BR with servlet25 only
  - Cleanups according to new packaging guidelines
  - Install maven metadata for -api jar
  - Versionless jars/javadocs


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-12
changelog:
  - Add depmaps for api and adapters subpackages
  - Use apache-commons-parent BR instead of maven-*
  - Replace tomcat5 BR with tomcat6
  - Reenable tests


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-2
changelog:
  - Fix EOLs on docs
  - Create javadoc symlinks during install
  - Use version macro in Source0 URL, use _mavenpomdir macro


author: Christian Kellner <ckellner@redhat.com> - 0.7-1
changelog:
  - bolt 0.7 release with pre-bootacl support.
    Resolves: #1629713
  - Patch to fix a format string bug in the 0.7
  - Drop restricting-capabilities.patch (included in 0.7)
  - Patch to not use unsuppported unit file settings.
    Resolves: #1631050


author: Dennis Gilmore <dennis@ausil.us> - 1.0.10-2
changelog:
  - $supported_os and $JAVA_OS in configure do not always match 
  - on arches that override supported_os to be the arch we can not find headers


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.0.8-1
changelog:
  - Update to latest upstream (1.0.8)
  - Drop s390/ppc patches (upstream seems to already include them)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.0.5-1
changelog:
  - Update to latest version
  - Use maven 3 to build
  - Versionless jars & javadocs
  - Use apache-commons-parent for BR


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.0.2-1
changelog:
  - Rename and rebase to apache-commons-daemon
  - Get rid of gcj, native conditional compilation
  - Build with maven
  - Update patches to cleanly apply on new version, remove unneeded
  - Clean up whole spec


author: Sandro Mani <manisandro@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Fixes: CVE-2016-3183, CVE-2016-3181, CVE-2016-3182, CVE-2016-4796, CVE-2016-4797, CVE-2015-8871


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-4.svn20140403
changelog:
  - Replace define with global
  - Fix #define optional_components 1S typo
  - Fix %(pwd) -> $PWD for test data
  - Added some BR for optional components
  - Include opj2_jpip_viewer.jar in %files


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.svn20140403
changelog:
  - Remove thirdparty libraries folder in prep
  - Own %{_libdir}/openjpeg-2.0/
  - Fix Requires
  - Add missing ldconfig
  - Add possibility to run conformance tests if desired


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key


author: Than Ngo <than@redhat.com> - 3.11.0-1
changelog:
  - Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
  - Resolves: #1641027 - enhanced IBM z14 functions
  - Resolves: #1641026 - support m_*Single functions from ep11 lib
  - Resolves: #1641025 - rebase to 3.11.0
  - Resolves: #1519386 - use CPACF hashes in ep11 token
  - Resolves: #1373833 - lock file directory is %ghost now


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
  - Rebase to 3.10.0
  - Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
  - Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
  - Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Sinny Kumari <skumari@redhat.com> - 3.6.2-1
changelog:
  - Rebase opencryptoki to 3.6.2
  - Remove patches from spec file applied during 3.5 release
  - Resolves: #1391559, #1380784, #1417905


author: Sinny Kumari <skumari@redhat.com> - 3.5-6
changelog:
  - RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
  - RHBZ#1372188: fix illegal instruction on pkcscca tool


author: Jakub Jelen <jjelen@redhat.com> - 3.5-2
changelog:
  - icsf token does not validate data length for verify operation for ECDSA (#1344383)
  - Create lock and log directories from opencryptoki (#1343671)
  - Create log directory with appropriate permissions (#1185421)
  - Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
  - Fix for session handle not set in session issue (#1348804)
  - Fix memory leak in icsf specific code


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-3
changelog:
  - Few more issues reported by Coverity
  - Fix Segfault when trace in enabled in api_interface.c
  - Fix the misleading indentation
  - Fix memory leak by closing the lock file descriptor in C_Final


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-1
changelog:
  - New upstream release (#1185421)
  - Fix translating ICSF return code (#1306654)
  - Fix getObjectsize call for opencryptoki ICSF token (#1303839)
  - Fix for openCryptoki ICSF token failure (#1300194)


author: Petr Lautrbach <plautrba@redhat.com> 3.2-3
changelog:
  - Correctly declare OAEP parameter in RSA Wrap tests to prevent a possible
    scope issue (#1088512)
  - several fixes for pkcsep11_migrate


author: Dan Horák <dan[at]danny.cz> - 3.0-8
changelog:
  - include token specific directories (#1013017, #1045775, #1054442)
  - fix pkcsconf crash for non-root users (#1054661)
  - the libs subpackage must care of creating the pkcs11 group, it's the first to be installed
  - fix build with -Werror=format-security (#1037228)
  - Resolves: #1054442, #1054661


author: Dan Horák <dan[at]danny.cz> - 2.4.2-3
changelog:
  - add virtual opencryptoki(token) Provides to token modules and as Requires
    to main package (#904986)


author: Dan Horák <dan[at]danny.cz> - 2.4.1-1
changelog:
  - new upstream release 2.4.1
  - convert from initscript to systemd unit
  - import fixes from RHEL-6 about root's group membership (#732756, #730903)


author: Michal Schmidt <mschmidt@redhat.com> - 2.2.8-4
changelog:
  - Return support for crypto hw on s390.
  - Renamed to opencryptoki.
  - Simplified multilib by putting libs in subpackage as suggested by Dan Horák.


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
  - Add support for rsyslog $IncludeConfig directive (#971807)
  - Add support for filter definitions (#971807)
  - Various rsyslog compatibility fixes (#971807)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.8.0-4.20120315cvs
changelog:
  - Use latest upstream CVS (because of rsyslog support)
  - Build against sblim-cmpi-devel and instead of tog-pegasus-devel
  - Fix rsyslog support to work with systemd


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Don't run autoreconf and intltoolize in the spec file; the tarball should be
    good enough


author: Jan Tulak <jtulak@redhat.com> 0.4-9
changelog:
  - Fix unhandled exception for some locales set through LC_ALL (#1679591)
  - Fix ssm resize fails with python stack trace (#1654583)
  - Fix poor luks password throwing an error (#1141871)
  - Fix unable to list thinpools with the same name (#1619476)
  - Fix ssm list delay in detecting xfs growth (#1664652)
  - Fix exported lvm volumes issue
  - Send udev change events for btrfs operations and on all fs creations
  - Fix issues with partitions on loopback devices
  - Better error reporting for some situations


author: Lukas Czerner <lczerner@redhat.com> 0.4-6
changelog:
  - Fix listing of snapshots created by yum-fs-snapshot (#1094646)
  - Provide lvm thin provisioning support (#1115131)
  - Create mount point if it does not exist (#1134983)
  - Support percentage size argumetns (#1139263)
  - Fix bug when deleting inactive lv (#1142292)
  - Fix bug when listing empty dm tables (#1113584)


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Suppress backtrace when a command fails (#1054349)
  - Fix ssm to recognize units in new btrfs output properly (#1052327)
  - Use correct sysfs file to get size for a partition (#1053651)
  - Fix ssm to be able add a device with signature to btrfs file system (#1053741)
  - Resognize btrfs devices from new btrfs output properly (#1052330)


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
  - Remove btrfs resize support (#986116)
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend (#1012523)
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend (#1012518)
  - Allow to check btrfs volumes (#986105)
  - Fix error handling when trying to resize btrfs subvolume (#986111)
  - Fix ssm mount command so it detects directory properly


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: EL Errata <el-errata_ww@oracle.com> - 1.99.66.21-1.0.1
changelog:
  - Make sure version is output properly for OL6/7 [Orabug: 20440019]
  - Alter tools to recognize OL6 and OL7 version strings [Orabug: 20440019]
  - enable oracle linux handlers


author: David Cantrell <dcantrell@redhat.com> - 1.99.66.19-1
changelog:
  - Add use action to nvdimm command. (rvykydal)
    Resolves: rhbz#1590319
  - Add nvdimm command (rvykydal)
    Resolves: rhbz#1590319


author: Chris Lumens <clumens@redhat.com> - 1.99.66.18-1
changelog:
  - Add tests for the new firewall option. (clumens)
    Related: rhbz#1526486
  - Use RHEL7_Firewall instead of F28_Firewall. (clumens)
    Related: rhbz#1526486
  - Port the F20 firewall test from master. (clumens)
    Related: rhbz#1526486
  - firewall: add --use-system-defaults arg to command (dusty)
    Resolves: rhbz#1526486


author: Chris Lumens <clumens@redhat.com> - 1.99.66.15-1
changelog:
  - Fix import in the mount command (vponcova)
    Related: rhbz#1450922
  - Add a new 'mount' command (vpodzime)
    Related: rhbz#1450922


author: Chris Lumens <clumens@redhat.com> - 1.99.66.14-1
changelog:
  - Add timeout and retries options to %packages section (#1482912) (vponcova)
  - Add command hmc to support SE/HMC file access (#1498829) (vponcova)
  - Add tests for method command (vponcova)
  - Rewrite the method command. (vponcova)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.12-1
changelog:
  - Add documentation for the snapshot feature (jkonecny)
    Related: rhbz#1113207
  - Add tests for a new snapshot command (jkonecny)
    Related: rhbz#1113207
  - Add support of --when param to snapshot command (jkonecny)
    Related: rhbz#1113207
  - Add new snapshot KS command (jkonecny)
    Related: rhbz#1113207


