# changelog

author: Karel Zak <kzak@redhat.com> 3-5
changelog:
  - replace word list with much better Moby Project words list (#61395)
  - revise %description; ispell/aspell no longer uses words


author: Peter Schiffer <pschiffe@redhat.com> - 1:0.2-1
changelog:
  - resolves: #823199
    updated tarball from the new upstream project
  - resolves: #842284
    file conflict fixed with update to the new tarball


author: Ivana Hutarova Varekova <varekova@redhat.com> - 0.24-12
changelog:
  - Resolves: #701467
    update sigaction.2 manual page
    the patch was created by Mira Bielecka, thanks


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix roff errors in various man pages (#34189)
  - remove lisp-tut.5 - it's beyond repair and needs rewriting


author: Cosimo Cecchi <cosimoc@redhat.com> 2.91.93-1
changelog:
  - Update to 2.91.93
  - Make the cursor theme noarch
  - Ship the default settings together with the relevant theme


author: Cosimo Cecchi <ccecchi@redhat.com> 2.91.2.1-3
changelog:
  - Make sure the theme directory is owned by the package too.
  - Cleaned up the spec file a bit more to silence some rpmlint
    warnings.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.0.0-13
changelog:
  - Explicitly added '-g' option into CFLAGS & CXXFLAGS to correctly build .debug_info for i386 (bug #1413034)
  - Added a workaround to correctly add hardening flags during build process (bug #1406689)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1
changelog:
  - rebase to 5.1.0, de-ansi patch no longer applicable
  - upstream dropped libmp.so (bsdmp-like interface)
  - silenced bogus date in changelog


author: Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1
changelog:
  - resolves: #702919
    update to 5.0.2
  - resolves: #738091
    removed unused direct shlib dependency on libm
    updated license in gmp.h and gmp-mparam.h files


author: Ivana Varekova <varekova@redhat.com> 4.2.1-1
changelog:
  - update to 4.2.1
  - do some spec cleanups
  - fix 238794 - gmp-devel depends on {version} but not on 
    {version}-{release}
  - remove mpfr (moved to separate package)


author: Karsten Hopp <karsten@redhat.com> 4.1.4-12
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/... requirements
  - use make install DESTDIR=...
  - replace tabs with spaces
  - convert changelog to utf-8


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-11
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable mpfr  #104395
  - enable cxx  #80195
  - add COPYING.LIB
  - add fixes from gmp web-site
  - remove some cruft patches for older libtool releases


author: Trond Eivind Glomsrød <teg@redhat.com> 4.1-3
changelog:
  - Redefine the configure macro, the included configure 
    script isn't happy about the rpm default one (#68190). Also, make
    sure the included libtool isn't replaced,


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not
  correctly identified as a 64 bit platform.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to the configure and makeinstall macros
  - FHS-compliance fixing
  - move docs to non-devel package


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - merge in some debian gmp fixes
  - Ulrich Drepper's __gmp_scale2 fix
  - my mpf_set_q fix
  - sparc64 fixes


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - include the private header file gmp-mparam.h because several
    apps seem to assume that they are building against the gmp
    source tree and require it.  Sigh.


author: Marc Ewing <marc@redhat.com>
changelog:
  - started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Jiri Popelka <jpopelka@redhat.com> - 3.01-1
changelog:
  - Initial package. Up to now hostname has been part of net-tools package.
  - This package is based on Debian's hostname because Debian has had hostname
    as separate package since 1997 and the code is much better then the old one
    contained in net-tools.


author: Kalev Lember <kalevlember@gmail.com> - 0.5.1-1
changelog:
  - Update to 0.5.1
  - Build with libmusicbrainz4
  - Adjust the spec file for the changes in private library location
  - Remove and obsolete the -devel subpackage


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-4
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Jarod Wilson <jarod@redhat.com> 0.2.2-2
changelog:
  - The console option in conman.conf is case-insensitive, so relax
    defined consoles check in initscript (Mark McLoughlin, #465777)


author: Jarod Wilson <jwilson@redhat.com> 0.1.9.1-3
changelog:
  - Add Requires: logrotate
  - Ugh, conmand exits cleanly if no CONSOLE(s) are defined in
    /etc/conman.conf, add check to initscript to report failure
    if none are defined


author: Jarod Wilson <jwilson@redhat.com> 0.1.9.1-2
changelog:
  - Create log directories and install working logrotate config
  - Use a much cleaner RH/FC-specific initscript


author: Rex Dieter <rdieter@fedoraproject.org> 6:4.6.95-10
changelog:
  - drop kate, konsole, to be packaged separately.
  - update summary to mention included apps/utilities
  - Provides: kde-baseapps (matching new upstream tarball)


author: Radek Novacek <rnovacek@redhat.com> 6:4.6.80-1
changelog:
  - 4.6.80
  - import separately packaged kwrite and konsole
  - drop upstreamed patches (nsplugins_sdk_headers and nsplugins_flash)
  - add konq-plugins


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.3-2
changelog:
  - completely drop commented out konsole-session patch (fixed upstream)
  - add backwards compatibility hack for a config option change by that patch


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.4.1-2
changelog:
  - drop kappfinder (keep option for -kappfinder subpkg)
  - use whitelist for conflicting libs
  - libs: Requires: %name


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - own %_kde4_appsdir/konqueror/{kpartplugins,icons,opensearch}
  - %lang'ify HTML docs
  - Provides: kdelibs4%{?_isa}


author: Lorenzo Villani <lvillani@binaryhelix.net> - 6:4.1.80-1
changelog:
  - 4.1.80
  - patch100 was backported from 4.2 (4.1.6x), removed from patch list
  - ported 4.1.2 konsole patches
  - drop the second konsole patch (upstreamed)
  - using make install/fast
  - BR cmake >= 2.6.2


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-2
changelog:
  - quote semicolon in fix for #442834
  - only do the echo when konquerorsu.desktop is actually shipped (#445989)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72 (4.1 alpha 1)
  - drop backported kde#160422 and nspluginviewer patches
  - add minimum versions to soprano-devel and strigi-devel BRs


author: Than Ngo <than@redhat.com> 4.0.3-1
changelog:
  - 4.0.3
  - drop fix for favicons infinite loop, it's included in new version
  - omit multilib upgrade hacks
  - omit extraneous BR's
  - (re)include oxgygen/scalable icons


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to {ix86}
  - Resolves: rbhz#545564


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.2-5
changelog:
  - Resolves:rh#1192870 - Fix langlist when installed_langpacks not available
  - Resolves:rh#1263241 - Add parser for Release_Notes packages
  - Resolves:rh#1251388 - Add parser for libreoffice langpacks


author: Bill Nottingham <notting@redhat.com> - 0.3.0-2
changelog:
  - fix groupinstall of langonly groups (#840885)
  - fix plugin type for use in yumex, elsewhere (#847502)


author: James Antill <james.antill@redhat.com> - 0.1.5-2
changelog:
  - Fix the problems where langpacks could delete the system.
  - Resolves: bug#585424
  - Register the package name, for yum history etc.


author: Jens Petersen <petersen@redhat.com> - 0.1.5-1
changelog:
  - fixes and improvements from James Antill (#571845):
    - Move print's => yum logger uses.
    - Move tsinfo ops to real install/remove ops, so deps will be solved
    - Handles erase properly.
    - Doesn't force upgrade langpacks on upgrades/downgrades/etc.
    - Doesn't try to install multiple versions of langpacks. (#569352)
    - Move from d.has_key(v) to "v in d", as py3 removes the former.


author: Jens Petersen <petersen@redhat.com> - 0.1.4-2
changelog:
  - fix source url (#536737)
  - drop python requires (#536737)
  - drop buildroot and cleaning of buildroot (#536737)
  - use global (#536737)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-5
changelog:
  - Fix bad handling of empty lines in pcregrep tool (bug #961789)
  - Fix possible pcretest crash with a data line longer than 65536 bytes


author: Petr Pisar <ppisar@redhat.com> - 8.32-4
changelog:
  - Fix forward search in JIT when link size is 3 or greater
  - Fix buffer over-read in UTF-16 and UTF-32 modes with JIT


author: Petr Pisar <ppisar@redhat.com> - 8.30-0.1.RC1
changelog:
  - 8.30 Relase candidate 1 with UTF-16 support and *API change*
  - Enable UTF-16 variant of PCRE library
  - The pcre_info() function has been removed from pcre library.
  - Loading compiled pattern does not fix endianity anymore. Instead an errror
    is returned and the application can use pcre_pattern_to_host_byte_order() to
    convert the pattern.
  - Surrogates (0xD800---0xDFFF) are forbidden in UTF-8 mode now.


author: Petr Pisar <ppisar@redhat.com> - 8.21-2
changelog:
  - Fix unmatched subpattern to not become wildcard (bug #769597)
  - Fix NULL pointer derefernce in pcre_free_study() (upstream bug #1186)


author: Petr Pisar <ppisar@redhat.com> - 8.13-2
changelog:
  - Separate utilities from libraries
  - Move pcre-config(1) manual to pcre-devel sub-package
  - Remove explicit defattr from spec code
  - Compile pcretest with readline support


author: Petr Pisar <ppisar@redhat.com> - 8.13-1
changelog:
  - 8.13 bump: Bug-fix version, Unicode tables updated to 6.0.0, new pcregrep
    option --buffer-size to adjust to long lines, new feature is passing of
    *MARK information to callouts.
  - Should fix crash back-tracking over unicode sequence (bug #691319)


author: Petr Pisar <ppisar@redhat.com> - 8.12-4
changelog:
  - Fix caseless reference matching in UTF-8 mode when the upper/lower case
    characters have different lengths (bug #702623)


author: Petr Pisar <ppisar@redhat.com> - 8.11-1
changelog:
  - 8.11 bump
  - See ChangeLog for changes. Namely changes have been made to the way
    PCRE_PARTIAL_HARD affects the matching of $, \z, \Z, \b, and \B.
  - Fix typo in pcreprecompile(3) manual
  - Document why shared library is not under /usr


author: Petr Pisar <ppisar@redhat.com> - 8.10-1
changelog:
  - 8.10 bump (bug #612635)
  - Add LICENCE to static subpackage because COPYING refers to it
  - Remove useless rpath by using new libtool (simple sed does not work anymore
    because tests need to link against just-compiled library in %check phase)


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-14
changelog:
  - Update URLs to point to github.com since that's where upstream lives
    these days
    Resolves: rhbz#1502389