author: Chris Lumens <clumens@redhat.com> - 1.99.66.11-1
changelog:
  - Document %traceback and %onerror. (clumens)
    Related: rhbz#1412538
  - Add an %onerror script section. (clumens)
    Related: rhbz#1412538
  - Add more test coverage around Group and Script objects. (clumens)
    Related: rhbz#1412538
  - Add --nohome option to autopart command. (#141) (vponcova)
    Related: rhbz#663099
  - Add --chunksize option to raid command. (#140) (vponcova)
    Related: rhbz#1332316


author: Chris Lumens <clumens@redhat.com> - 1.99.66.7-1
changelog:
  - Add sshkey command to RHEL7 (#1311755) (bcl)
  - Add --sshkey to sshpw command (#1240410) (bcl)
  - Add %pre-install section to be used after mounting filesystems (bcl)
  - There is no F7_Key class - use RHEL5_Key instead. (clumens)
  - ostree repos can only be HTTP or HTTPS. (clumens)
  - Fix class inheritance in RHEL6_VolGroup (ccoyle)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.5-1
changelog:
  - Reorder the expected output in the clearpart CDL test. (clumens)
  - Fix whitespace error in clearpart --cdl test (#1232849) (sbueno+anaconda)
  - Add clearpart --cdl option. (#1232849) (sbueno+anaconda)
  - Avoid polluting generated kickstarts by unexpected reqpart commands (#1164660) (mkolman)
  - Don't allow using --fsprofile and --mkfsopts at the same time. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.4-1
changelog:
  - transifex-client is no longer needed to build. (clumens)
  - Add kickstart docs to the source tree (clumens)
  - Add options for LVM cache specs to the 'logvol' command (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.3-1
changelog:
  - Add --mkfsoptions to btrfs, logvol, partition, and raid commands. (clumens)
  - Merge pull request #25 from bcl/rhel7-1207747 (clumens)
  - Allow skipping the errors on unknown sections. (#1180255) (sbueno+anaconda)
  - Add --kexec flag to reboot (#1207747) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.66.2-1
changelog:
  - Add rc-release Makefile target (bcl)
  - Add a new command to only make those partitions required by the platform. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.66-1
changelog:
  - network: add support for bridge to F22 (#1075195) (rvykydal)
  - Use GPLv2 in pykickstart.spec (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.65-1
changelog:
  - Add support for setting user account ssh key (bcl)
  - Add = to the output for various network options (#1171926). (clumens)
  - When ksflatten fails, return a failure code (#1162881). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.64-1
changelog:
  - Get rid of an unused variable. (clumens)
  - network: add support for bridge to RHEL7 (#1075195) (rvykydal)
  - Add new RHEL7 logvol objects to master (vpodzime)
  - Add new RHEL7 volgroup objects to master (vpodzime)
  - RHEL7 supports the ostreesetup command. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.63-1
changelog:
  - Move the test for --nombr option to the right class (vpodzime)
  - Add the --nombr bootloader option in pykickstart (gczarcinski)


author: Chris Lumens <clumens@redhat.com> - 1.99.62-1
changelog:
  - Allow recommended flag for non-prexisting logical volumes (#1149718) (amulhern)
  - Apply a couple more 2to3 fixes, still avoiding the hard ones.(#985310). (clumens)
  - Apply the obvious easy changes from 2to3 (#985310). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.61-1
changelog:
  - Add support for specifying thin pool profile (vpodzime)
  - Add missing import (mkolman)
  - Add tests for --interfacename validation (mkolman)
  - Validate network interface name when parsing the kickstart (#1081982) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.60-1
changelog:
  - Make --size and --percent mutually exclusive in logvol. (dlehman)
  - Add support for F22. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.59-1
changelog:
  - Some tests for --size and --percent (#1117908) (amulhern)
  - Update tests where necessary with --size flag (#1117908) (amulhern)
  - Supply regex values for assert_parse_error calls in logvol.py (#1117908) (amulhern)
  - Check the regular expression when asserting a parse error (#1117908) (amulhern)
  - Do not reference non-existant attribute (#1117908) (amulhern)
  - Move some statically detectable kickstart errors out of anaconda (#1117908) (amulhern)
  - Remove --disable-override from tx arguments. (clumens)
  - Add the bootloader --disabled option for RHEL7 as well. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.57-1
changelog:
  - Replace python-setuptools-devel BR with python-setuptools (toshio). (clumens)
  - Add autopart --fstype support (#1112697) (bcl)
  - Add some more tests to bump up the "make coverage" numbers. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.56-1
changelog:
  - Add support for --disklabel to clearpart (#1078537) (bcl)
  - Make print statements Python 3 compatible (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.55-1
changelog:
  - Do not set any magic default PE size in pykickstart (vpodzime)
  - ostreesetup: Fix noGpg attribute (walters)
  - Fix bogus changelog in pykickstart.spec (sagarun)
  - Stop shipping a ChangeLog file. (clumens)
  - We can use descriptive pylint message names on the command line, too. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.54-1
changelog:
  - Move ks tools from optparse to argparse (#1083913). (clumens)
  - Use descriptive pylint messages instead of numbers. (clumens)
  - Fix up some printing problems in some of the tools. (clumens)
  - Add support for the --listversions option to ksverdiff too. (clumens)
  - Run pylint on tools/, and fix up all the errors. (clumens)
  - disable-msg -> disable for pylint. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.53-1
changelog:
  - ostreesetup: New command (walters)
  - Move commandMap and dataMap setting into the individual handler classes. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.52-1
changelog:
  - Take care of all the unused argument warnings. (clumens)
  - Take care of all the unused variable warnings. (clumens)
  - Remove unused imports. (clumens)
  - Don't do relative import any more, either. (clumens)
  - Stop doing wildcard imports. (clumens)
  - Add an option to disable even installing the core group. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.51-1
changelog:
  - Use the correct indentation for the new network stuff. (clumens)
  - Add network --interfacename option for vlans (#1061646) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.50-1
changelog:
  - Add a new bootloader --disabled option (#1074522). (clumens)
  - Add support for F21. (clumens)
  - Fix an error on the printing side of handling environments. (clumens)
  - Add support for fcoe --autovlan option (#1055779) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.49-1
changelog:
  - Provide syntax for specifying environments (#1061296). (clumens)
  - Use the correct LogVolData object (#1058520). (clumens)
  - Don't do string comparisons in "make test" (#1057573). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.48-1
changelog:
  - Specify a kickstart version when running package-related tests. (clumens)
  - We need python-urlgrabber to do builds now. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.47-1
changelog:
  - Add missing version bumps for RHEL7 command control map (#1032738) (mkolman)
  - Run "make test" as part of the RPM build process (#1025226). (clumens)
  - Include test cases in the source distribution. (clumens)
  - With the previous patch, RAID test formatting needs to change. (clumens)
  - Do not add a list of PVs or RAID members when writing out --useexisting (#1021274). (clumens)
  - Raise an error if bootloader --boot-drive gets more than one argument. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.46-1
changelog:
  - Add support for network team devices (#1003591) (rvykydal)
  - Work on test coverage a little bit. (clumens)
  - Don't use OrderedDict. (clumens)
  - Add tests for tmpfs usage (mkolman)
  - Add tmpfs support (#918621) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.42-1
changelog:
  - Remove a triple-X message that is no longer needed (mkolman)
  - Add --remove-service option for the firewall command (#1016008) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.39-1
changelog:
  - Call the right attribute method (#1004889) (bcl)
  - Reset method seen attrs when switching method (#1004889) (bcl)


author: Brian C. Lane <bcl@redhat.com> - 1.99.38-1
changelog:
  - Return None for attributes if no method has been set (#1001081) (dshea)
  - Fix up a couple pylint errors in the tools. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.37-1
changelog:
  - Correct exception raising style. (clumens)
  - Fix up how we call pylint for 1.0.0. (clumens)
  - Set method.method when attempted. (dshea)


author: Chris Lumens <clumens@redhat.com> - 1.99.36-1
changelog:
  - When method.method is set, also set the right seen attribute (#994553). (clumens)
  - Add tests for incorrect command usage detection (mkolman)
  - Add class for independent multi-line command sequence tests (mkolman)
  - Raise an error if autopart is combined with partitioning commands (#886010) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.99.35-1
changelog:
  - Add aliases for all the old method classes (#986069). (clumens)
  - Check syntax version before issuing a deprecation warning (#972098). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.34-1
changelog:
  - Always create self.handler on-demand in the test cases. (clumens)
  - Also set the seen attribute when __call__ is used. (clumens)
  - Mark the upgrade command as deprecated. (clumens)
  - Add the method test case back in. (clumens)
  - Set the seen attribute when parsing in test cases, too. (clumens)
  - Add a proxy method command object. (clumens)
  - Add an interactive kickstart shell command, ksshell. (clumens)
  - Fix string substitution errors in translatable text. (clumens)
  - Break the method command out into individual commands. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.33-1
changelog:
  - Add support for lvm thin provisioning. (dlehman)
  - Add support for F20. (clumens)
  - Add a new test for the group command. (clumens)
  - In the test cases, error on all non-deprecation warnings. (clumens)
  - Remove unused imports from the test suite. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.32-1
changelog:
  - transifex.net is now transifex.com (bcl)
  - Update raid --device to be an array name specifier. (dlehman)
  - Add more tests for the realm command (mkolman)
  - RHEL7 is now more or less based on F19, at least for kickstart. (clumens)
  - realm: Fix --no-password option (stefw)
  - Add man pages for all programs (#948440). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.28-1
changelog:
  - Add network --ipv6gateway option (#905226) (rvykydal)
  - Add lang --addsupport option (#912364) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.26-1
changelog:
  - parser.py: Allow shlex to strip lines (fedora.dm0)
  - Fix a bug in logvol duplicate reporting (#924579, mhuth). (clumens)
  - Add gid attribute to User command and associated data structure (msivak)
  - Make sure tests can run and report import errors (bcl)
  - Add network --vlanid option to Fedora. (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.25-1
changelog:
  - pylint appears to have gotten pickier. (clumens)
  - Fix typo in --wpakey string representation method (rvykydal)
  - Also add the F19 handler file. (clumens)
  - Don't strip the newline from reboot or shutdown commands (#915013). (clumens)
  - Add bonding support to RHEL 7 (rvykydal)
  - Add bonding support to F19 (rvykydal)
  - Add support for F19 (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.23-1
changelog:
  - Don't print any of the autopart command if autopart is disabled (#888841). (clumens)
  - Call sys.exit instead of os._exit (#891419, gconradi AT factset.com). (clumens)
  - Beware of possible unicode strings (#876293) (vpodzime)
  - Remove the lang.apply method (#882186). (clumens)
  - Add 'make coverage' command to the make file (stefw)


author: Chris Lumens <clumens@redhat.com> - 1.99.22-1
changelog:
  - Add support for url --mirrorlist, needed by anaconda (#868558). (clumens)
  - Only write out a logging line if one was provided (#873242). (clumens)
  - If no timezone was provided, do not write out an empty timezone command. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.20-1
changelog:
  - Disable pylint warnings related to the previous patch. (clumens)
  - Revert "Fix superclass constructor call in F18_Keyboard." (clumens)
  - Fix superclass constructor call in F18_Keyboard. (dlehman)
  - Add cipher option for encrypting block devices. (dlehman)
  - Change keyboard command to accept VConsole keymap and X layouts (vpodzime)
  - add unsupported_hardware command (#824963) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.19-1
changelog:
  - bonding support: add network --bondslaves --bondopts options (rvykydal)
  - vlan support: add network --vlanid option. (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.18-1
changelog:
  - Fix the multilib package test case. (clumens)
  - Add support for --multilib option to %packages. (dlehman)
  - Mark --nobase as deprecated. (notting)


author: Chris Lumens <clumens@redhat.com> - 1.99.14-1
changelog:
  - add reboot test (bcl)
  - add correct halt command handling (bcl)
  - return parsed object from assert_parse (bcl)
  - The monitor command has been deprecated since F10.  Get rid of it. (clumens)
  - Add --hibernation option for swap size specification (vpodzime)
  - Add leavebootorder test (hamzy)


author: Chris Lumens <clumens@redhat.com> - 1.99.13-1
changelog:
  - Support bootloader --leavebootorder for F18 and RHEL7 (#824801) (pjones)
  - Allow %include in %pre and %post (#827269) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.99.12-1
changelog:
  - Add --nontp option and a way to specify NTP servers to the timezone command (vpodzime)
  - fix TypeError in network.py with ipv6 static addresses (wwoods)
  - Layouts may include spaces, so put them in quotes (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.99.11-1
changelog:
  - pylint doesn't like .setter syntax at all. (clumens)
  - Modify keyboard command to handle multiple layouts (vpodzime)
  - Add support for F18. (vpodzime)
  - Fix traceback if modules cannot be loaded when running tests (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.99.10-1
changelog:
  - Add resize option to partition and logvol commands. (dlehman)
  - Add --list= mode to clearpart for explicit list of partitions to remove. (dlehman)


author: Chris Lumens <clumens@redhat.com> - 1.99.9-1
changelog:
  - Add __ne__ methods to every object with an __eq__ method. (clumens)
  - Use the older exception syntax for python 2.4 compatibility. (clumens)
  - Add an __eq__ method to the method command. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.8-1
changelog:
  - Add support for RHEL7 (#802369).
  - Add a method to set a command back to its initial blank state.
  - btrfs likes its raid levels in lower case. (#799154) (dlehman)
  - iscsi: add support for interface binding to F17 (rvykydal)
  - iscsi: add support for interface binding (#500273) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.99.6-1
changelog:
  - Add --boot-drive option to bootloader command to pick boot drive. (dlehman)
  - Add support for F17. (clumens)
  - The guts of a script could include a line starting with a % (#746928). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.5-1
changelog:
  - Don't error out if raid --useexisting is given with no members (#741728). (clumens)
  - When %end is missing, include the unterminated section in the error message. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.4-1
changelog:
  - --reserved-space and --reserved-percent should be checked on a callback. (clumens)
  - Add a volgroup unit test, and fix a bug it uncovered. (clumens)
  - Add support for reserved space in volume group. (dlehman)
  - Allow a %include to come in the middle of a section (#733455). (clumens)
  - Add a test case for %include inside %packages. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.3-1
changelog:
  - Ignore reimport warnings. (clumens)
  - Add support for 'autopart --nolvm' (jlaska)
  - autopart - Inherit error checking from base class (jlaska)
  - Let's just use url.size instead.  That's defined for both FTP and HTTP. (clumens)
  - It's url.hdr now, not url.info. (clumens)
  - Support end-of-line comments in the %packages section (#728563). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.99.1-1
changelog:
  - Fix a couple Makefile typos. (clumens)
  - typo fix (vpodzime)
  - option for wpa wifi connection specification added (vpodzime)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Add transifex-client configuration file. (clumens)
  - Fix po files so "msgfmt -c" passes and they can be uploaded to transifex. (clumens)


author: Chris Lumens <clumens@redhat.com> 1.99.0-1
changelog:
  - Add a way to tell how often a section has been handled. (clumens)
  - Add a NullSection that just ignores any section provided. (clumens)
  - Add test cases for the parser itself. (clumens)
  - Allow for defining your own kickstart %sections. (clumens)
  - The docs need to be fetched from an HTTPS location now. (clumens)
  - Write out --onboot=off if it's False. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.83-1
changelog:
  - Add kickstart network --nodefroute option (#668417) (rvykydal)
  - Add support for network --bootproto ibft option (#668417) (rvykydal)
  - Add network --activate option (#668417) (rvykydal)
  - Add support for F16. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.81-1
changelog:
  - Add support for "raid --label=" (#670643). (clumens)
  - --baseurl/--mirrorlist are no longer required for the repo command. (clumens)
  - Make use of the "interactive" command an error. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.80-1
changelog:
  - Remove preceededInclude= support (#639372). (clumens)
  - support noverifyssl on the rhel6-branch (method, repo) (#660340). (akozumpl)
  - l10n: Added Low German translation (ncfiedler)


author: Chris Lumens <clumens@redhat.com> 1.79-1
changelog:
  - Move from pychecker to pylint, since the latter actually works.
  - Lots of minor corrections for pylint.
  - Add bootloader --iscrypted (#554870).
  - Add support for F15.


author: Chris Lumens <clumens@redhat.com> - 1.78-1
changelog:
  - Raise KickstartError instead of IOError (#618002). (clumens)
  - It's --biospart, not --biosdisk (#620855). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 1.77-1
changelog:
  - Send the key command down the memory hole. (clumens)
  - Deprecate interactive kickstart mode. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.76-1
changelog:
  - method: new parameter '--noverifyssl' after --url. (akozumpl)
  - repo: new parameter '--noverifyssl'. (akozumpl)


author: Chris Lumens <clumens@redhat.com> - 1.75-1
changelog:
  - Update translation files. (clumens)
  - Remove everything from pykickstart that's been deprecated forever. (clumens)
  - Using the knowledge of what command supports what option, condense test cases. (clumens)
  - Add a method to list all supported options for a command being tested. (clumens)
  - Add support for F14. (clumens)
  - The %end at the end of a section is now required. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74-1
changelog:
  - If an option is deprecated, do not care if it takes a value (#602303). (clumens)
  - Don't compare the dest ("telnet") with the option string ("--telnet"). (clumens)
  - The --connect= parameter wasn't really deprecated in FC6. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.71-1
changelog:
  - Don't overwrite the excluded group list after every %packages line (#577334). (clumens)
  - Add a bunch of test cases for the packages section. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.69-1
changelog:
  - Add driverdisk --biospart= (#570437). (clumens)
  - Fix IOError catching in ksflatten (jgregusk, #558650).


author: Chris Lumens <clumens@redhat.com> - 1.68-1
changelog:
  - Support removing groups that were included by a glob (#554717). (clumens)
  - Make sure that everything in version.versionMap has a handler. (clumens)
  - Add support for RHEL6 (#552230). (clumens)
  - Don't consider RHEL versions as developmental even if they're latest. (clumens)
  - Add lineno to BaseData and derived classes (version 2) (hdegoede)
  - Give the non mandatory iscsi --port argument a sane default (hdegoede)
  - Change python_sitelib macro to use %global for new rpm (hdegoede)
  - Fix typo in iscsi parsing error message (hdegoede)


author: Chris Lumens <clumens@redhat.com> - 1.67-1
changelog:
  - Don't use action="append_const" in firewall.py.
  - Make "make archive" depend on test and check passing again.
  - versionToString now works in all cases we test for.
  - Fix the few pychecker errors outstanding in options.py.
  - Fix make docs to make docs dir before trying to download files there (hdegoede)


author: Hans de Goede <hdgoede@redhat.com> - 1.66-1
changelog:
  - Add --dcb option to fcoe command (#513011)
  - Remove rhpl from tests
  - Port bootloader --hvargs option added in rhel5
  - Ignore comments when looking for %ksappend lines (#525676)
  - Use python 2.x exception syntax


author: Chris Lumens <clumens@redhat.com> - 1.65-1
changelog:
  - Add additional arguments to BaseHandler.__init__ for better map control.
  - Return the KickstartCommand/KickstartData object from dispatcher.
  - Add an "sshpw" command for changing the passwords in anaconda's env.
  - Add --proxy support to the url and repo commands.
  - Add support for F13.  Is it really that time already?