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-9
changelog:
  - Disable python-coverage tests on s390x
    Related: rhbz#1057626
  - Fix python-coverage tests (some disabled that are not working)
    Resolves: rhbz#1057626


author: David Cantrell <dcantrell@redhat.com> - 3.5-1
changelog:
  - Drop dependency on python-decorator module. (dcantrell)
  - Differentiate the "Could not commit" messages. (jgranado)
  - Import _ped.DiskLabelException into parted namespace (cjwatson)
  - Return PED_EXCEPTION_NO for yes/no interactive exceptions. (dcantrell)


author: Hans de Goede <hdegoede@redhat.com> - 2.5-4
changelog:
  - Rebuild for new parted-2.1
  - Remove py_disk_clobber_exclude function binding, as this function was
    removed from parted-2.1


author: David Cantrell <dcantrell@redhat.com> - 2.5-1
changelog:
  - Update release instructions. (dcantrell)
  - Remove old cylinder alignment test cases for _ped. (dcantrell)
  - Add tests for max partition length / start sector (hdegoede)
  - Add _pedmodule and parted functions for max partition length / start
    sector (hdegoede)
  - Remove align_to_cylinders function bindings (hdegoede)
  - Add tests for disk flag methods (hdegoede)
  - Add _pedmodule and parted functions for per disk flags (hdegoede)
  - Every tuple member requires a comma after it. (dcantrell)
  - Fill out a lot of simple _ped.Disk test cases. (dcantrell)
  - Disable DeviceDestroyTestCase for now. (dcantrell)
  - Add RequiresLabeledDevice to tests/_ped/baseclass.py. (dcantrell)
  - Attempt at fixing _ped.Device.destroy(), no dice. (dcantrell)
  - Fix UnitFormatCustomTestCase and UnitFormatTestCase. (dcantrell)
  - Fix UnitFormatCustomByteTestCase and UnitFormatByteTestCase. (dcantrell)
  - Add DeviceStrTestCase, disable DeviceDestroyTestCase. (dcantrell)
  - Add DeviceDestroyTestCase and DeviceCacheRemoveTestCase. (dcantrell)
  - Implemented ConstraintIsSolutionTestCase(). (dcantrell)
  - Implement ConstraintSolveMaxTestCase(). (dcantrell)
  - Implement ConstraintSolveNearestTestCase(). (dcantrell)
  - Correct py_ped_file_system_probe_specific() for NULL returns. (dcantrell)
  - Implement FileSystemProbeSpecificTestCase(). (dcantrell)
  - Implement FileSystemProbeTestCase(). (dcantrell)
  - Add RequiresFileSystem to tests/_ped/baseclass.py. (dcantrell)
  - Add disk alignment test cases in test_ped.py. (dcantrell)
  - Fix CHSGeometryStrTestCase(). (dcantrell)
  - Fix ConstraintDuplicateTestCase...finally. (dcantrell)
  - Put a deprecation warning in py_ped_constraint_duplicate(). (dcantrell)
  - Note that we need parted from Fedora for pyparted. (dcantrell)
  - Fix UnitGetSizeTestCase in _ped test cases for _ped.UNIT_PERCENT.
    (dcantrell)
  - Add testcase for new _ped disk get_partition_alignment method (hdegoede)


author: David Cantrell <dcantrell@redhat.com> - 2.4-1
changelog:
  - Upgrade to pyparted-2.4:
        Use PedDevice length instead of DIY (#532023) (hdegoede)
        Use sectorSize not physicalSectorSize for size calculations (hdegoede)


author: David Cantrell <dcantrell@redhat.com> - 2.3-1
changelog:
  - Upgrade to pyparted-2.3:
        Remove root user requirement in _ped
        Add testcases for new _ped device methods
        Add python wrapper for new PedDisk partition alignment info function
        Add support for new PedDisk parition alignment info function
        Add python wrappers for new PedDevice alignment info functions
        Add support for new PedDevice alignment info functions
        Fix a whole pile of test cases.
        Remove ped_disk_commit_to_dev() call from py_ped_disk_new_fresh()
        Fix error in Constraint __str__ method
        Make _ped_Device2PedDevice properly set / throw exceptions
        Fixup various errorhandling issues in pydisk.c
        Add missing _ped_Device2PedDevice() retval checks
        Use libparted commit() for parted.disk.Disk.commit() (hdegoede).
  - BR parted-devel >= 1.9.0-20


author: David Cantrell <dcantrell@redhat.com> - 2.2-1
changelog:
  - Upgrade to pyparted-2.2:
        Fixes PedDisk2_ped_Disk() and avoids losing disk label data
        in the conversion process (#526999)


author: Chris Lumens <clumens@redhat.com> - 2.1.2-1
changelog:
  - Upgrade to pyparted-2.1.2:
        PED_DEVICE_DM is always defined in libparted these days.
        Handle parted exceptions arising from ped_device_get (#495433).


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: John Dennis <jdennis@redhat.com> - 0.8.0-5
changelog:
  - BuildRequires had python-requests but the Requires was still referencing
    python2-requests which is not yet provided in RHEL 7.4.,
    also add the missing version dependency on python-requests.
    Resolves: rhbz#1401783


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-2
changelog:
  - Fix reserved data size (rhbz #1416783)
  - Fix inverted args in tests (rhbz #1416783)	  
  - Avoid sign extension problems (rhbz #1416783)
  - Fix crash with opening via GSocketAddress (rhbz #1416783)
  - Fix crash & error reporting during connection timeout (rhbz #1441120)
  - Fix incompatibility with libvncserver websockets (rhbz #921330)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0 release (rhbz #1416783)
  - Release held keys when loosing focus (rhbz #921008)
  - Avoid warnings when disconnecting (rhbz #1126825)
  - Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
  - CVE-2017-5884 - fix bounds checking for RRE, hextile and
    copyrect encodings (rhbz #1425367)
  - CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.2-2
changelog:
  - Fix crash in TLS shutdown code (rhbz #650601)
  - Fix crash in motion event handler (rhbz #650104)
  - Fix framebuffer update bounds checking (rhbz #655630)


author: Colin Walters <walters@verbum.org> - 0.4.1-9
changelog:
  - Rebuild to use old pygobject2-python2 API again:
    https://bugzilla.redhat.com/show_bug.cgi?id=638457


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.10-3
changelog:
  - Drop VNC connection if the server sends a update spaning outside bounds of desktop (rhbz #540810)
  - Fix gcrypt threading initialization (rhbz #537489)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.4-2.fc9
changelog:
  - Fixed endianness conversions
  - Fix makecontext() args crash on x86_64
  - Fix protocol version negotiation


author: Daniel P. Berrange <berrange@redhat.com> - 0.1.0-4.fc8
changelog:
  - Fix mixed endian handling & BGR pixel format (rhbz #253597)
  - Clear widget areas outside of framebuffer (rhbz #253599)
  - Fix off-by-one in python demo


author: Daniel P. Berrange <berrange@redhat.com> - 0.1.0-3.fc8
changelog:
  - Tweaked post scripts
  - Removed docs from sub-packages
  - Explicitly set license to LGPLv2+
  - Remove use of macro for install rule


author: Michal Nowak <mnowak@redhat.com> - 0.3.2-1
changelog:
  - 0.3.2
  - remove rpath (x86-64)
  - xcb_keysyms: remove xcb_lookup_t
  - Revert "keysyms: use xcb_key_lookup_t type for col paramter"
  - temporary disabled %check due to RPATH regression


author: Michal Nowak <mnowak@redhat.com> - 0.2.1-2
changelog:
  - new build deps: gperf, pkgconfig, libxcb, m4, xorg-x11-proto-devel
  - not installing *.a files anymore
  - configure with --with-pic


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-5
changelog:
  - enhancement: support TLS 1.1 and later (#1231522,#1160467)
  - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522)
  - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-1
changelog:
  - new upstream release (#1147982)
  - fix: PIE and RELRO check (#1092562)
  - fix: slaptest doesn't convert perlModuleConfig lines (#1184585)
  - fix: OpenLDAP crash in NSS shutdown handling (#1158005)
  - fix: slapd.service may fail to start if binding to NIC ip (#1198781)
  - fix: deadlock during SSL_ForceHandshake when getting connection to replica (#1125152)
  - improve check_password (#1174723, #1196243)
  - provide an unversioned symlink to check_password.so.1.1 (#1174634)
  - add findutils to requires (#1209229)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-5
changelog:
  - add documentation reference to service file (#1087288)
  - fix: tls_reqcert try has bad behavior (#1027613)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-4
changelog:
  - support TLS 1.1 and later (#1160468)
  - fix: /etc/openldap/certs directory is empty after installation (#1064251)
  - fix: Typo in script to generate /usr/libexec/openldap/generate-server-cert.sh (#1087490)
  - fix: remove correct tmp file when generating server cert (#1103101)
  - fix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-21
changelog:
  - enable build for arm64 (#926610)
  - silence gcc warnings (lint fixes without risk from upstream) for RPMDiff


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-20
changelog:
  - allow extracting single volume from multi-volume archive (#919897)
  - usrmove: /bin/tar ~> /usr/bin/tar, selinux handling edit


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-19
changelog:
  - fix creating sparse pax archives containing files of effective
    size >8GB (#516309)
  - silence rpmlint (fix bad dates in changelog based on git log dates)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-17
changelog:
  - add possibility to 'rpmbuild' without %check phase
  - make the autoreconf phase verbose
  - re-create older patches (avoid offset warnings during patching)
  - remove patches which we don't need now (xattrs - will be updated, sigpipe -
    test should work now, partial revert of *at() conversion was done because of
    incompatible xattr patch)
  - add upstream up2date xattr patch


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-16
changelog:
  - make the info documentation more visible in manpage (#903666)
  - sync tar.1 manpage with actual --help output (e.g. added --skip-old-files)
  - add the last_help2man_run file to git repo to allow more easily find changes
    in --help in future
  - make the DEFAULTS section to be more visible in man page
  - verbose 'make check' only when some fail happened (append to koji build.log)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-13
changelog:
  - fix badly written macro for building --without-selinux
  - allow to build tar in difference CoverityScan by forcing the '.gets' patch to
    be applied even in the run without patches


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-12
changelog:
  - repair the xattr-gnulib-prepare patch to allow build tar without SELinux
    support
  - fedora-review compliance -> remove trailing white-spaces, remove macro from
    comment, remove BR of gawk;coreutils;gzip that should be covered automatically
    by minimum build environment, do not `rm -rf' buildroot at the beginning of
    install phase (needed only in EPEL), remove BuildRoot definition, remove
    defattr macro, s/define/global/
  - do not use ${VAR} syntax for bash variables, use just $VAR


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-10
changelog:
  - prepare Gnulib for new xattrs (#850291)
  - new version of RH xattrs patch (#850291)
  - enable verbose mode in testsuite to allow better debugging on error


author: Ondrej Vasik <ovasik@redhat.com> 2:1.26-7
changelog:
  - store&restore security.capability extended attributes category
    (#771927)
  - fix build failure with undefined gets


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-5
changelog:
  - fix for bad cooperation of the '-C' (change directory) and '-u' (update
    package) options (#688567)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.25-4
changelog:
  - mention that some compression options might not work if
    the external program is not available(#666755)


author: Kamil Dudka <kdudka@redhat.com> 2:1.23-6
changelog:
  - fix exclusion of long file names with --xattrs (#634866)
  - do not crash with --listed-incremental (#635318)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-17
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#572149)
  - realloc within check_exclusion_tags() caused invalid write
    (#570591)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#570591)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-12
changelog:
  - do not fail with POSIX 2008 glibc futimens() (#552320)
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc(#551206)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-4
changelog:
  - Report record size only if the archive refers to a device
    (#487760)
  - Do not sigabrt with new gcc/glibc because of writing to
    struct members of gnutar header at once via strcpy


author: Ondrej Vasik <ovasik@redhat.com> 2:1.21-1
changelog:
  - New upstream release 1.21, removed applied patches
  - add support for -I option, fix testsuite failure


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-3
changelog:
  - Fixed wrong documentation for xattrs options (#466517)
  - fixed bug with null file terminator and change dirs
    (upstream)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-1
changelog:
  - new upstream release 1.20 (lzma support, few new options
    and bugfixes)
  - heavily modified xattrs patches(as tar-1.20 now uses automake
    1.10.1)


author: Radek Brich <rbrich@redhat.com> 2:1.19-3
changelog:
  - do not print getfilecon/setfilecon warnings when SELinux is disabled
    or SELinux data are not available (bz#431879)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2:1.19-2
changelog:
  - fix errors in man page
    * fix definition of --occurrence (bz#416661, patch by Jonathan Wakely)
    * update meaning of -l: it has changed from --one-filesystem
      to --check-links (bz#426717)
  - update license tag, tar 1.19 is GPLv3+


author: Radek Brich <rbrich@redhat.com> 2:1.17-5
changelog:
  - fix (non)detection of xattrs
  - move configure stuff from -xattrs patch to -xattrs-conf,
    so the original patch could be easily read
  - fix -xattrs patch to work with zero length files and show
    warnings when xattrs not available (fixes by James Antill)
  - possible corruption (#408621) - add warning to man page
    for now, may be actually fixed later, depending on upstream


author: Radek Brich <rbrich@redhat.com> 2:1.17-1
changelog:
  - new upstream version
  - patch for wildcards (#206841), restoring old behavior
  - patch for testsuite
  - update -xattrs patch
  - drop 13 obsolete patches