author: Chris Lumens <clumens@redhat.com> - 1.63-1
changelog:
  - Add encryption key escrow support (mitr, #508963).
  - Fix the repo test cases to expect quotes around the repo's name.


author: Chris Lumens <clumens@redhat.com> - 1.62-1
changelog:
  - Support translated help text in optparse (#479519).
  - If the input kickstart file cannot be read, raise IOError (#519477).


author: Chris Lumens <clumens@redhat.com> - 1.60-1
changelog:
  - Put quotes around the repo's name (Marc.Herbert@gmail.com).
  - Make duplicate entries warnings, not errors (#516338).


author: Chris Lumens <clumens@redhat.com> - 1.59-1
changelog:
  - Handle a few more places where a urlgrabber error could happen (#512951).
  - Error out if the same partition/repo/network is defined twice (#512956).
  - Call parent class tests first. (jlaska)
  - Add KSOptionParser to FC3 upgrade command. (jlaska)
  - Correct missing return stmt in _getArgsAsStr() (jlaska)


author: Chris Lumens <clumens@redhat.com> - 1.58-1
changelog:
  - Adjust writePriority to fix lvm-on-raid0 test cases (jlaska).
  - Add F12 to the version number tests. (clumens)
  - F12_User test case. (dcantrell)
  - Add --gecos argument to the 'user' command (dcantrell)
  - Convert user.py to use _getArgsAsStr() (dcantrell)


author: Chris Lumens <clumens@redhat.com> - 1.56-1
changelog:
  - Make sure to import the gettext stuff in fcoe. (clumens)
  - Correctly deprecate bootloader --lba32 (jlaska).
  - pykickstart: fix zfcp command writepriority (hdegoede)
  - pykickstart: Add fcoe command (take 2) (hdegoede)
  - Add a test case for RAID (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.55-1
changelog:
  - Add support for the group command to F12 (#509119).
  - RHEL5 now supports RAID 10.
  - The f12 hander class should be called F12Handler. (jgranado)
  - Remove bootloader --lba32.
  - Add a new version of the driverdisk command without --type=.
  - Add initial support for F12.
  - Fetch the programmers-guide from the wiki now.


author: Chris Lumens <clumens@redhat.com> - 1.53-1
changelog:
  - Move lineno= from KSOptionParser.__init__ to parse_args (#497149). (clumens)
  - Use the F11 version of the partition command. (clumens)
  - Remove the --start and --end options since anaconda no longer uses them. (clumens)
  - Remove a broken test case. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.52-1
changelog:
  - Add lots more test cases (alindebe, mgracik, stickster).
  - Add a skip attribute on key to shut up pychecker.
  - Only show autostep command when requested (jlaska)
  - Strip spaces from service names, and require an option to be provided.
  - Surround services lists in double quotes.
  - Remove the extra space from the services __str__ method.
  - Fix output formatting bugs in firewall, partition, and repo (mgracik).
  - Specifying both or neither of --drives and --only-use should be an error.
  - Corrected newline char in return value of FC6_Method. (mgracik)
  - Make --drives a required option for FC3, and catch no args on F8.
  - Fix final printing of the rescue command (mgracik).
  - Surround output strings in double quotes.
  - Fix a typo in the deviceprobe command.
  - Revert the more strict option processing on displaymode.
  - Properly handle erroring on extra args, not just extra options.
  - Don't use the logging class since it interferes with the logging test.
  - port without host should raise KickstartParseError, not kickstartValueError.
  - Add the --key option to option processing, since it's a valid argument.
  - Fix test cases that were failing due to the new use of KSOptionParser.
  - Teach driverdisk.py command to reject extra partitions (stickster).
  - Add KSOptionParser to all commands ... enables more strick option checking (jlaska).
  - Use KSOptionParser so we can catch bad command options (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.51-1
changelog:
  - Make a couple changes to how the logging command is handled.
  - Add a lot of test cases (clumens, alindebe, jlaska, fcami, adamwill, pfrields).
  - Fix output formatting for the rootpw command.
  - For commands that take exactly one argument, check and error correctly.
  - Surround module options in quotes on the output side (jlaska).
  - Set module opts in the FC3 handler correctly.
  - Fix newlines on the device command output (jlaska).
  - If --autoscreenshot is not specified, still output "autostep".
  - Move the currentCmd and currentLine into getParser(). (jlaska)
  - Write out an selinux line if set to disabled, but not if None.
  - F9_LogVolData should inherit from FC4_LogVolData, not FC3_LogVolData (jlaska).
  - Add unittest framework along with logvol and vnc unittests. (jlaska)
  - Don't set the KSOption.required attribute in the constructor (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.50-1
changelog:
  - Add a script to diff two versions of kickstart syntax.
  - Add an option to ksvalidator to list all available syntax versions.
  - Remove a couple extra newlines in output formatting.
  - Add documentation for the new %include representation.
  - Add support %include to the pykickstart data objects.


author: Chris Lumens <clumens@redhat.com> - 1.49-1
changelog:
  - Add upgrade --root-device (atodorov, #471232).
  - Use python's builtin set rather than the Sets module (#477836, dcantrell).


author: Chris Lumens <clumens@redhat.com> - 1.48-1
changelog:
  - Allow ignoring group metadata from repos, using a '--ignoregroups'
    boolean. (notting)
  - Add initial support for F11.
  - Specify the command versions in the handlers instead of making copies.
  - Remove empty and pointless __init__ methods.
  - Pass arguments to superclasses via *args and **kwargs, all the way up.
  - Add removedKeywords and removedAttrs lists on Commands and Data.
  - Fix version regexes to handle double digits and minor releases (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.43-1
changelog:
  - Revert "Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg." (dlehman)
  - yum doesn't like when mirrorlist is "". (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.42-1
changelog:
  - Add rescue command to pykickstart (atodorov)
  - Sort %packages output (katzj)
  - Fix a typo (atodorov).


author: Chris Lumens <clumens@redhat.com> - 1.41-1
changelog:
  - RHEL5 supports ignoredisk --only-use now too. (clumens)
  - Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg. (dlehman)
  - Fix F9,F10,RHEL5 "part" commands to use the same class as
    "partition". (dlehman)
  - Add an apply method() for commands and implement for lang (katzj)


author: Chris Lumens <clumens@redhat.com> - 1.40-1
changelog:
  - RHEL5_LogVolData should inherit from FC4, not FC3.
    Also fix FC9->F9 typo. (dlehman)
  - Support creation of encrypted block devices in RHEL5. (#449830) (dlehman)
  - Use the right LogVolData objects for RHEL3 and 4 (jlaska). (clumens)
  - We no longer use rhpl for translations. (clumens)
  - All the base classes should derive from object. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.35-1
changelog:
  - Bring driverdisk command in line with the docs. (clumens)
  - Change RAID command print priorities (jlaska).
  - According to docs, physvols are space delimited. (jlaska)
  - Don't write the label out twice (jlaska).
  - Deprecate monitor and xconfig commands. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.34-1
changelog:
  - Load the handler module automatically. (clumens)
  - Add support for F10. (clumens)
  - Initialize cmd.handler earlier; fixes repo.methodToRepo() (markmc)
  - Don't shadow builtin function names. (clumens)
  - Running check is now required before pykickstart can be packaged. (clumens)
  - Reorganize code a little bit to pass pychecker. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.33-1
changelog:
  - Fix whitespace when printing out the bootloader command (pmeyers).
  - Fix the type on bootloader --timeout processing. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.32-1
changelog:
  - Make the string reader act like the file reader upon EOF. (clumens)
  - Add syntax for encrypted logical volumes. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.30-1
changelog:
  - Reverse writePriorities of iscsi and iscsname (#434965, jlaska).
  - Fix printing of iscsiname command (#434945, jlaska).
  - Don't traceback on ENOENT. (pnasrat)
  - Store the mouse name as a string, not a list. (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 1.25-1
changelog:
  - Add the version to the output ks file. (clumens)
  - Add syntax for encrypted partitions and raid devices. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.24-1
changelog:
  - Make inheritance and overriding of %packages work (#427768). (clumens)
  - Add an option for which languages should be installed. (katzj)
  - Use the right name for the iscsi --target variable (#418781). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.23-1
changelog:
  - Take Makefile improvements from anaconda.
  - Fix a traceback on F9 zerombr command (#395431).
  - Update to handle new Python eggs packaging.


author: Chris Lumens <clumens@redhat.com> 1.22-1
changelog:
  - Don't process or write out vnc --enabled (jlaska AT redhat DOT com).
  - Fix a traceback in the clearpart command.


author: Chris Lumens <clumens@redhat.com> 1.20-1
changelog:
  - Pull wiki docs from the new location.
  - Fix error messages for options that have been removed after having been
    previously deprecated.
  - zerombr no longer takes any arguments.
  - %packages --ignoredeps --resolvedeps have been removed.
  - firewall --high --medium have been removed.
  - vnc --connect has been removed.
  - xconfig options from monitor have now been removed.
  - --bytes-per-inode has been marked as deprecated.
  - Fix typos.
  - Add --fsprofile option to disk commands (pjones).
  - Add F9 support (pjones).
  - Lots of internal fixes (clumens, pjones).


author: Chris Lumens <clumens@redhat.com> 1.18-1
changelog:
  - Don't write out %end to packages and scripts if the syntax version doesn't
    support it.
  - Remove obsolete translation (#332221).


author: Chris Lumens <clumens@redhat.com> 1.16-1
changelog:
  - Undeprecate %packages --excludedocs.
  - Fix a traceback in the device command handling.
  - Add bootloader --timeout (katzj).


author: Chris Lumens <clumens@redhat.com> 1.14-1
changelog:
  - Fix output formatting for packages section header (#310211).
  - Add a script to flatten kickstart files containing includes (katzj).


author: Chris Lumens <clumens@redhat.com> 1.13-1
changelog:
  - Add a function to convert URL method strings into repo objects
    (jkeating).
  - Writer formatting fixes.
  - Add kickstart documentation from the Fedora Wiki.


author: Chris Lumens <clumens@redhat.com> 1.12-1
changelog:
  - Fix lots of problems in processing the bootloader, device, network, and
    raid commands.
  - Add %end when writing out scripts and packages.
  - Add a makefile target to run pychecker to cut down on errors in
    releases.


author: Chris Lumens <clumens@redhat.com> 1.9-1
changelog:
  - Add support for the %end directive to be placed at the end of scripts
    and packages sections.  Deprecate old syntax.
  - Clean up after ksvalidator if pykickstart issues a traceback.
  - Add support for repo --priority --includepkgs --excludepkgs.
  - Fix newline at end of reboot --eject output (#253562).


author: Chris Lumens <clumens@redhat.com> 1.7-1
changelog:
  - Clarify license in spec file and all source files.
  - Check string values to options to make sure they're not other options
    (#251318).


author: Chris Lumens <clumens@redhat.com> - 1.2-1
changelog:
  - Fix harddrive install method error checking (#232492).
  - Set authentication information from the input line to preserve quoting
    (#241657).
  - Allow included files to be given by URL.
  - Fix typo in user --iscrypted option.


author: Chris Lumens <clumens@redhat.com> - 1.1-1
changelog:
  - Better regexes for splitting version strings into family and version.
  - Add basic support for RHEL3.
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 0.100-1
changelog:
  - bootloader should be written out after upgrade/install.
  - Treat class names as unicode strings (#231053).


author: Chris Lumens <clumens@redhat.com> - 0.99-1
changelog:
  - The timezone command didn't recognize --isUtc before FC6 (#231189).
  - Recognize %ksappend lines in ksvalidator.
  - Don't set default values in some command __init__ methods.
  - Added an updates command.
  - Add support for RAID10.


author: Chris Lumens <clumens@redhat.com> - 0.96-1
changelog:
  - Fix __str__ methods for langsupport and reboot commands.
  - Renamed BaseHandler.empty to BaseHandler.maskAllExcept.
  - Split command objects out into their own files in commands/.
  - Rename command objects to start with Version_.
  - Support extended group selection syntax.


author: Chris Lumens <clumens@redhat.com> - 0.95-1
changelog:
  - KickstartParser no longer takes a version argument.
  - Be more lenient in what strings stringToVersion accepts.
  - Allow setting state on one data object from multiple files.


author: Chris Lumens <clumens@redhat.com> - 0.94-1
changelog:
  - Add a newline to the end of the key command output.
  - Use network bootproto constants (#197694).
  - Fix tracebacks in subclass __str__ methods (#226734).


author: Chris Lumens <clumens@redhat.com> - 0.93-1
changelog:
  - Add support for FC3, RHEL4, and RHEL5.
  - The key command was not supported until after FC6.
  - Accept more strings in stringToVersion.


author: Chris Lumens <clumens@redhat.com> - 0.92-1
changelog:
  - Fix KickstartVersionError reporting.
  - Add a version attribute to handler objects.
  - Fix line number reporting on lots of commands.
  - Add initial support for Fedora 7 and remove deprecated commands.
  - Accept a --default argument to the %packages header (#221305).


author: Chris Lumens <clumens@redhat.com> - 0.90-1
changelog:
  - Support multiple versions of kickstart syntax from one code base
    (#189348).
  - Fix inconsistency between Script parser and writer (#222877).


author: Chris Lumens <clumens@redhat.com> 0.31-1
changelog:
  - Handle nfs --opts (katzj).
  - RAID devices should be integers instead of strings (#176537).
  - Add initial support for iscsi (katzj).


author: Chris Lumens <clumens@redhat.com> 0.30-2
changelog:
  - Add BuildRequires to fix building under mock (#194156,  Joost Soeterbroek
    <fedora AT soeterbroek.com>).


author: Chris Lumens <clumens@redhat.com> 0.30-1
changelog:
  - Change order of LVM-related writing functions (#193073).
  - Require urlgrabber.
  - Return a more useful error message on unknown commands.
  - Fix logvol writing typo.
  - Make ksvalidator validate from a URL in addition to a file.
  - Don't write out an empty packages section (#192851).


author: Chris Lumens <clumens@redhat.com> 0.26-1
changelog:
  - Ignore spaces before group names (#188095).
  - Added some translations.
  - Add options for repo command.
  - Reorder %packages section output.
  - Output %packages header options.
  - Initialize RAID and volume group members to empty lists.


author: Chris Lumens <clumens@redhat.com> 0.24-1
changelog:
  - Don't write out a blank xconfig line.
  - Reorder output handlers to group like commands together.
  - Mark strings for translation.


author: Chris Lumens <clumens@redhat.com> 0.21-1
changelog:
  - Provide an option to not traceback on missing include files (#181760).
  - Update programming documentation.


author: Chris Lumens <clumens@redhat.com> 0.18-1
changelog:
  - Fix some errors pychecker caught.
  - Allow exceptions to not be fatal so ksvalidator can spot more errors in
    a single pass (#179894).


author: Chris Lumens <clumens@redhat.com> 0.13-1
changelog:
  - Recognize the --eject parameter to shutdown/halt.
  - Store the exact post-installation action in ksdata.


author: Chris Lumens <clumens@redhat.com> 0.8-1
changelog:
  - Default to SELINUX_ENFORCING.
  - Default partition sizes to None for anaconda (#172378).
  - Don't call shlex.split on anything inside a script (#172313).


author: Chris Lumens <clumens@redhat.com> 0.7-1
changelog:
  - Fix clearpart --all.
  - vnc command does not require --connect option (#172192).
  - network --onboot does not take any option.
  - Remove extra spaces from firewall --ports and --trust.
  - Write out network --<service> options.


author: Chris Lumens <clumens@redhat.com> 0.3-1
changelog:
  - Add a deprecated attribute to options.
  - Add --card option back to xconfig and mark as deprecated.
  - Throw a deprecation warning on mouse and langsupport commands.
  - Rename Writer to KickstartWriter for consistency.
  - Collapse scripts into a single list and add an attribute on Script to
    differentiate.


author: Chris Lumens <clumens@redhat.com> 0.2-1
changelog:
  - Rename module to pykickstart to avoid conflicts in anaconda.
  - Rename data classes for consistency.
  - Add default bytesPerInode settings.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.16-12
changelog:
  - Build with XMvn
  - Remove system-scoped dependency on tools.jar
  - Update to current packaging guidelines


author: Jerry James <loganjerry@gmail.com> - 0.9.5-3
changelog:
  - Fix unowned directory (bz 473635)
  - Drop unnecessary BuildRequires
  - Replace patches with addition of -fPIC to CFLAGS in the spec file
  - Add some more documentation files


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.3-4
changelog:
  - Ship double scaled latarcyrheb console font for high resolution screens
    (created by Tom Horsley)
    Resolves: #617768


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.2-1
changelog:
  - Update to kbd-1.15.2 (removed kbd-1.15-quiet_doc.patch and romanian keymaps, both are
    part of the upstream tarball now)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-28
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #253892


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-26
changelog:
  - Fix ro.map to generate right unicode for s, S, t, T with comma
  - Fix LatArCyrHeb-16 unicode mapping table to show comma-version
    of s, S, t, T and cedilla-version of s, S, t, T as the same glyph
    (because there is no font in kbd for comma-version)
    Resolves: #329071


author: Miloslav Trmac <mitr@redhat.com> - 1.12-20
changelog:
  - Document that setkeycodes doesn't affect USB keyboards and that the kernel
    doesn't provide the raw scan codes by default
    Resolves: #211803


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-11
changelog:
  - Don't ship character set lists (they are already in glibc-common) and an
    obsolete copy of kbd.FAQ


author: Miloslav Trmac <mitr@redhat.com> - 1.12-5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (patch by Jochen Schmitt)
  - Don't ship patch backup files, simpler way


author: Miloslav Trmac <mitr@redhat.com> - 1.12-4
changelog:
  - Don't ship a patch backup file
  - Mention in setfont.8 that 512-glyph fonts reduce the number of available
    colors (#140935, patch by Dmitry Butskoj)
  - Remove "Meta_acute" from German keymaps (#143124)
  - Make the %triggerun script condition more precise, ignore failure of the
    script


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-18
changelog:
  - another quoted variable fixes for spaces in filenames
  - use SGML_INCLUDE in man backend(upstream)
  - change upstream URL to something useful
  - escape dots and single quotes in column 1 in docbook2man-spec.pl


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-15
changelog:
  - require grep,gawk, fix jw script to find SGML_BASE_DIR even
    with grep with colors(#473278), finish funcsynopsis patch
    drop


author: Ondrej Vasik <ovasik@redhat.com> 0.6-14-14
changelog:
  - ship new version of docbook2man-spec.pl to avoid issues
    with the old one
  - dropped funcsynopsis patch - docbook2man-spec.pl from
    tarball used no longer