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which
    one has write permission but does not own (such as /tmp) (#149686)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-9
changelog:
  + gnome-settings-daemon-3.26.2-9
  - Revert automatic suspend after inactivity, it was rejected
  - Related: #1449171


author: Ray Strode <rstrode@redhat.com> - 3.26.2-7
changelog:
  - Fix logic error in password expiration notification bubble
    Resolves: #1530659
    Related: 1314443


author: Richard Hughes <rhughes@redhat.com> - 3.10.0-2
changelog:
  - Grab a patch from upstream to fix the multiple notifications about updates.
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1009132


author: Richard Hughes <rhughes@redhat.com> - 3.9.91.1-2
changelog:
  - Grab a patch from upstream so that the offline updates feature can
    actually work when reboot returns with success.


author: Kalev Lember <kalevlember@gmail.com> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Remove empty /etc/gnome-settings-daemon directory
  - Install new rfkill plugin and add back the smartcard plugin


author: Kalev Lember <kalevlember@gmail.com> - 3.9.2-1
changelog:
  - Update to 3.9.2
  - Drop the ibus-kkc-libpinyin patch; the hardcoded input sources
    list is gone from g-s-d
  - Set the minimum required gnome-desktop3 version


author: Adam Williamson <awilliam@redhat.com> - 3.2.0-2
changelog:
  - backport some greatest hits from git to stop the same bugs being
    reported over and over (all will be in 3.2.1)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.28.1-2
changelog:
  - left-handed-touchpad.patch: change physical touchpad buttons to
    left-handed, not tapping though (#498249)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.27.91-2
changelog:
  - buttonmapping.patch: Don't check for IsXExtensionDevice, only skip button
    mappings for core devices instead (#502129).


author: Bastien Nocera <bnocera@redhat.com> 2.26.1-3
changelog:
  - Don't set touchpads to be left-handed, otherwise the tap
    behaves like the 2nd mouse button (#483639)


author: Ray Strode <rstrode@redhat.com> - 2.25.2-9
changelog:
  - Don't call SetPointerMapping when using Xinput since
    it duplicates effort but gets touchpads wrong (bug 324721)


author: Ray Strode <rstrode@redhat.com> - 2.25.2-6
changelog:
  - Listen for DeviceAdded signals when configuring mouse
    (in addition to DeviceEnabled).  This may help with
    bug 474758.


author: Lennart Poettering <lpoetter@redhat.com> - 2.23.6-2
changelog:
  - Apply patch from gnome bug 545386. This hasn't been accepted in this form yet
    by upstream, will however very likely be merged in a similar form.
  - Disable esd/sounds module since we don't need it to start PA anymore


author: Colin Walters <walters@redhat.com> - 2.23.3-2
changelog:
  - Add (now upstreamed) patch to legacy ESD preference; see
    http://bugzilla.gnome.org/show_bug.cgi?id=533198
    https://bugzilla.redhat.com/show_bug.cgi?id=430624


author: Ray Strode <rstrode@redhat.com> - 2.21.92-3
changelog:
  - Don't set keyboard model on startup from gconf if evdev is being used.
    Evdev needs to use its own keyboard model to work right.


author: Soren Sandmann <sandmann@redhat.com> - 2.21.91-3
changelog:
  - Add patch to make the xrandr plugin listen for client messages from
    the control panel and reread the configuration file.


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Lukáš Nykrýn <lnykryn@redhat.com> - 4.1.0-0.8.20120314git3c2946
changelog:
  - rebase to latest git snapshot
  - fix a crash when switching from altscreen after window resize (#784504)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.1.0-0.4.20110328git8cf5ef
changelog:
  - update to git snapshot 20110328git8cf5ef
  - clear scrollback buffer before locking linux terminal (#683733)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.1.0-0.1.20101110git066b098
changelog:
  - update to git snapshot 20101110git066b098
  - fix potential problems for Common Criteria certification
  - apply some xterm tweaks in default config also to xterm-* (#474064)
  - change socket directory to $HOME/.screen (#667252)
  - add bcond macro to build with multiuser support
  - convert info to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-16
changelog:
  - create socket directory on start with tmpfs (#652348)
  - add -4 and -6 options to man page (#650321)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-6
changelog:
  - fix BR 136234 by carrying out the suggested change in /etc/screenrc
  - drop screen-4.0.2-logname.patch (merged into screen-4.0.2-screenrc.patch)
  - grant wish 130674 by adding a (commented out) caption statement to default
    screenrc


author: Lon Hohberger <lhh@redhat.com> 4.0.1-1
changelog:
  - Import of 4.0.1 from upstream.
  - Removed screen-homedir hack introduced in 3.9.15-8.  (I
  was unable to reproduce the behavior described in #98320,
  and thus, the patch isn't necessary.)
  - Fix for buffer overflow from Timo Strainen (patch 7).
  - Fix for #111084 - we now require texinfo to build.
  - Comment out lines in screenrc causing screen to complain
  at startup.


author: Lon Hohberger <lhh@redhat.com> 3.9.15-8
changelog:
  - Change screen's behavior to do the following: Attempt to use
  ~/.screen as the screen directory.  Failing that (ie, on files
  systems without Unix sockets support), try using /tmp/screen-<USER>.
  This prevents a user from creating /tmp/screens (which inherits
  the sticky bit from /tmp, preventing other users from using screen),
  as well as *tries* to be more secure.


author: Lon Hohberger <lhh@redhat.com> 3.9.15-6
changelog:
  - Disable system-wide read/write dir in /tmp; use user's ~/.screen
  directory for screen sessions. (#98320)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 3.9.11
  - patch0/patch4 is not necessary anymore
  - do not compress man-pages/info-files in spec file
  - use configure to set telnet/screenrc instead of sed
  - add a hack to correctly install the new screenencodings
  - try to build up a better global /etc/screenrc instead of
    /etc/skel/.screenrc


author: Crutcher Dunnavant <crutcher@redhat.com> 3.9.9-3
changelog:
  - fixed screenrc path sed command; #50046
  - added ncurses-devel build dep; #49692
  - fix typo in specfile that broke screenrc, #49535


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Patched the documentation to change the 'C-a C-\' to 'C-a \',
  - which is what is the real behaviour. this fixes bug #16103


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Stuck an entry into the default screenrc file that forces
  - '^?' (backspace) to send '^H'.
  - Its an ugly fix for a termcap inheritance problem,
  - but it works, if anyone REALLY needs '^?' they can change it,
  - and I think we anger less people with this than the way it 
  - currently behaves. (Read: vi and emacs work now)
  - POST NOTE (Aug 15): emacs is NOT happy with ^H, BUT screen thinks
  - that this is what backspace is supposed to do, so we don't change it.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - got a patch from rzm@icm.edu.pl to fix bug #10353
  - which caused screen to crash when copying to a file buffer


author: Paul Howarth <paul@city-fan.org> - 1:5.02-4
changelog:
  - Don't BR: perl(Test::LeakTrace) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop explicit provides for perl(HTML::Tree) now that CPAN and RPM versions
    are back in sync


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Rob Crittenden <rcritten@redhat.com> - 0.0.7a-4
changelog:
  - Use setuptools to install the package
  - simplify the files included in the rpm so it includes the .egg-info


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-4
changelog:
  - Updated ibus-HEAD.patch for upstream.
  - Added ibus-xx-1.5.2.patch until 1.5.3 will be released.
  - Added ibus-xx-ctrl-space.patch for back compatible triggers.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-1
changelog:
  - Bumped to 1.5.2
  - Created noarch packages for python files due to .pyc and .pyo.
  - Added man pages.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20121109-1
changelog:
  - Bumped to 1.4.99.20121109
  - Removed im-chooser, imsettings-gnome, gnome-icon-theme-symbolic
    dependencies in f18 because ibus gnome integration is done.
    Use ibus-keyboard instead of input-keyboard-symbolic.
  - Disabled ibus-gjs build because of ibus gnome integration.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-2
changelog:
  - Updated ibus-530711-preload-sys.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-no-use.diff
    Fixed Bug 854161 - not able to add keymap with ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-1
changelog:
  - Bumped to 1.4.99.20120822
  - Bumped to ibus-gjs 3.4.1.20120815
    Fixed Bug 845956 - ibus backward trigger key is not customized
    Fixed Bug 844580 - ibus-dconf does not load the system gvdb
  - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-2
changelog:
  - Updated ibus-HEAD.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-branding-switcher-ui.patch
    Fixed Bug 810211 - Cancel Control + space pressing Control key.
  - Updated ibus-xx-no-use.diff
    Enabled to customize trigger keys with non-modifier trigger keys.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-1
changelog:
  - Bumped to 1.4.99.20120428
    Fixed Bug 799571 - no IME list at the session login.
    Fixed Bug 810415 - ibus does not handle Ctrl+space with BUTTON_PRESS.
  - Bumped to ibus-gjs 3.4.1.20120428
    Fixed Bug 802052 - no modifiers trigger keys.
    Fixed Bug 803244 - IME switch Ctrl+space not working on shell text entry.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120317-1
changelog:
  - Bumped to 1.4.99.20120317
    Fixed Bug 718668 - focus move is slow with ibus-gnome3
    Fixed Bug 749497 - Enhance IME descriptions in status icon active menu
  - Bumped to ibus-gjs 3.3.90.20120317
  - Added ibus-xx-no-use.diff
    Fixed Bug 803260 - Disable non-global input method mode
  - Updated ibus-HEAD.patch
    Fixed Bug 803250 - ibus lookup window font customization
    Fixed Bug 803177 - language id on ibus-ui-gtk3 switcher
  - Update ibus-530711-preload-sys.patch
    Fixed Bug 797023 - port preload engines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120303-3
changelog:
  - Bumped to ibus-gjs 3.3.90.20120308 to work with gnome-shell 3.3.90
  - Fixed Bug 786906 - Added ifnarch ppc ppc64 s390 s390x
  - Updated ibus-HEAD.patch
    Fixed Bug 800897 - After doing "ctrl+space", ibus tray icon freezes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-3
changelog:
  - Fixed ibus-setup on C locale
  - Fixed to show no registered engines from g-c-c.
  - Enabled Alt_R keybinding on ko locales for ibus gtk only.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-1
changelog:
  - Updated to 1.4.99.20120203
  - Removed ibus-xx-bridge-hotkey.patch
  - Updated ibus-541492-xkb.patch to use libgnomekbd.
  - Updated ibus-xx-setup-frequent-lang.patch for 1.4.99.20120203


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-17
changelog:
  - Added ibus-771115-property-compatible.patch for f16
    Fixed Bug 771115 - IBusProperty back compatibility.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-16
changelog:
  - Enhanced ibus-gnome3 shell lookup window.
  - Updated ibus-HEAD.patch from upstream
    Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 757889 - ibus-setup SEGV without active engine.
    Fixed Bug 760213 - ibus-setup saves XKB variants correctly.
    Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings.
  - Updated ibus-xx-bridge-hotkey.patch for an enhancement.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-14
changelog:
  - Enabled dconf.
  - Updated ibus-HEAD.patch
    Fixed Bug 618229 - engine setup buton on ibus-setup.
  - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed.
  - Updated ibus-xx-bridge-hotkey.patch
    Removed Enable/Disable buttons on ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-11
changelog:
  - Updated ibus-541492-xkb.patch
    Fixed Bug 750484 - support reloading Xmodmap
  - Updated ibus-HEAD.patch
    Fixed Bug 753781 - ibus-x11 needs async for hangul ibus_commit_text.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-10
changelog:
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed no XKB languages from layout only. e.g. in(eng).
  - Updated ibus-541492-xkb.patch
    Fixed not to show 'eng' on GUI for in(eng).