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-11
changelog:
  - rpmlint check
  - fixed: dist tag, summary ended with dot, license tag,
    versioned provides/obsoletes + some cosmetic changes


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-8
changelog:
  - Added more fixes for handling spaces in directory name
  - SGML_FILE variable is factored out of SGML_ARGUMENTS
  - (changes taken from upstream)


author: Elliot Lee <sopwith@redhat.com> 0.6.12-6
changelog:
  - tetex-dvips requirement should go on main package (not just pdf 
    subpackage) because docbook2ps requires dvips too.


author: Tim Waugh <twaugh@redhat.com> 0.6.10-2
changelog:
  - Don't define graphic-default-extension in the stylesheet---it messes
    up PS+PDF output from the same source.


author: Tim Waugh <twaugh@redhat.com> 0.6.10-1
changelog:
  - 0.6.10.
  - No longer need automake files.
  - No longer need '.', jw-custom, '@', pdf, nochunks, txt, '-o', manpage,
    sdata, help, ol, '-V', sgml_xml, excl, link, pagesize, or texinputs
    patches.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-21
changelog:
  - Edited the wrong file when making the patch.. fix breakage introduced
    by trying to fix bug #58375.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-20
changelog:
  - Fix docbook frontend (bug #51478).
  - Make the old db2html script understand the .xml filename extension
    (bug #59194).
  - Determine page size to use automatically from LC_PAPER (bug #58375).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-9
changelog:
  - Actually apply the patch that makes man backend understand &minus;.
  - Also don't redefine <comment> and <remark> for HTML output either.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-8
changelog:
  - Default stylesheet: <comment> and <remark> as rationale markers
    probably isn't really appropriate for general use.
  - Default stylesheet: larger top margin to make some RTF readers
    happy (bug #56011).
  - Make man backend understand &minus;.
  - Specfile cleanups (%{_bindir}, %{_docdir}).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-6
changelog:
  - Explicit synopsis for each docbook2[xxx] command in the jw man page.
  - Clean up all temporary files in pdf backend.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-4
changelog:
  - Adjust stylesheet so that it works with docbook-dsssl 1.72.
  - Fix jw so that -o and -d can be used together (bug #53546).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-3
changelog:
  - Fix txt backend so that it works.
  - Fix jw so that it uses the HTML stylesheet for text backends.
  - Use links if lynx isn't available, in txt backend.


author: Tim Waugh <twaugh@redhat.com> 0.6-14
changelog:
  - db2html: copy admon graphics to output directory (bug #40143).
  - Require docbook-style-dsssl 1.64-2 for symbolic link used by db2html.
  - db2html: handle arguments with spaces better.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix argument parsing in docbook2xxx (bug #31518).
  - Fix argument passing in db2html (bug #31520).
  - Fix pdf generation (bug #31524).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Only create output directory for db2html (bug #27092). (docbook2html
    does not create an output directory in the upstream version, but
    the compatibility script has been made to do so.)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Use %{_mandir} and %{_prefix}.
  - db2* symlinks.
  - Obsolete stylesheets (and -db2pdf).
  - Change Copyright: to License:.
  - Remove Packager: line.
  - Reword description.


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-3
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1638379 - PKI startup initialization process should not
    depend on LDAP operational attributes [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.5.16 in RHCS 9.5


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-2
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
    Certificate Request [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-1
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-13
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] [manpage] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-12
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-10
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
    configuration [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
    - # Added Batch Update Information to Product Version (mharmsen)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-9
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
    if enableOCSP is true [rhel-7.6.z] (jmagne)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-8
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
    (dmoluguw)
  - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
    log and audit log using REST [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1645429 - pkispawn fails due to name collision with
    /var/log/pki/<instance> [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
    keyID needs to be captured in file [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1656297 - Unable to install with admin-generated keys
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-7
changelog:
  - Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
    TLS client [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
    removed from the default ciphers list [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
    enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
    overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
  - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
    [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
    [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
    a password [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
    pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
  - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
    there is no space on the disk to write logs [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-6
changelog:
  - Updated nuxwdog dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #673182 - ECC keys not supported for signing
    audit logs (cfu)
  - Bugzilla Bug #1593805 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
  - Bugzilla Bug #1601071 - Certificate generation happens with
    partial attributes in CMCRequest file (cfu)
  - Bugzilla Bug #1601569 - CC: Enable all config audit events
    (cfu)
  - Bugzilla Bug #1608375 - CMC Revocations throws exception
    with same reqIssuer & certissuer (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-5
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
    with latest version (abokovoy)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-4
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1548203 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1494591 - keyGen fails when only Identity


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-2
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
    by CSR encoding (cfu)
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
    certificate (ftweedal)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
  - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
  - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
  - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
    authenticated through SharedToken (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-1
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd
    entry in a certifcate (ftweedal)
  - Bugzilla Bug #1544843 - ExternalCA: Installation failed during
    csr generation with ecc (rrelyea, gkapoor)
  - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
    upstream 10.5.x (RHEL) (mharmsen)
  - Bugzilla Bug #1580394 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC (cfu)
  - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access (ftweedal, cfu)
  - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1588655 - Cert validation for installation with
    external CA cert (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-13
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd
    entry in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1585945 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1587826 - ExternalCA: Installation failed during
    csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
  - Bugzilla Bug #1588944 - Cert validation for installation with
    external CA cert [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access [rhel-7.5.z] (ftweedal, cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-12
changelog:
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
    CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1572548 - IPA install with external-CA is failing when
    FIPS mode enabled. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue
    with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
    improvement [rhel-7.5.z] (jmagne)
  - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
    pkispawn configuration step [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
    input class_id [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
    9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-11
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1550581 - CMCAuth throws
    org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
    temporary database [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
    and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
    [rhel-7.5.z] (cheimes, mharmsen)
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
    in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
    by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
    StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1558919 - Not able to generate certificate request
    with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
  - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
    and FIPS (edewata)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-8
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1542210 - pki console configurations that involves ldap
    passwords leave the plain text password in debug logs (jmagne)
  - Bugzilla Bug #1543242 - Regression in lightweight CA key replication
    (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
    audit event logging at startup (jmagne)
  - Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
    (alee)
  - Bugzilla Bug #1525306 - CC: missing CMC request and response record
    (cfu)
  - Bugzilla Bug #1532933 - Installing subsystems with external CMC
    certificates in HSM environment shows import error (edewata)
  - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
    (edewata)
  - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
    permitted in fips mode (mharmsen)
  - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
    outcomes. (edewata)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
    revRequest.issuer (cfu)
  - Bugzilla Bug #1541853 - ProfileService: config values with
    backslashes have backslashes removed (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
    - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-6
changelog:
  - Updated jss, nuxwdog, and openssl dependencies
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
    few cases (ftweedal)
  - Bugzilla Bug #1428021 - CC: shared token storage and retrieval
    mechanism (cfu)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
    would cause error (cfu)
  - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
     (alee)
  - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
    pkispawn (alee)
  - Bugzilla Bug #1520526 - p12 admin certificate is missing when
    certificate is signed Externally (edewata)
  - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
     instance (alee)
  - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
    missing nextupdate field (ftweedal)
  - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
  - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
    in several different files after installation completes (alee)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
    (jmagne)
  - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
    setup with CMC signed certificates (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-14
changelog:
  - #Require "jss >= 4.4.0-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
  - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
    - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
    - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
    - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
    - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
    - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
    - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
  - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
    - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-13
changelog:
  - Resolves: rhbz #1463350
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1463350 - Access banner validation (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-12
changelog:
  - # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
        - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
      - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
      - # Bugzilla Bug #1463350 - Access banner validation (edewata)
    - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
        - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
    - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
      - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
      - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
      - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-11
changelog:
  - # Resolves: rhbz #1469432
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1469432 - CMC plugin default change
  - # Resolves CVE-2017-7537
  - # Fixes BZ #1470948


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1458043 - Key recovery on token fails with
    invalid public key error on KRA (alee)
  - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
    deleting the any of the subsystem certs from it (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
     revocation non-signing cert requests (cfu)
  - Bugzilla Bug #1458047 - change the way aes clients refer to
    aes keysets (alee)
  - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
    (alee)
  - Bugzilla Bug #1460028 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-8
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (edewata)
  - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
    ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - Bugzilla Bug #1454450 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
    is asking for password when already provided (edewata)
  - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
  - Bugzilla Bug #1458043 - Key recovery using externalReg fails
    with java null pointer exception on KRA (alee)
  - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
    (edewata)
  - Bugzilla Bug #1458429 - client-cert-import --ca-cert should
    import CA cert with trust bits "CT,C,C" (edewata)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1445519 - CA Server installation with HSM fails
    (jmagne)
  - Bugzilla Bug #1452617 - Unable to create IPA Sub CA
    (ftweedal)
  - Bugzilla Bug #1454471 - Enabling all subsystems on startup
    (edewata)
  - Bugzilla Bug #1455617 - Key recovery on token fails because
    key record is not marked encrypted (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
    CMC with identity proof (cfu)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (mharmsen)
  - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
    defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
  - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
  - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
  - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
  - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
    audit event. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
    HSM is used. (alee)
  - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
  - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
    the KRA (ftweedal)
  - Bugzilla Bug #1448204 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
    thales hsm (alee)
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-3
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
    startTime parameter is not working as expected. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
  - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
  - Bugzilla Bug #1445088 - profile modification cannot remove existing config
    parameters (ftweedal)
  - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHEL) (alee)
  - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
    pki CLI terminates SSL connection (edewata)
  - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHCS) (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-2
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1282504 - Installing pki-server in container reports
    scriptlet failed, exit status 1 (jpazdziora)
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHEL) (jmagne)
  - Bugzilla Bug #1437591 - cli authentication using expired cert throws an
    exception (edewata)
  - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
    request (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHCS) (jmagne)
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
  - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
    implementation (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-1
changelog:
  - Require "nss >= 3.28.3" as a build and runtime requirement
  - Require "jss >= 4.4.0-4" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement
  - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
    failure (edewata)
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
    implementation (cfu)
  - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
    cert requests (cfu)
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
    protection cert mechanism (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.0-1
changelog:
  - Require "jss >= 4.4.0-1" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate
    when --usages verify (vakwetu)
  - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does
    not show proper error message (vakwetu)
  - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN
    (ftweedal)
  - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1325071 - add options to enable/disable cert or crl
    publishing. (vakwetu)
  - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata)
  - Bugzilla Bug #1372052 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1375347 - Typo in comment line of
    UserPwdDirAuthentication.java (edewata)
  - Bugzilla Bug #1376226 - IPA replica-prepare failed with error
    "Profile caIPAserviceCert Not Found" (ftweedal)
  - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata)
  - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen)
  - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHEL 7) (edewata)
  - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA
    (vakwetu)
  - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata)
  - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL)
    (jmagne)
  - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate
    (vakwetu)
  - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website
    incorrect (vakwetu)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne)
  - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata)
  - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata)
  - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6
    environment. (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu)
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)
  - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHCS 9) (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (RHCS) (jmagne)
  - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata)
  - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS)
    (jmagne)
  - ############################################################################