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-9
changelog:
  - Updated ibus-HEAD.patch
    Fixed prev/next keys without global engine.
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed Bug 747902 - mouse and ctrl+space not working
    Fixed Bug 749770 - IME hotkey after Control + Space
  - Updated ibus-711632-fedora-fallback-icon.patch
    Fixed Bug 717831 - use old icon for desktops other than gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-2
changelog:
  - Updated to 1.4.0
  - Updated ibus-gjs 3.0.2.20110928 for f15.
  - Updated ibus-gjs 3.2.0.20110928 for f16. (#740588)
  - Updated ibus-530711-preload-sys.patch
    Fixed not to show duplicated engine names in setup treeview (#740447)
  - Updated bus-gjs-xx-gnome-shell-3.1.4-build-failure.patch for f16.
  - Updated ibus-xx-bridge-hotkey.patch
    Fixed a XKB configuration without the input focus for f16 (#739165)
    Fixed not to show null strings in case of no variants (#738130)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-4
changelog:
  - Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
    Fixed preedit active segments on gnome-shell and X11 apps.
  - Added ibus-xx-g-s-disable-preedit.patch
    Disabled preedit on gnome-shell for a workaround.
  - Updated ibus.spec
    Fixed Bug 735879 pre/postun scripts


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-3
changelog:
  - Fixed Bug 700472 Use a symbol icon instead of an image icon.
  - Updated ibus-HEAD.patch for upstream.
  - Removed ibus-435880-surrounding-text.patch as upstream.
  - Added ibus-711632-fedora-fallback-icon.patch
    Fixed SEGV with no icon in oxygen-gtk icon theme.
  - Added ibus-xx-bridge-hotkey.patch
    Triaged Bug 707370 SetEngine timeout
    Fixed Bug 731610 Keep IM state when text input focus changes
  - Added transitional ibus-gnome3 package.
    Fixed Bug 718110 Use a shell icon instead of pygtk2 icon.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110419-1
changelog:
  - Updated to 1.3.99.20110419
  - Added ibus-HEAD.patch
    Fixed Bug 697471 - ibus-gconf zombie when restart ibus from ibus panel.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 701202 - us(dvorak) does not show up in list
    Updated ibus-1.0.pc for ibus-xkb
    Showed XKB variant descriptions only without layout descriptions.
  - Updated ibus-xx-setup-frequent-lang.patch
    Updated UI strings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110408-1
changelog:
  - Updated to 1.3.99.20110408
    Fixed Bug 683484 - Timed out SetEngine when select an engine from panel.
    Fixed Bug 657165 - IBus for gnome-shell for Fedora 15.
  - Upstreamed ibus-657165-panel-libs.patch
  - Removed ibus-675503-gnome-shell-workaround.patch
  - Added ibus-xx-setup-frequent-lang.patch
  - Updated ibus-541492-xkb.patch
    Fixed Bug 696481 - no the variant maps without language codes
  - Added dependency of imsettings-gnome.
    Fixed Bug 696510 - need a dependency in ibus-gtk3 for imsettings-gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110228-1
changelog:
  - Updated to 1.3.99.20110228
  - Integrated the part of gjs in Bug 657165 ibus for gnome-shell.
    Added ibus-657165-panel-libs.patch
    Added gnome-shell-ibus-plugins-20110304.tar.bz2
  - Fixed Bug 675503 - a regression in sync mode
    Added ibus-675503-gnome-shell-workaround.patch until gnome-shell is updated.
  - Fixed Bug 677856 - left ibus snooper when im client is switched.
  - Fixed Bug 673047 - abrt ibus_xkb_get_current_layout for non-XKB system
    Updated ibus-541492-xkb.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110117-1
changelog:
  - Updated to 1.3.99.20110117
  - Fixed Bug 666427 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20101202-1
changelog:
  - Updated to 1.3.99.20101202
  - Added ibus-530711-preload-sys.patch
    Fixed Bug 530711 - Reload preloaded engines by login


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Added ibus-541492-xkb.patch
    Fixes Bug 541492 - ibus needs to support some xkb layout switching
  - Added ibus-435880-surrounding-text.patch
    Fixes Bug 435880 - ibus-gtk requires surrounding-text support
  - Added ibus-xx-workaround-gtk3.patch
    Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604


author: Peng Huang <phuang@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091225-1
changelog:
  - Update to 1.2.0.20091225
  - Fix bug 513895 - new IME does not show up in ibus-setup
  - Fix bug 531857 - applet order should correspond with preferences order
  - Fix bug 532856 - should not list already added input-methods in Add selector


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091204-1
changelog:
  - Update to 1.2.0.20091204
  - Fix Bug 529920 - language panel pops up on the wrong monitor
  - Fix Bug 541197 - Ibus crash


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091124-1
changelog:
  - Update to 1.2.0.20091124
  - Update some translations.
  - Fix bug 538147 - [abrt] crash detected in firefox-3.5.5-1.fc12


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090915-1
changelog:
  - Update to 1.2.0.20090915
  - Fix bug 521591 - check if the icon filename is a real file before trying to open it
  - Fix bug 522310 - Memory leak on show/hide
  - Fix bug 509518 - ibus-anthy should only override to jp layout for kana input


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090828-1
changelog:
  - Update to 1.2.0.20090828
  - Change the icon on systray.
  - Fix segment fault in ibus_hotkey_profile_destroy
  - Fix some memory leaks.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090612-1
changelog:
  - Update to 1.1.0.20090612
  - Fix bug 504942 - PageUp and PageDown do not work in candidate list
  - Fix bug 491040 - Implememnt mouse selection in candidate list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090609-1
changelog:
  - Update to Update to 1.1.0.20090609
  - Fix bug 502414 - Implemented on-screen help facility
  - Fix bug 502561 - iBus should show keymap name on iBus panel
  - Fix bug 498043 - ibus Alt-grave trigger conflicts with openoffice.org
  - Implemented API for setting labels for candidates in LookupTable


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-5
changelog:
  - Update ibus-HEAD.patch.
  - Show the default input method with bold text
  - Add information text below input methods list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-4
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 501211 - ibus-setup window should be raised if running or just stay on top/grab focus
  - Fix bug 501640 - ibus should adds new IMEs at end of engine list not beginning
  - Fix bug 501644 - [IBus] focus-out and disabled IME should hide language panel


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-2
changelog:
  - Remove requires notification-daemon
  - Fix bug 500588 - Hardcoded requirement for notification-daemon


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-1
changelog:
  - Update to 1.1.0.20090508
  - Fix bug 499533 - [Indic] ibus should allow input in KDE using all supported Indic locales
  - Fix bug 498352 - hotkey config table should list keys in same order as on main setup page
  - Fix bug 497707 - ibus French translation update


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-2
changelog:
  - Fix bug 498141 - new ibus install needs gtk immodules
  - Separate ibus document from ibus-devel to ibus-devel-docs


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-1
changelog:
  - Update to ibus-1.1.0.20090423.
  - Fix bug 497265 - [mai_IN] Maithili language name is not correct.
  - Fix bug 497279 - IBus does not works with evolution correctly.
  - Enhance authentication both in daemon & clients


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090417-1
changelog:
  - Update to ibus-1.1.0.20090417.
  - Fix bug 496199 -  cannot remove Ctrl+Space hotkey with ibus-setup


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-3
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 495431 -  ibus Release modifier doesn't work with Alt
  - Fix bug 494445 -  ibus-hangul missing Hangul Han/En mode
    (and Alt_R+release hotkey)
  - Update te.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-2
changelog:
  - Update ibus-HEAD.patch.
  - Change the mode of /tmp/ibus-$USER to 0700 to improve security
  - Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
  - Update as.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-3
changelog:
  - Update the tarball.
  - Fix bug 494511 - ibus-gtk makes gnome-terminal abort 
    when a key is pressed


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-1
changelog:
  - Update to ibus-1.1.0.20090407.
  - Fix bug 491042 - ibus default trigger hotkeys
  - Fix bug 492929 - ibus-hangul can cause gtk app to lockup
  - Fix bug 493701 -  (ibus) imsettings disconnect/reconnect kills gtk app
  - Fix bug 493687 -  ibus-hangul should default to vertical candidate selection
  - Fix bug 493449 -  ibus broke Alt-F2 command auto-completion


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090331-1
changelog:
  - Update to ibus-1.1.0.20090331.
  - Fix bug 492956 - screws up keyboard input in firefox
  - Fix bug 490143 - ibus issue with gnome-keyring


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-3
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree
  - Fix bug 491999 - up/down arrow keys broken in xchat


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-2
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Fix bug 490009 - Deleting Next Engine shortcuts doesn't work
  - Fix bug 490381 - Change "Next/Previous engine" labels


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-1
changelog:
  - Update to ibus-1.1.0.20090311.
  - Update setup ui follow GNOME Human Interface Guidelines 2.2 (#489497).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090225-1
changelog:
  - Update to ibus-1.1.0.20090225.
  - Fix problems in %post and %postun scripts.
  - Hide ibus & ibus preferences menu items.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-10
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Put 'Select an input method' in engine select combobox (#485861).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-6
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - The new patch fixes ibus-x11 segfault (#485661).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-1
changelog:
  - Add --xim argument in xinput-ibus
  - Add Obsoletes:  ibus-qt <= 1.1.0
  - Move libibus.so.* to ibus-libs to make ibus multilib.
  - Update to 1.1.0.20090211.


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Rui Matos <rmatos@redhat.com> - 3.4.0-2
changelog:
  - Use rpm macros to define the version number
  - Do verbose builds
  - Fix %files entries to comply with ownership rules


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.1.0-11
changelog:
  - 1071397 - Load i2c-dev module when i2cdetect is executed
  - 1195285 - Ship modprobe.d files in /usr/lib/modprobe.d


author: Jaromir Capik <jcapik@redhat.com> - 3.1.0-5
changelog:
  - Introducing man pages for binaries in the eepromer subpackage
  - Introducing -r switch in the i2cset help


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.0-3
changelog:
  - Change /dev/i2c-# creation from /lib/udev/devices to /etc/udev/makedev.d
    usage
  - Add an /etc/modprobe.d/i2c-dev file to work around bug 380971


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
  - Remove epel dependencies
  - Change tpm2-tss dependency to not be tied to 1 version
  - Fix resource leak in InitSysContext
  - Clean up HashEKPublicKey
  - Add needed null checks to tpm2_getmanufec
  - clean up resource leak in tpm2_getmanufec
  - use strdup to get server address in tpm2_getmanufec
  - change preparePcrSelections_g to void
  - return on success in print_rc_tpm_error_code
  - Update release version
  resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-3
changelog:
  - Change spec file permission to 644 to avoid rpmlint complain
  - Update Requires to fix dependency check error reported in Bodhi
  - Remove tpm2-tss-devel version in BuildRequires comment
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Remove pkg_version to avoid dupliate use of version
  - Remove redundant BuildRequires for autoconf/automake/pkgconfig
  - Add comments for BuildRequires of sapi/tcti-device/tcti-socket
  - Use ExclusiveArch instead of ExcludeArch
  - Requires tpm2-tss version updated to 1.0-2
  - Updated release version and changelog


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-18
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1402862
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1700544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-12
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1645170
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1650526
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1350908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-8
changelog:
  - fence_aliyun: add logging
    Resolves: rhbz#1568742
  - fence_gce: add stackdriver-logging support, improve logging and
    set default mode to cycle
    Resolves: rhbz#1568753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-1
changelog:
  - rebase to v4.2.1
    Resolves: rhbz#1236395
  - fence_mpath: add watchdog support
    Resolves: rhbz#1504202


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-90
changelog:
  - fence_gce: new fence agent
    Resolves: rhbz#1568753
  - fence_rhevm: dont require --ssl parameter when using --ssl-insecure
    Resolves: rhbz#1544093
  - fence_mpath: fix preemptive abort
    Resolves: rhbz#1556857
  - fence-agents-all: dont show manpage-tags in metadata
    Resolves: rhbz#1553908
  - fence_scsi: dont write duplicates to .dev-file
    Resolves: rhbz#1575973
  - fence_impilan: add iLO5-support
    Resolves: rhbz#1579391


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-87
changelog:
  - fence_azure_arm: add network-fencing
    Resolves: rhbz#1553904
  - fence_compute/fence_evacuate: fix parameters
    Resolves: rhbz#1559977


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-86
changelog:
  - fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
    dependencies
    Resolves: rhbz#1476009


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-83
changelog:
  - fence_compute/fence_evacuate: add support for keystone v3 authentication
    Resolves: rhbz#1533170
  - fence_ilo3: default to onoff
    Resolves: rhbz#1519370


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-68
changelog:
  - fence_compute/fence_scsi: fix issue with some parameters
    Resolves: rhbz#1473860
  - fence_compute/fence_evacuate: changes to support Instance HA on OSP12
    Resolves: rhbz#1496390
  - fence-agents-common: remove fence_scsi_check-files that should only be in
    the scsi subpackage
    Resolves: rhbz#1484128


author: Marek Grac <mgrac@redhat.com> - 4.0.11-57
changelog:
  - Set SELinux booleans required for fence agent integration with cluster
    Resolves: rhbz#1427986
  - Add consistency of parameters between STDIN and command-line
    Resolves: rhbz#1403028


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-56
changelog:
  - fencing: add validate-all action
    Resolves: rhbz#1433948
  - fence_rhevm: add "--disable-http-filter" to be able to explicitly
    use oVirt API version 3
    Resolves: rhbz#1422499


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-52
changelog:
  - fence_compute: fix ConnectionError
    Resolves: rhbz#1384073
  - fence_lpar: add IVM support and improve error handling
    Resolves: rhbz#1376481
  - fence_vmware_soap: suppress warning for --ssl-insecure
    Resolves: rhbz#1393962
  - Add support for "s" for seconds for delay, *_timeout, *_wait parameters
    Resolves: rhbz#1377928
  - fence-agents-zvm: add to fence-agents-all dependencies for s390x
    Resolves: rhbz#1255700
  - Build for ppc64le
    Resolves: rhbz#1402566


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-34
changelog:
  - fence_virsh: add --missing-as-off
    Resolves: rhbz#1254821
  - fence_ipmilan: fix power_wait regression
    Resolves: rhbz#1275250
  - fence_ipmilan: add diag action
    Resolves: rhbz#1286045
  - fence_ipmilan: warn that cycle method can report success before node
    is powered off
    Resolves: rhbz#1271780
  - fence_scsi: fix persistentl typo in short desc
    Resolves: rhbz#1280139
  - fence_scsi: remove /dev/dm-X reference
    Resolves: rhbz#1280151
  - fence_rhevm: add Filter header
    Resolves: rhbz#1287059
  - fence_compute: fix to locate all instances to be evacuated
    Resolves: rhbz#1313561


author: Marek Grac <mgrac@redhat.com> - 4.0.11-24
changelog:
  - fence_ipmilan: Add removed attributes -i & timeout
    Resolves: rhbz#1257137
  - fence_ipmilan: Do not print password in verbose mode
    Resolves: rhbz#1241648
  - fence_ilo: Negotiation of TLS1.0 is more automatic
    Resolves: rhbz#1256908


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly

  bz1102727-3-fence_mpath.patch bz1250586-2-list_status.patch


author: Marek Grac <mgrac@redhat.com> - 4.0.11-18
changelog:
  - fence_rsa: Fix login issue
    Resolves: rhbz#1185329
  - fencing: support for list-status
    Resolves: rhbz#1250586
  - fencing: Fix support for --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-16
changelog:
  - fence_compute: Agent cleanup
    Resolves: rhbz#1214359
  - fence_hpblade: Add support for HP Integrity Superdome
    Resolves: rhbz#1216997
  - fence_zvmip: Add --missing-as-off and change monitor/status actions
    Resolves: rhbz#1188750
  - fence_mpath: new fence agent
    Resolves: rhbz#1102727
  - fencing: Option --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-14
changelog:
  - fence_rhevm: Add authentication via cookies
    Resolves: rhbz#1145769
  - fence_ilo_moonshot: New fence agent
    Resolves: rhbz#1152917
  - fence_emerson: New fence agent
    Resolves: rhbz#1171732
  - fence_rsa: New fence agent
    Resolves: rhbz#1185329


author: Marek Grac <mgrac@redhat.com> - 4.0.11-13
changelog:
  - fence_scsi: Add monitor operation
    Resolves: rhbz#1213571
  - fence_scsi: Force unfence if any of paths is off
    Resolves: rhbz#1214919
  - fence_cisco_ucs: Fix https:// prefix with --ssl-(in)secure
    Resolves: rhbz#1165591
  - fence_kdump: Add monitor operation
    Resolves: rhbz#1196068
  - fence2rng: Fix problem with quotes
    Resolves: rhbz#1207982


author: Marek Grac <mgrac@redhat.com> - 4.0.11-11
changelog:
  - fence_ipmilan: Unset default cipher
    Resolves: rhbz#1203877
  - fence_ilo2: Add --tls1.0
    Resolves: rhbz#1199970
  - update scripts so 'make check' is working again


author: Marek Grac <mgrac@redhat.com> - 4.0.11-9
changelog:
  - fence_ilo_ssh: Fix EOL issue, syslog problem and add fence_ilo_[34]_ssh symlink
    Resolves: rhbz#1121122


author: Marek Grac <mgrac@redhat.com> - 4.0.11-6
changelog:
  - fence_cisco_ucs and fence_vmware_soap should logout even in case of failure
    Resolves: rhbz#1111599
  - fence_vmware_soap: Fix issue with import of fail_usage
    Resolves: rhbz#1153059


author: Marek Grac <mgrac@redhat.com> - 4.0.11-5
changelog:
  - fence_wti: Fix problem with EOL introduced by rebase
    Resolves: rhbz#1148762
  - fence_rsb: Fix issue with new firmware 
    Resolves: rhbz#1111597


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 4.0.2-17
changelog:
  - Fix fence-agents-* Requires on proper fence-agents-common and silence
    suds error
    Resolves: rhbz#1018780


author: Marek Grac <mgrac@redhat.com> - 4.0.2-14
changelog:
  - fence_vmware_soap: Fix unexpected exception
    Resolves: rhbz#1018780
  - nss_wrapper was replaced by gnutls-cli
    Resolves: rhbz#990539


author: Marek Grac <mgrac@redhat.com> - 4.0.2-13
changelog:
  - fencing: Do not use public key if identity file is not defined
    Resolves: rhbz#1048843
  - fence_vmware_soap: Add support for --delay option
    Resolves: rhbz#1057299
  - fence_wti: Add support for named groups (also for firmware 1.43)
    Resolves: rhbz#1022536


author: Marek Grac <mgrac@redhat.com> - 4.0.2-10
changelog:
  - fix default action for fabric fencing agents
    Resolves: rhbz#1021392
  - modify key generation in fence_scsi to support pacemaker/corosync cluster
    Resolves: rhbz#994466


author: Marek Grac <mgrac@redhat.com> - 4.0.2-8
changelog:
  - fence-agents-all now includes fence-virt which is not available everywhere
    Resolves: rhbz#1028940


author: Marek Grac <mgrac@redhat.com> - 4.0.2-6
changelog:
  - fencing: Ensure validity of XML metadata using Relax NG 
    Resolves: rhbz#1022529
  - fencing: Fix invalid use of options[".."]
    Resolves: rhbz#1022533
  - fence_brocade: Add fence agent
    Resolves: rhbz#1021392


author: Marek Grac <mgrac@redhat.com> - 4.0.2-5
changelog:
  - fence_vmware_soap: Report if user privileges are not enough for given operation
    Resolves: rhbz#1018780
  - fence_wti: Add support for named groups
    Resolves: rhbz#1022536
  - fence_rsb: Update regular expression to match newer firmware version
    Resolves: rhbz#1022538


author: Marek Grac <mgrac@redhat.com> - 4.0.2-4
changelog:
  - fence_vmware_soap: Disable cache in SUDS library to resolve SELinux problems
    Resolves: rhbz#1022528
  - fencing: Add information that operation 'unfence' should be run automatically after start of the cluster
    Resolves: rhbz#1012994
  - Aligned to upstream 4.0.4


author: Marek Grac <mgrac@redhat.com> - 4.0.2-3
changelog:
  - fence_bladecenter: Fix telnet login failure
  - fence_brocade: Rewrite to fencing library
  - fencing_snmp: Fix 'KeyError --a'
  - fence_scsi: Fix XML metadata
  - fence_scsi: Add a documentation of "delay"
  - fence_ilo2: Unable to login when password contains "


author: Jeff Moyer <jmoyer@redhat.com> - 1.5.1-1.el7
changelog:
  - rebase to pmdk 1.5.1
    - libpmemobj C++ bindings moved to separate package
    - pmempool convert is now a thin wrapper around pmdk-convert
    - add ownership information for libpmemobj headers directory
    - remove broken pmemcto library
  - Related: rhbz#1634347


author: Jeff Moyer <jmoyer@redhat.com> - 1.2.1-1.el7
changelog:
  - Update to latest stable release
  - Pull in pending stable patches for the test harness
  - disable % check temporarily until all test issues are resolved
  - Resolves: bz#1383467 bz#1382407


author: Krzysztof Czurylo <krzysztof.czurylo@intel.com> - 1.1-1
changelog:
  - NVML 1.1 release
  - Update link to source tarball
  - Add libpmempool subpackage
  - Remove obsolete patches


author: Chris Spike <spike@fedoraproject.org> 2.1-1.tzdata2012g
changelog:
  - Updated to 2.1
  - New tzdata (2012g)
  - Updated spec file according to latest java packaging guidelines


author: Chris Spike <spike@fedoraproject.org> 1.6.2-1.tzdata2010l
changelog:
  - New upstream version (1.6.2)
  - Removed dependency on main package for -javadoc subpackage
  - Replaced summary with latest version
  - Switched from ant to maven (no build.xml any more)
  - Added patch to remove maven toolchain from pom.xml


author: Conrad Meyer <konrad@tylerc.org> - 1.5.2-4.tzdata2008b
changelog:
  - Update to tzdata2008b.
  - Use unversioned jar.
  - Some small things to comply with Java Packaging Guidelines.
  - GCJ support.


author: Conrad Meyer <konrad@tylerc.org> - 1.5.2-3.tzdata2008a
changelog:
  - Many small changes from bz# 436239 comment 6.
  - Change -javadocs to -javadoc in accordance with java packaging
    guidelines draft.


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Jan Grulich <jgrulich@redhat.com> - 1:0.20.0-10
changelog:
  - Add check for user UID when connecting to pipe (#1005261)
  - Add length check in stunEncodeMessage (#1005218)
  - Add sign and overflow checks (#1005219)
  - Remove hardcoded username and password (#1005216)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - (re) add bootstrap macro support
  - drop geoclue(1) dep (unused at build time anyway (#1286886)
  - drop (deprecated) gypsy support (#1069225)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.15-1
changelog:
  - Update to m4-1.4.15 (removed include patch, already applied in upstream source)
    Resolves: #630709


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Miloslav Trmac <mitr@redhat.com> - 1.4.5-3
changelog:
  - Use the install-info scriptlets recommended in the Fedora Extras wiki
  - Move $RPM_BUILD_ROOT cleaning from %prep to %install


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add URL tag
  - improved spec file
  - add hack to update config.guess config.sub
  - fix to build with newer autoconf versions


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-39
changelog:
  - adjust logging of statfs (#1314610)
  - link libnetsnmptrapd against MYSQL LIBS (#1468084)
  - expand SNMPCONFPATH (#1514501)
  - remove date in mailheader (#1585940)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-35
changelog:
  - Add fsync to prevet data lose on power failure (#1520761)
  - Add ZFS support (#1533943)
  - Fix man page (#1537460)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-27
changelog:
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
  - snmpd: Speed up ipAddressTable loading. (#1327240)
  - Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
  - Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-19
changelog:
  - Fixed not-increasing OIDs in IP-FORWARD-MIB::ipCidrRouteTable (#1172013)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070076)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086606)
  - Added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#1086925)
  - fixed proxying of out-of-tree GETNEXT requests (#1087801)
  - use python/README to net-snmp-python subpackage (#1158391)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-17
changelog:
  - fixed various error codes in Python module (#1064338)
  - fixed net-snmp-config.h header file (#1064437)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-14
changelog:
  - move tmpfiles.d config file to /usr/lib (#881218)
  - fixed dashes in net-snmp-config.h (#1038642)
  - fixed snmpd crashing on monitor trigger evaluation (#1050971)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-11
changelog:
  - fixed parsing of integer variable sizes (#953926, #983116)
  - added support of simfs and vzfs to hrStorageTable (#861152, #989498)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-9
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#978384)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#978398)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919240)
  - fixed kernel threads in hrSWRunTable (#979329)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#969061)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks if
    'includeAllDisks' is specified in snmpd.conf (#982644)
  - fixed crash in extTable on empty command line (#955609)
  - lowered severity of few debugging messages in dot3statsTable (#915302)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-8
changelog:
  - Removed APSL patch (#830796)
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)
  - Python: fixed IPADDRESS size on 64-bit systems (#895357)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - Removed unused patch
  - Added net-snmp-agent-libs dependency where appropriate
  - Added full relro
  - Make net-snmp-create-v3-user multilib safe


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-5
changelog:
  - Fixed snmpd in FIPS mode (#874440)
  - Removed APSL licensed code (#830796)
  - Synchronized with RHEL-6.4


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Brian Pepple <bpepple@fedoraproject.org> - 0.5.2-1
changelog:
  - Update to 0.5.2.
  - Bump minimum version of tp-glib needed.
  - Drop olpc-activity-properties patch. Fix upstream.
  - Drop buildroot. No longer necessary
  - Drop no-xmldiff patch. No longer needed.