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-18
changelog:
  - ## RHEL 7.3.z Batch Update 4
  - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN
    (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-17
changelog:
  - ## RHCS 9.1.z Batch Update 3
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - ## RHEL 7.3.z Batch Update 3
  - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1417064 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website
    incorrect (alee)
  - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6
    environment. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-16
changelog:
  - Separate original patches into RHEL and RHCS portions
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1404900 - RHCS logging properties (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-15
changelog:
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1404175 -  pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-base] (edewata)
  - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-tps] (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 -  TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-14
changelog:
  - Marked the following RHCS 9.1.z bug:
    Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
    as a duplicate of RHEL 7.3.z bug:
    Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-13
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    (added KRA key recovery via CLI in FIPS mode)
  - ## RHCS 9.1.z Batch Update 1
  - Reverted patches associated with
    Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-12
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does
    not show proper error message (alee)
  - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java
    (edewata)
  - ## RHCS 9.1.z Batch Update 1
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu)
  - Bugzilla Bug #1274096 -  [BUG] Add ability to disallow TPS to enroll a
    single user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-11
changelog:
  - PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a
    dependency package (mharmsen)
  - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar
    files (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-10
changelog:
  - Revert Patch:  PKI TRAC Ticket #2449 - Unable to create system certificates
    in different tokens (edewata)
  - Resolves:  rhbz #1374054 - ipa-replica-install fails setting up certificate
  - Restores:  rhbz #1319557 - pkispawn KRA instance is failing server
  - Removes from Errata:  rhbz #1372041 - Unable to create system certificates
    in different tokens


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-9
changelog:
  - PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion
    (ftweedal)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata)
  - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry
    deleted (ftweedal)
  - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if
    USN plugin enabled (ftweedal)
  - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per
    instance name (for shared HSM) (cfu)
  - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu)
  - PKI TRAC Ticket #2449 - Unable to create system certificates in different
    tokens (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-8
changelog:
  - PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne)
  - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor)
  - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open
  - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-7
changelog:
  - PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen)
    - CMCEnroll
  - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message
    "PKIException: LDAP error (21): error result" (edewata)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (cheimes, edewata, mharmsen)
  - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata, mharmsen)
  - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem
    format with/without header works while pkcs7 with header is not allowed
    (edewata)
  - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-5
changelog:
  - PKI TRAC Ticket #978  - TPS connector man page: add revocation routing
    info (cfu)
  - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from
    Firefox' workarounds to appropriate 'pki' man page (jmagne)
  - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu)
  - PKI TRAC Ticket #2381 - Throws exception while providing invalid module.
    (edewata)
  - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable
    should accept only boolean value (edewata)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements
    (akasurde, alee, cheimes, edewata, jmagne, mharmsen)
  - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not
    rpm-require hostname (mharmsen)
  - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and
    pki-server (cheimes)
  - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata)
  - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne)
  - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not
    apply the specified trust bits (alee)
  - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen
    during installation (alee)
  - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are
    not used (ftweedal)
  - PKI TRAC Ticket #2421 - Incorrect SELinux contexts
    Installation/Configuration (edewata)
  - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server
    is converted from CA-less to CA-full (edewata)
  - PKI TRAC Ticket #2428 - broken request links for CA's system certs in
    agent request viewing (cfu)
  - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial
    number in migration case (jmagne)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (mharmsen)
  - PKI TRAC Ticket #2433 - Lightweight CA GET <id>/chain returns bogus PEM
    data (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-3
changelog:
  - PKI TRAC Ticket #691  - [MAN] pki-server man pages (mharmsen)
  - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with
    key-generate when --usages verify is passed (jmagne)
  - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS
    (cfu)
  - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key
    generation for non-encryption token keys (cfu)
  - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to
    'pki_default.cfg' & 'pkispawn' man pages (mharmsen)
  - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for
    shared vs non shared tomcat instance installation (mharmsen)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws
    IOError (edewata, ftweedal)
  - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core
    update on upgraded system (ftweedal)
  - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing
    it to "internal" (mharmsen)
  - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared
    secret from remote TKS (jmagne)
  - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws
    attribute error (ftweedal)
  - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with
    --help option (edewata)
  - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust
    flags (edewata)
  - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while
    specifying invalid parameters. (edewata)
  - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password
    during silent installation (edewata)
  - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg
    (ftweedal)
  - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given
    (ftweedal)
  - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance
    fails (ftweedal)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements
    (akasurde, edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.0.a1-2
changelog:
  - PKI TRAC Ticket #1625 - Allow multiple ACLs of same name
    (union of rules) [ftweedal]
  - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap
    unconditionally [edewata]
  - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert
    request. [edewata]
  - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA
    certificates. [edewata]
  - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata]
  - PKI TRAC Ticket #1808 - Fixed illegal token state transition
    via TEMP_LOST. [edewata]


author: Dogtag Team <pki-devel@redhat.com> 10.2.7-0.3
changelog:
  - Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on
    tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools
  - Updated dep on tomcatjss [Fedora 23 and later]


author: Dogtag Team <pki-devel@redhat.com> 10.2.2-0.1
changelog:
  - Updated version number to 10.2.2-0.1
  - Moved web application deployment locations.
  - Updated Resteasy and Jackson dependencies.
  - Added missing python-lxml build dependency.


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.1-0.4
changelog:
  - PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2
  - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency.
  - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime
    dependencies


author: Christina Fu <cfu@redhat.com> 10.2.1-0.2
changelog:
  - Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by
    default and upgrade (cfu)
  - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen)
  - up the release number to 0.2


author: Dogtag Team <pki-devel@redhat.com> 10.2.1-0.1
changelog:
  - Updated version number to 10.2.1-0.1.
  - Added CLIs to simplify generating user certificates
  - Added enhancements to KRA Python API
  - Added a man page for pki ca-profile commands.
  - Added python api docs


author: Ade Lee <alee@redhat.com> 10.2.0-3
changelog:
  - Disable pylint dependency for RHEL builds
  - Added jakarta-commons-httpclient requirements
  - Added tomcat version for RHEL build
  - Added resteasy-base-client for RHEL build


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.9
changelog:
  - Merged jmagne@redhat.com's spec file changes from the stand-alone
    'pki-tps-client' package needed to build/run the native 'tpsclient'
    command line utility into this 'pki-core' spec file under the 'tps' package.
  - Original tps libararies must be built to support this native utility.
  - Modifies tps package from 'noarch' into 'architecture-specific' package


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.6
changelog:
  - Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires --
    drop dependency on java-atk-wrapper
  - Removed 'java-atk-wrapper' dependency from 'pki-server'


author: Dogtag Team <pki-devel@redhat.com> 10.2.0-0.1
changelog:
  - Added option to build without server packages.
  - Replaced Jettison with Jackson.
  - Added python-nss build requirement
  - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python
  - TRAC Ticket #840 - pkispawn requires policycoreutils-python
  - Updated requirements for resteasy
  - Added template files for archive, retrieve and generate key
    requests to the client package.


author: Ade Lee <alee@redhat.com> 10.1.0-1
changelog:
  - Trac Ticket 788 - Clean up spec files
  - Update release number for release build
  - Updated requirements for resteasy


author: Abhishek Koneru <akoneru@redhat.com> 10.1.0.0.9
changelog:
  - Listed new packages required during build, due to issues reported
    by pylint.
  - Packages added: python-requests, python-ldap, libselinux-python,
                    policycoreutils-python


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.0-0.2
changelog:
  - TRAC Ticket 606 - add restart / start at boot info to pkispawn man page
  - TRAC Ticket 610 - Document limitation in using GUI install
  - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-2
changelog:
  - Added default pki.conf in /usr/share/pki/etc
  - Create upgrade tracker on install and remove it on uninstall