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.3
changelog:
  - Remove dependencies no longer needed by modern IcedTea 1.x and current RPM build.
  - Explicitly disable downloading, removing the need for wget.
  - Resolves: rhbz#1308687


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235154


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Add ExcludeArch directive for RH1209326
  - Resolves: rhbz#1209068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148902


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115870
  - forwardported from rhel 6.6, patch10, add-final-location-rpaths.patch (rh1059925)
   - Work when capabilities are set on the binary
   - Include hardcoded install path as well as $ORIGIN in RPATH
   - Don't Expect LD_LIBRARY_PATH to be set in the launcher


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1099563


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed upstreamed  patch103 type_hsx23_patch3.patch
  - Resolves: rhbz#1053279


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - removed patch100: 8000791-regression-fix.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - added:
     - Patch103 type_hsx23_patch3.patch
     - Patch104 type_hsx23_patch4.patch
   -to fix zero type error
   -aplied everywhere, as should go upstream
  - Resolves: rhbz#1018679


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.64.1.11.12
changelog:
  - Removed the temporary libffi-compat-5 requirement
  - Updated BR to java6-1.6.0-devel
  - Build with OpenJDK6 specifically


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - omajid have added Patch6 as (probably temporally) solution for S7103224 for buildability on newest glibc libraries.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - updated to icedtea6 1.10.4
  - Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
    - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
  - Bug fixes
    - RH727195 : Japanese font mappings are broken
  - Backports
    - S6826104, RH730015: Getting a NullPointer exception when clicked on Application & Toolkit Modal dialog
  - Zero/Shark
    - PR690: Shark fails to JIT using hs20.
    - PR696: Zero fails to handle fast_aldc and fast_aldc_w in hs20.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-59.1.10.3
changelog:
  - updated to icedtea6 1.10.3
  - http://blog.fuseyism.com/index.php/2011/07/21/icedtea6-1103-released/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.9.15-1
changelog:
  - Update to 0.9.15 (for redland 1.0.7, also lots of bugfixes)
  - Update minimum raptor version
  - BR perl(XML::DOM) (needed by the testsuite)


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.12-2
  - fixed x86_64 rpath issue with an ugly hack
  - removed OPTIMIZE from make invocation
  - added smp flags
  - added make check
  - updated license


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698502


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-6
changelog:
  - Require libguestfs 1.7.17 (newer version in RHEL 6.1).
  - Require febootstrap-supermin-helper instead of febootstrap
    resolves: RHBZ#670299.


author: Colin Walters <walters@verbum.org> - 1:1.6.12-2
changelog:
  - Enable all upstream tests
    Resolves: #955532
    This is fairly hacky; a much better replacement would be
    something like the InstalledTests system.  But we have to live
    with rpm and stuff for now...


author: Colin Walters <walters@verbum.org>
changelog:
  - Update to 1.4.20; closes #806082
  - Ensure /var/lib/dbus exists; this seems to have been
    dropped from upstream build rules.
  - Adapt to documentation actually being installed


author: Lennart Poettering <lpoetter@redhat.com> - 1:1.4.10-3
changelog:
  - Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled.
  - https://bugzilla.redhat.com/show_bug.cgi?id=732426


author: Colin Walters <walters@verbum.org> - 1:1.4.10-1
changelog:
  - New upstream version
  - Drop XML docs patch which is now upstream
  - Drop devhelp stuff; people should be using GDBus now.  If you
    don't, the raw doxygen is fine.


author: Colin Walters <walters@verbum.org> - 1:1.2.18-1
changelog:
  - New upstream release
    Drop all upstreamed patches.
  - start-early.patch had both bindir changes and start-early; the
    latter was upstreamed, so start-early is now bindir.patch.
    Ideally later get this partial-bindir stuff upstream.


author: Colin Walters <walters@verbum.org> - 1:1.2.16-11
changelog:
  - Drop dbus-libs requiring dbus; this was unnecessary for programs
    which happened to speak the dbus protocol but don't require
    the daemon.
    Note that libdbus does support autolaunching dbus-daemon in
    the session as an emergency fallback for legacy situations; however,
    these cases were likely to have dbus installed already (via comps).
    If they don't, well one turned to the wrong page in the choose your
    own adventure book.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el7_6
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el7_6
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy
  reload happens.  dbus -session will no longer try to send audit message,
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el7_6
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions.
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been
    integrated upstream
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-23
changelog:
  - Fix flaws in LDAP DN checking (CVE-2018-5729, CVE-2018-5730)
  - Resolves: #1562684
  - Resolves: #1562679


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - Rebase to new upstream version 1.14.1
  - Remove pax logic
  - Resolves: #1292153
  - Resolves: #1135427
  - Resolves: #1265509
  - Resolves: #1265510
  - Resolves: #1296241


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed RH
    bug #1156144 ("krb5 upstream test t_kdb.py failure")


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - fix for CVE-2015-2694 (#1218020) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-0
changelog:
  - Update to krb5-1.13.1
    - patch krb5-1.12-selinux-label was updated and renamed to krb5-1.13-selinux-label
    - patch krb5-1.11-dirsrv-accountlock was updated and renamed to krb5-1.13-dirsrv-accountlock
    - drop patch for krb5-1.12-pwdch-fast, fixed in krb5-1.13
    - drop patch for krb5-1.12ish-kpasswd_tcp, fixed in krb5-1.13
    - drop patch for krb5-master-rcache-internal-const, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-cleanup, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-source, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-test, no longer needed
    - drop patch for krb5-master-move-otp-sockets, no longer needed
    - drop patch for krb5-master-mechd, no longer needed
    - drop patch for krb5-master-strdupcheck, no longer needed
    - drop patch for krb5-master-compatible-keys, no longer needed
    - drop patch for krb5-1.12-system-exts, fixed in krb5-1.13
    - drop patch for 0001-In-ksu-merge-krb5_ccache_copy-and-_restricted, no longer needed
    - drop patch for 0002-In-ksu-don-t-stat-not-on-disk-ccache-residuals, no longer needed
    - drop patch for 0003-Use-an-intermediate-memory-cache-in-ksu, no longer needed
    - drop patch for 0004-Make-ksu-respect-the-default_ccache_name-setting, no longer needed
    - drop patch for 0005-Copy-config-entries-to-the-ksu-target-ccache, no longer needed
    - drop patch for 0006-Use-more-randomness-for-ksu-secondary-cache-names, no longer needed
    - drop patch for 0007-Make-krb5_cc_new_unique-create-DIR-directories, no longer needed
    - drop patch for krb5-1.12-kpasswd-skip-address-check, fixed in krb5-1.13
    - drop patch for 0000-Refactor-cm-functions-in-sendto_kdc.c, no longer needed
    - drop patch for 0001-Simplify-sendto_kdc.c, no longer needed
    - drop patch for 0002-Add-helper-to-determine-if-a-KDC-is-the-master, no longer needed
    - drop patch for 0003-Use-k5_transport-_strategy-enums-for-k5_sendto, no longer needed
    - drop patch for 0004-Build-support-for-TLS-used-by-HTTPS-proxy-support, no longer needed
    - drop patch for 0005-Add-ASN.1-codec-for-KKDCP-s-KDC-PROXY-MESSAGE, no longer needed
    - drop patch for 0006-Dispatch-style-protocol-switching-for-transport, no longer needed
    - drop patch for 0007-HTTPS-transport-Microsoft-KKDCPP-implementation, no longer needed
    - drop patch for 0008-Load-custom-anchors-when-using-KKDCP, no longer needed
    - drop patch for 0009-Check-names-in-the-server-s-cert-when-using-KKDCP, no longer needed
    - drop patch for 0010-Add-some-longer-form-docs-for-HTTPS, no longer needed
    - drop patch for 0011-Have-k5test.py-provide-runenv-to-python-tests, no longer needed
    - drop patch for 0012-Add-a-simple-KDC-proxy-test-server, no longer needed
    - drop patch for 0013-Add-tests-for-MS-KKDCP-client-support, no longer needed
    - drop patch for krb5-1.12ish-tls-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-nodelete-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-untyped-default-ccache-name, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-no-ccache, fixed in krb5-1.13.1
    - drop patch for krb5-ksu_not_working_with_default_principal, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5354_support_keyless_principals_in_ldap, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
    - added patch krb5-1.14-Support-KDC_ERR_MORE_PREAUTH_DATA_REQUIRED
    - added patch krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.2-5
changelog:
  - -desktoptheme, -drkonqi, -kio-smb subpkgs (#855930)
  - drop hard Requires: htdig (#855930)
  - remove .spec cruft


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - active-development-4.7-diff.patch
  - omit activitymanger unconditionally
  - drop dep on libkactivities


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.1-2
changelog:
  - Requires: hal-storage-addon (f14+)
  - drop <f11 Conflicts baggage
  - plasma-scriptengine-javascript-4.4-errata


author: Nils Philippsen <nils@redhat.com> - 4.3.1-3
changelog:
  - if available, use the "manpath" command in the man kioslave to determine man
    page file locations


author: Lukáš Tinkl <ltinkl@redhat.com> - 4.3.0-3
changelog:
  - fix Oxygen comboboxes' text being garbled (drawn twice); fixes kdebug:202701
  - fix Locale control module crashing when dragging languages around (kdebug:201578)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-2
changelog:
  - Files not trashed to the correct location in Dolphin/Konqueror
    (#481598, kdebug#178479)
  - omit --with-samba crud


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-5
changelog:
  - don't ship libkwalletbackend.so devel symlink (conflicts with kdelibs3-devel,
    and should be in a -devel package if it gets shipped)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - Drop upstreamed patch kdebase-runtime-4.1.2-kioexec.patch
  - BR cmake >= 2.6.2
  - Use 'make install/fast'
  - Drop subpkg phonon-backend-xine and related file entries: this has to be
    part of phonon now that it moved there
  - Drop xine-lib-devel BR
  - Add libkwalletbackend to files list
  - Drop _default_patch_fuzz 2


author: Rex Dieter <rdieter@fedoraproject.org> 4.1.2-2
changelog:
  - make VERBOSE=1
  - respin against new(er) kde-filesystem
  - grow -libs, kde4 styles are unavailable for i386 applications (#456826)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.0-1.1
changelog:
  - don't remove autostart directory on F8- (does not conflict, fixes build
    failure due to nepomukserver.desktop listed in filelist but not found)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72 (4.1 alpha 1)
  - drop upstreamed deinterlace-crash patch
  - drop khelpcenter patch (fixed upstream)
  - update Phonon PulseAudio patch
  - drop Fedora 7 support
  - update file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-2
changelog:
  - if building for a KDE 4 desktop, include the khelpcenter.desktop service
    description for KDE 3 here so help works in KDE 3 apps


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.1-2
changelog:
  - reenable kio_smb everywhere (including F9) now that we have a GPLv3 qt4
    (kio_smb itself is already GPLv2+)


author: Florian Müllner <fmuellner@redhat.com> - 3.6.0-2
changelog:
  - Use gnome-applications.menu instead of applications-gnome.menu,
    in order to be able to use XDG_MENU_PREFIX instead of a downstream
    patch to gnome-shell


author: Colin Walters <walters@verbum.org> - 3.0.0-2
changelog:
  - Ship applications-gnome.desktop; we don't want GNOME 3 to use redhat-menus.
  - Disable introspection, we're not using it right now


author: Matthias Clasen <mclasen@redhat.com> 2.11.1.1-2
changelog:
  - Undo the split into tiny subpackages, instead move
    the Python bindings and the editor into the main package.
  - Fix dependencies


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-4
changelog:
  - Requires: phonon-backend >= %version
  - move icons to hicolor theme and into -backend subpkgs
  - BR: libxcb-devel
  - move phonon-gstreamer.svg to sources


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.96-1
changelog:
  - 4.2.96
  - rebase phonon-4.2.0-pulseaudio.patch (-> phonon-4.2.96-pulseaudio.patch)
  - rebase phonon-4.2.70-xine-pulseaudio.patch
    (-> phonon-4.2.96-xine-pulseaudio.patch)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.80-0.1.20081121svn887051
changelog:
  - Use subversion (4.2.80) snapshot
  - phonon-backend-xine subpkg
  - make VERBOSE=1
  - make install/fast
  - Xine backend is in phonon now, add xine-lib-devel as BR
  - BR cmake >= 2.6.0
  - forward-port xine pulseaudio patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-4
changelog:
  - rename -backend-gst back to -backend-gstreamer (longer name as -backend-xine)
    The GStreamer backend isn't ready to be the default, and KDE 4.1 also defaults
    to the Xine backend when both are installed.
  - fix PulseAudio not being the default in the Xine backend (4.2 regression)


author: Rex Dieter <rdieter@fedoraproject.org> 6:4.7.1-2
changelog:
  - monitor.py:441:get_notifications:KeyError: 'job-originating-user-name' (#739642)
  - s/hal-cups-utils/system-config-printer-udev/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.2-1.1
changelog:
  - use the xz and lzma formats only if compiled in libarchive (upstream patch)
  - fix build with old libarchive w/o archive_write_set_*_lzma (upstream patch)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.1-2
changelog:
  - -printer-applet: add support for automatic printer driver installation
                     (Tim Waugh, #576660, F13+)
  - -printer-applet: add missing Requires: dbus-python
  - remove obsolete F10- upgrade path Requires for -printer-applet


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.3.0-2
changelog:
  - -libs subpkg reborn: Multilib conflicts for index.cache.bz2 (#515087)
  - %check: desktop-file-validate


author: Than Ngo <than@redhat.com> - 4.2.2-3
changelog:
  - drop the BR on PyKDE4, system-config-printer-libs
    it's just needed for runtime
  - fix kdeutils-printer-applet dependency
  - apply upstream patch to fix several issues in ark


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - Obsoletes/Provides: okteta, update file list and description for okteta
  - remove .so symlinks which should not be in a non-devel package


author: Sebastian Vahl <fedora@deadbabylon.de> 6:3.96.0-4
changelog:
  - require /sbin/ldconfig xdg-utils on %post and %postun
  - some small spec cleanups
  - +BR: kde-filesystem
  - +BR: kde4-macros(api)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-13
changelog:
  - Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
    closing them by mouse.
    Resolves: RHBZ#1467303


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
  - Fix last commit that is actually MotifZone#1565 and removes that patch since
    it was causing more problems. Fixes MotifZone#1576.
    Resolves: rhbz#1448509


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1396514) (MotifZone bug #1564)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
  - mwm: do not see outline of window when moving (RHBZ#1080548)
    Clone of RHBZ#997241
  - Fixed rendering issues seen while scrolling window (RHBZ#1134365)
    (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.08-6
changelog:
  - Update dependencies
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Update description and summary
  - Remove deleting empty directories
  - Remove dist.ini from %doc


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Matthias Clasen <mclasen@redhat.com> - 2.22.0-2
changelog:
  - Split the plugins capplet off into a subpackage, since we don't
    have any plugins and don't want the capplet by default


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-9
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-1
changelog:
  - Resolves: #1273942 - Rebase squid to latest mature 3.5 version (3.5.10)
  - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
    CVE-2016-3948 squid: various flaws
  - Resolves: #1254016 - IPv4 fallback is not working when connecting
    to a dualstack host with non-functional IPv6
  - Resolves: #1254018 - should BuildRequire: g++
  - Resolves: #1262456 - Squid delays on FQDNs that don't contains AAAA record
  - Resolves: #1336940 - Disable squid systemd unit start/stop timeouts
  - Resolves: #1344197 - /usr/lib/firewalld/services/squid.xml conflicts between
    attempted installs of squid-7:3.3.8-31.el7.x86_64 and
    firewalld-0.4.2-1.el7.noarch
  - Resolves: #1299972 - squid file descriptor limit hardcoded to 16384 via 
    compile option in spec file


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-30
changelog:
  - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-29
changelog:
  - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple
    issues in ESI processing


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Ales Ledvinka <aledvink@redhat.com> 1.8.12-13
changelog:
  - fixed argument parsing leaks
  - ask user for password only once and do so only when interactive password
    is the chosen password method.


author: Praveen K Paladugu <praveen_paladugu@dell.com> 1.8.12-8
changelog:
  - service & scripts to allow OS to capture BMC's IP & URL info
  - Also pass the OS information to BMC
  - patches submitted by Charles Rose (charles_rose[at]dell.com)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.12-2
changelog:
  - Fixed starting ipmievd under systemd (#819234).
  - Updated RPM scriplets with latest systemd-rpm macros (#850161)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.9.0-2
changelog:
  - stop the thumbnailing when Gwenview exits; This is important as it
    blocks unmounting of flash drives


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.95-2
changelog:
  - License: GPLv2+
  - -libs: License: IJG and LGPLv2+ and GPLv2+ and LGPLv2 or LGPLv3
  - %postun: +update-desktop-database


author: Jingdong Lu <jingdong.lu@oracle.com> - 7-2.0.1.el7
changelog:
  - replaced default-bookmarks.html with oracle's default-bookmarks.html
  - Updated Summary and description to be production neutral in spec file


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
  - Add popt-based options --setcaps and --restore (#1550745)
  - Improve hardlink handling in disk space calculation (#1491786)
  - Remove perl dependencies that are provided in the same file (#1570181)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Florian Festi <ffesti@redhat.com> - 4.11.3-28
changelog:
  - Make sure files in /usr/src/debug are not world writable (RHBZ #1441098)
  - Increase maximal header size (RHBZ #1434656)
  - Increase buffer to be able to render Korean dates (RHBZ #1425231)
  - Add --noconfig option (RHBZ #1406611)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-22
changelog:
  - Move rpm-plugin-systemd-inhibit man page to that package (#1360706)
  - Fix off by one error in base64 code (#1341913)
  - Add sources to lua to prevent %autosetup failing in some cases (#1359084)
  - Fix refcounting for Python hdr objects (#1358467)
  - Perl dependecy generator: Skip blocks after variable definitions (#1378307)
  - Verify signatures properly (#1371487)
  - Export function in Python binding for yum (#1343692)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-18
changelog:
  - Fixed failing upstream test 257 on big endian systems (#1264463)
  - Fixed problems with perl.req script (#1320214, #1275551)
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1320181)
  - Move bdb warnings from stdin to stdout (#1297793)
  - Add --justdb to the erase section of the man page, too (#1310561)
  - Backport support for multi threaded xz compression (#1278924)
  - Update config.guess (#1291377)
  - Add --noplugins option (#1264031)
  - Overwrite a file if it is not marked as config any more (#1290463)
  - Add man page for systemd-inhibit plugin (#1265578)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-14
changelog:
  - Enable plugin system but disable collection plugins. Needed for
    systemd-inhibit plugin (#1160401)
  - Move systemd-inhibit plugin into its own sub packge


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-18
changelog:
  - Import from rawhide:
    * Wed Jan 15 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-12
    - include ppc64le in %power64 macro (#1052930)


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-17
changelog:
  - Import from rawhide:
    * Tue Oct 01 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
    - add support for ppc64le architecture


author: Florian Festi <ffesti@redhat.com> - 4.11.1-9
changelog:
  - Fix byteorder for 64 bit tags on big endian machines (#1012946)
   - Better RPMSIGTAG_SIZE vs PMSIGTAG_LONGSIZE detection (#1012595)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
changelog:
  - Fix segfault on empty -p <lua> scriptlet body (#1004062)
  - Add missing dependency on tar to rpm-build (#986539)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - Fix relocation regression wrt unowned directories (#1001553)
  - Fix build-time double-free wrt %caps() on wildcard file entry (#1002089)
  - Fix source URL in spec


author: Florian Festi <ffesti@redhat.com> - 4.11.1-5
changelog:
  - Revert: Clarify man page about mutually exclusive options (#969505)
  - Revert: Move translated rpmgraph man pages to devel sub package (#948861)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-4
changelog:
  - Clarify man page about mutually exclusive options (#969505)
  - Move translated rpmgraph man pages to devel sub package (#948861)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-1
changelog:
  - update to 4.11.1 (http://rpm.org/wiki/Releases/4.11.1)
  - drop upstreamed patches
  - fix .gnu_debuglink CRC32 after dwz, buildrequire binutils-devel (#971119)
  - ensure relocatable packages always get install-prefix(es) set (#979443)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0.1-2
changelog:
  - check for stale locks when opening write-cursors (#860500, #962750...)
  - serialize BDB environment open/close (#924417)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-8
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703535 and rhbz#1704364


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-4
changelog:
  - Add explicit conflicts with python34 < 3.4.9-3, which was the main python3
    package in EPEL before that version and contained conflicting files,
    e.g. /usr/bin/python3
  Resolves: rhbz#1597718


author: Lumir Balhar & Tomas Orsava <lbalhar@redhat.com> - 3.6.8-2
changelog:
  - Converting F28 python3 specfile to RHEL7
  - Updated the bootstrapping sequence
  - Disabled LTO because of buggy support for it in gcc on RHEL7
  - Removed deprecated system-python and platform-python tags and files
  - Removed a tag from `python3-libs` that recommended the `python3` package,
    because the Recommends tag doesn't work in RHEL7
  - Remove unnecessary unversioned requires on glibc and gdbm
  - Changes from RHEL8:
    - Move macros.pybytecompile to python-rpm-macros
    - Enable test_gdb, test_faulthandler
  - Changes from Fedora:
    - Security fix for CVE-2019-5010 (#1666519, #1666522)
    - Make sure we don't ship any exe files (not needed an prebuilt)
  Resolves: rhbz#1597718


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-2
changelog:
  - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
    mistakenly ran py3_byte_compile


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-18
changelog:
  - Fix the py_byte_compile macro to work on Python 2
  - Remove the pybytecompile macro file from the flat package
  Resolves: rhbz#1484993


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-15
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommend the main package from libs instead
  Resolves: rhbz#1547131


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-14
changelog:
  - Remove the python3-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3 to python3-devel
  - Move /usr/bin/idle and idlelib to python3-idle
  - Provide python3-tools from python3-idle


author: Tomas Orsava <torsava@redhat.com> - 3.6.4-10
changelog:
  - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
    of the F28 mass rebuild
  - Re-enable these tests after the mass rebuild when they can be properly
    addressed


author: Björn Esser <besser82@fedoraproject.org> - 3.6.4-8
changelog:
  - Add patch to explicitly link _ctypes module with -ldl (#1537489)
  - Refactored patch for libxcrypt
  - Re-enable strict symbol checks in the link editor