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-0.7
changelog:
  - Added pki-server-upgrade script and pki.server module.
  - Call upgrade scripts in %post for pki-base and pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.1-9
changelog:
  - Renamed base/deploy to base/server.
  - Moved pki.conf into pki-base.
  - Removed redundant pki/server folder declaration.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-3
changelog:
  - TRAC Ticket #517 - Clean up theme dependencies
  - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-2
changelog:
  - Removed runtime dependency on 'pki-server-theme' to resolve
    Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme


author: Ade Lee <alee@redhat.com> 10.0.1-1
changelog:
  - TRAC Ticket 214 - Missing error description for duplicate user
  - TRAC Ticket 213 - Add nonces for cert revocation
  - TRAC Ticket 367 - pkidestroy does not remove connector
  - TRAC Ticket #430 - License for 3rd party code
  - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP
  - Fix spec file to allow f17 to work with latest tomcatjss
  - TRAC Ticket 466 - Increase root CA validity to 20 years
  - TRAC Ticket 469 - Fix tomcatjss issue in spec files
  - TRAC Ticket 468 - pkispawn throws exception
  - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes
  - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . .
  - TRAC Ticket 437 - Make admin cert p12 file location configurable
  - TRAC Ticket 393 - pkispawn fails when selinux is disabled
  - Punctuation and formatting changes in man pages
  - Revert to using default config file for pkidestroy
  - Hardcode setting of resteasy-lib for instance
  - TRAC Ticket 436 - Interpolation for pki_subsystem
  - TRAC Ticket 433 - Interpolation for paths
  - TRAC Ticket 435 - Identical instance id and instance name
  - TRAC Ticket 406 - Replace file dependencies with package dependencies


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-4
changelog:
  - TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and
    dogtag-pki.spec . . .
  - TRAC Ticket #468 - pkispawn throws exception


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.56.b3
changelog:
  - TRAC Ticket #315 - Man pages for pkispawn/pkidestroy.
  - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.


author: Ade Lee <alee@redhat.com> 10.0.0-0.53.b3
changelog:
  - Cleaned up spec file to provide only support rhel 7+, f17+
  - Added resteasy-base dependency for rhel 7
  - Update cmake version


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.32.a1
changelog:
  - TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances
    upon RPM "update" . . .
  - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy"
    from /usr/bin to /usr/sbin . . .


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.25.a1
changelog:
  - Merged pki-native-tools and pki-java-tools into pki-tools.
  - Modified pki-server to depend on pki-tools.


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.24.a1
changelog:
  - Split pki-common into pki-base and pki-server.
  - Merged pki-util into pki-base.
  - Merged pki-deploy into pki-server.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.23.a1
changelog:
  - Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17
  - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy'
  - Altered PKI Package Dependency Chain (top-to-bottom):
    pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.16.a1
changelog:
  - Integration of Tomcat 7
  - Addition of centralized 'pki-tomcatd' systemd functionality to the
    PKI Deployment strategy
  - Removal of 'pki_flavor' attribute


author: Ade Lee <alee@redhat.com> 10.0.0-0.11.a1
changelog:
  - BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes
  - Corrected patch selected for selinux f17 rules


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.9.a1
changelog:
  - Initial attempt at PKI deployment framework described in
    'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.7.a1
changelog:
  - For 'mock' purposes, removed platform-specific logic from around
    the 'patch' files so that ALL 'patch' files will be included in
    the SRPM.


author: Ade Lee <alee@redhat.com> 10.0.0-0.5.a1
changelog:
  - 'pki-selinux'
  -      Added platform-dependent patches for SELinux component
  -      Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16)
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.3.a1
changelog:
  - Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes
    in fundamental path structure in Fedora 17
  - 'pki-setup'
  -      Hard-code Perl dependencies to protect against bugs such as
         Bugzilla Bug #772699 - Adapt perl and python fileattrs to
         changed file 5.10 magics
  - 'pki-selinux'
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.2.a1
changelog:
  - Integrated 'pki-kra' into 'pki-core'
  - Integrated 'pki-ocsp' into 'pki-core'
  - Integrated 'pki-tks' into 'pki-core'
  - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.16-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after
         the in-place upgrade( CS 8.0->8.1) (cfu)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #746367 - Typo in the profile name. (jmagne)
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  -      Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17
         (rawhide) . . . (mharmsen)
  -      Bugzilla Bug #749945 - Installation error reported during CA, DRM,
         OCSP, and TKS package installation . . . (mharmsen)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.15-1
changelog:
  - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
  - Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-setup'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee)
  - 'pki-symkey'
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-native-tools'
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-util'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737218 - Incorrect request attribute name matching
         ignores request attributes during request parsing. (awnuk)
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-selinux'
  -      Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-silent'
  -      Bugzilla Bug #739201 - pkisilent does not take arch into account
         as Java packages migrated to arch-dependent directories (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.14-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-symkey'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-java-tools'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-common'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-silent'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .


author: Ade Lee <alee@redhat.com> 9.0.13-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-ca'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-common'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.12-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  -      Bugzilla Bug #717643 - Fopen without NULL check and other Coverity
         issues (awnuk)
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #700522 - pki tomcat6 instances currently running
         unconfined, allow server to come up when selinux disabled (alee)
  -      Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated
         correctly when subsystem cloned (using hsm) (alee)
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.11-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -      Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by
         renumbering "cn=<value>" (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like
         (jmagne, awnuk)
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  -      Bugzilla Bug #708075 - Clone installation does not work over NAT
         (alee)
  -      Bugzilla Bug #726785 - If replication fails while setting up a clone
         it will wait forever (alee)
  -      Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk)
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-ca'
  -      Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs
         in IPA profile (awnuk)
  - 'pki-silent'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.10-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #720510 - Console: Adding a certificate into nethsm
         throws Token not found error. (jmagne)
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  -      Bugzilla Bug #722989 - Registering an agent when a subsystem is
         created - does not log AUTHZ_SUCCESS event. (alee)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert
         (awnuk)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.9-1
changelog:
  - Updated release of 'jss'
  - Updated release of 'tomcatjss' for Fedora 15
  - 'pki-setup'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-symkey'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-native-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #717765 - TPS configuration: logging into security domain
         from tps does not work with clientauth=want. (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-util'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-java-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record
         processing) (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #695403 - Editing signedaudit or transaction, system
         logs throws 'Invalid protocol' for OCSP subsystems (alee)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (alee)
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (jmagne)
  -      Bugzilla Bug #698885 - Race conditions during IPA installation (alee)
  -      Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface:
         SubjectID=$Unidentified$ fails audit evaluation (jmagne)
  -      Bugzilla Bug #705914 - SCEP mishandles nicknames when processing
         subsequent SCEP requests. (awnuk)
  -      Bugzilla Bug #661142 - Verification should fail when a revoked
         certificate is added. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #707416 - additional audit messages for GetCookie (alee)
  -      Bugzilla Bug #707607 - Published certificate summary has list of
         non-published certificates with succeeded status (jmagne)
  -      Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
         for tps and ca on server shutdown (jmagne)
  -      Bugzilla Bug #697939 - DRM signed audit log message - operation should
         be read instead of modify (jmagne)
  -      Bugzilla Bug #718427 - When audit log is full, server continue to
         function. (alee)
  -      Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in
         CA's signedaudit log when a directory based user enrollment is
         performed (jmagne)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-selinux'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #720503 - RA and TPS require additional SELinux
         permissions to run in "Enforcing" mode (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-ca'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #699837 - service command is not fully backwards
         compatible with Dogtag pki subsystems (mharmsen)
  -      Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
         administrator group. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee
         pages (alee)
  -      Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs
         for a revocation invoked by EE user (awnuk)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-silent'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-2
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Added 'DRMTool.cfg' configuration file to inventory
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #532548 - Tool to do DRM re-key
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.7-1
changelog:
  - 'pki-setup'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -     Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs
        throws 'Invalid protocol' for OCSP subsystems
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #698885 - Race conditions during IPA installation
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #699837 - service command is not fully backwards compatible
        with Dogtag pki subsystems
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Bugzilla Bug #693327 - Missing requires: tomcatjss
  - 'pki-setup'
  -     Bugzilla Bug #690626 - pkiremove removes the registry entry for
        all instances on a machine
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.
  - 'pki-common'
  -     Bugzilla Bug #692990 - Audit log messages needed to match CC doc:
        DRM Recovery audit log messages
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Require "jss >= 4.2.6-15" as a build and runtime requirement
  - Require "tomcatjss >= 2.1.1" as a build and runtime requirement
    for Fedora 15 and later platforms
  - 'pki-setup'
  -     Bugzilla Bug #688287 - Add "deprecation" notice regarding using
        "shared ports" in pkicreate -help . . .
  -     Bugzilla Bug #688251 - Dogtag installation under IPA takes
        too much time - SELinux policy compilation
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple
        extensions
  - 'pki-common'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled
        on the EE port
  - 'pki-selinux'
  -     Bugzilla Bug #684871 - ldaps selinux link change
  - 'pki-ca'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.(profile and CS.cfg only)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
    instance
  - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found
  - 'pki-setup'
  -     Bugzilla Bug #678157 - uninitialized variable warnings from Perl
  -     Bugzilla Bug #679574 - Velocity fails to load all dependent classes
  -     Bugzilla Bug #680420 - xml-commons-apis.jar dependency
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath
  -     Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library
        name for SafeNet LunaSA
  - 'pki-common'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #678715 - netstat loop fixes needed
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  - 'pki-selinux'
  -     Bugzilla Bug #674195: SELinux error message thrown during token
        enrollment
  - 'pki-ca'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  -     Bugzilla Bug #676330 - init script cannot start service
  - 'pki-silent'
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath