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-19
changelog:
  - Move pathfix.py to bindir, https://github.com/fedora-python/python-rpm-porting/issues/24
  - Make the -devel package require redhat-rpm-config
  Resolves: rhbz#1496757


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-16
changelog:
  - Specfile cleanup
  - Make the main description also applicable to the SRPM
  - Add audiotest.au to the test package


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-14
changelog:
  - Expat >= 2.1.0 is everywhere, remove explicit requires
  - Conditionalize systemtap-devel BuildRequires
  - For consistency, require /usr/sbin/ifconfig instead of net-tools


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-7
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-7
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - Updated notes on bootstrapping Python on top of this specfile accordingly
  - Involves: rhbz#1410631, rhbz#1444925


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.1-6
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update to a newer implementation of PEP 538
  - Update description to reflect that Python 3 is now the default Python


author: Iryna Shcherbina <ishcherb@redaht.com> - 3.6.1-0.1.rc1
changelog:
  - Update to Python 3.6.1 release candidate 1
  - Add patch 264 to skip a known test failure on aarch64


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-21
changelog:
  - Use proper command line parsing in _testembed
  - Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale
    https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-19
changelog:
  - Revert "Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables..." to prevent build failures
    of packages using alternate build tools


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-18
changelog:
  - Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables
  - Use new %_module_build macro


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-12
changelog:
  - BuildRequire the new dependencies of setuptools when rewheel mode is enabled
  in order for the virtualenvs to work properly


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-9
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs again,
    because previous attempt didn't work properly with dnf resolving mechanism


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-8
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs to use
    just the version and release number, but not the dist tag due to Modularity


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-7
changelog:
  - Fix error check, so that Random.seed actually uses OS randomness (rhbz#1412275)
  - Skip test_aead_aes_gcm during rpmbuild


author: Charalampos Stratakis <cstratak@redhat.com> - 3.5.2-6
changelog:
  - Use proper patch numbering and base upstream branch for
  porting ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-2
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Resolves rhbz#1373635


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-1
changelog:
  - Rebased to version 3.5.2
  - Set to work with pip version 8.1.2
  - Removed patches 207, 237, 241 as fixes are already contained in Python 3.5.2
  - Removed arch or environment specific patches 194, 196, 203, and 208
    as test builds indicate they are no longer needed
  - Updated patches 102, 146, and 242 to work with the new Python codebase
  - Removed patches 200, 201, 5000 which weren't even being applied


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-9
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346345: https://bugzilla.redhat.com/show_bug.cgi?id=1346345
  - Fixed upstream: https://hg.python.org/cpython/rev/d590114c2394


author: Thomas Spura <tomspur@fedoraproject.org> - 3.4.3-4
changelog:
  - python3-devel: Require python-macros for version independant macros such as
    python_provide. See fpc#281 and fpc#534.


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-4
changelog:
  - Use 1024bit DH key in test_ssl
  - Use -O0 when compiling -debug build
  - Update pip version variable to the version we actually ship


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-1
changelog:
  - Updated to 3.4.3
  - BuildPython now accepts additional build options
  - Temporarily disabled test_gdb on arm (rhbz#1196181)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-7
changelog:
  - Fixed undefined behaviour in faulthandler which caused test to hang on x86_64
    (http://bugs.python.org/issue23433)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Refreshed patches: 156 (gdb autoload)
  - Removed: 195 (Werror declaration), 197 (CVE-2014-4650)


author: Dan Horák <dan[at]danny.cz> - 3.4.1-7
changelog:
  - update the arch list where valgrind exists - %power64 includes also
      ppc64le which is not supported yet


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.0-5
changelog:
  - Don't add Werror=declaration-after-statement for extension
    modules through setup.py (PyBT#21121)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b2
changelog:
  - Update to Python 3.4 beta 2.
  - Refreshed patches: 55 (systemtap), 146 (hashlib-fips), 154 (test_gdb noise)
  - Dropped patches: 114 (statvfs constants), 177 (platform unicode)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b1
changelog:
  - Update to Python 3.4 beta 1.
  - Refreshed patches: 102 (lib64), 111 (no static lib), 125 (less verbose COUNT
  ALLOCS), 141 (fix COUNT_ALLOCS in test_module), 146 (hashlib fips),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port)
  - Removed patch 00187 (remove pthread atfork; upstreamed)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.a4
changelog:
  - Update to Python 3.4 alpha 4.
  - Refreshed patches: 55 (systemtap), 102 (lib64), 111 (no static lib),
  114 (statvfs flags), 132 (unittest rpmbuild hooks), 134 (fix COUNT_ALLOCS in
  test_sys), 143 (tsc on ppc64), 146 (hashlib fips), 153 (test gdb noise),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port), 186 (dont raise
  from py_compile)
  - Removed patches: 129 (test_subprocess nonreadable dir - no longer fails in
  Koji), 142 (the mock issue that caused this is fixed)
  - Added patch 187 (remove thread atfork) - will be in next version
  - Refreshed script for checking pyc and pyo timestamps with new ignored files.
  - The fips patch is disabled for now until upstream makes a final decision
  what to do with sha3 implementation for 3.4.0.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1
changelog:
  - Updated to Python 3.3.2.
  - Refreshed patches: 153 (gdb test noise)
  - Dropped patches: 175 (configure -Wformat, fixed upstream), 182 (gdb
  test threads)
  - Synced patch numbers with python.spec.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3
changelog:
  - Add patch that enables building on ppc64p7 (replace the sed, so that
  we get consistent with python2 spec and it's more obvious that we're doing it.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http://bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8
changelog:
  - Fix error in platform.platform() when non-ascii byte strings are decoded to
    unicode (rhbz#922149)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2
changelog:
  - 3.3b1 -> 3.3b2; drop upstreamed patch 152; refresh patches 3, 102, 111,
  134, 153, 160; regenenerate autotools patch; rework systemtap patch to work
  correctly when LANG=C (patch 55); importlib.test was moved to
  test.test_importlib upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  - 3.2 -> 3.3: https://fedoraproject.org/wiki/Features/Python_3.3
  - 3.3.0b1: refresh patches 3, 55, 102, 111, 113, 114, 134, 157; drop upstream
  patch 147; regenenerate autotools patch; drop "--with-wide-unicode" from
  configure (PEP 393); "plat-linux2" -> "plat-linux" (upstream issue 12326);
  "bz2" -> "_bz2" and "crypt" -> "_crypt"; egg-info files are no longer shipped
  for stdlib (upstream issues 10645 and 12218); email/test moved to
  test/test_email; add /usr/bin/pyvenv[-3.3] and venv module (PEP 405); add
  _decimal and _lzma modules; make collections modules explicit in payload again
  (upstream issue 11085); add _testbuffer module to tests subpackage (added in
  upstream commit 3f9b3b6f7ff0); fix test failures (patches 160 and 161);
  workaround erroneously shared _sysconfigdata.py upstream issue #14774; fix
  distutils.sysconfig traceback (patch 162); add BuildRequires: xz-devel (for
  _lzma module); skip some tests within test_socket (patch 163)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  * Fri Jun 22 2012 David Malcolm <dmalcolm@redhat.com> - 3.2.3-10
  - use macro for power64 (rhbz#834653)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-1
changelog:
  - 3.2.3; refresh patch 102 (lib64); drop upstream patches 148 (gdbm magic
  values), 149 (__pycache__ fix); add patch 152 (test_gdb regex)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-5
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-3
changelog:
  - renumber and rename patches for consistency with python.spec (8 to 55, 106
  to 104, 6 to 111, 104 to 113, 105 to 114, 125, 131, 130 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-2
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before; (patches 106, 133-142 sparsely, moving
  patches for consistency with python.spec: 128 to 134, 126 to 135, 127 to 141)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-5
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 130; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-1
changelog:
  - 3.2.1; refresh lib64 patch (102), subprocess unit test patch (129), disabling
  of static library build (due to Modules/_testembed; patch 6), autotool
  intermediates (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.9.rc1
changelog:
  - 3.2rc1
  - rework patch 6 (static lib removal)
  - remove upstreamed patch 130 (ppc debug build)
  - regenerate patch 300 (autotool intermediates)
  - updated packaging to reflect upstream rewrite of "Demo" (issue 7962)
  - added libpython3.so and 2to3-3.2


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.8.b2
changelog:
  - set EXTRA_CFLAGS to our CFLAGS, rather than overriding OPT, fixing a linker
  error with dynamic annotations (when configured using --with-valgrind)
  - fix the ppc build of the debug configuration (patch 130; rhbz#661510)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.5.b2
changelog:
  - 3.2b2
  - rework patch 3 (removal of mimeaudio tests), patch 6 (no static libs),
  patch 8 (systemtap), patch 102 (lib64)
  - remove patch 4 (rendered redundant by upstream r85537), patch 103 (PEP 3149),
  patch 110 (upstreamed expat fix), patch 111 (parallel build fix for grammar
  fixed upstream)
  - regenerate patch 300 (autotool intermediates)
  - workaround COUNT_ALLOCS weakref issues in test suite (patch 126, patch 127,
  patch 128)
  - stop using runtest.sh in %check (dropped by upstream), replacing with
  regrtest; fixup list of failing tests
  - introduce "pyshortver", "SOABI_optimized" and "SOABI_debug" macros
  - rework manifests of shared libraries to use "SOABI_" macros, reflecting
  PEP 3149
  - drop itertools, operator and _collections modules from the manifests as py3k
  commit r84058 moved these inside libpython; json/tests moved to test/json_tests
  - move turtle code into the tkinter subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.4.a1
changelog:
  - move most of the content of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.3.a1
changelog:
  - Move test.support to core package (rhbz#596258)
  - Add various missing __pycache__ directories to payload


author: Thomas Spura <tomspur@fedoraproject.org> - 3.2-0.1.a1
changelog:
  - on 64bit "stdlib" was still "/usr/lib/python*" (modify *lib64.patch)
  - make find-provides-without-python-sonames.sh 64bit aware


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.0.a1
changelog:
  - 3.2a1; add alphatag
  - rework %files in the light of PEP 3147 (__pycache__)
  - drop our configuration patch to Setup.dist (patch 0): setup.py should do a
  better job of things, and the %files explicitly lists our modules (r82746
  appears to break the old way of doing things).  This leads to various modules
  changing from "foomodule.so" to "foo.so".  It also leads to the optimized build
  dropping the _sha1, _sha256 and _sha512 modules, but these are provided by
  _hashlib; _weakref becomes a builtin module; xxsubtype goes away (it's only for
  testing/devel purposes)
  - fixup patches 3, 4, 6, 8, 102, 103, 105, 111 for the rebase
  - remove upstream patches: 7 (system expat), 106, 107, 108 (audioop reformat
  plus CVE-2010-1634 and CVE-2010-2089), 109 (CVE-2008-5983)
  - add machinery for rebuilding "configure" and friends, using the correct
  version of autoconf (patch 300)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)
  - "modulator" was removed upstream
  - drop "-b" from patch applications affecting .py files to avoid littering the
  installation tree


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-11
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 110; upstream issue 9054; rhbz#610312)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-10
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - reformat whitespace in audioop.c (patch 106)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 107)
  - CVE-2010-2089: further checks within the audioop module (patch 108)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 109)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-7
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 104); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-6
changelog:
  - build and install two different configurations of Python 3: debug and
  standard, packaging the debug build in a new "python3-debug" subpackage
  (patch 103)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http://koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-1
changelog:
  - update to 3.1.2: http://www.python.org/download/releases/3.1.2/
  - drop upstreamed patch 2 (.pyc permissions handling)
  - drop upstream patch 5 (fix for the test_tk and test_ttk_* selftests)
  - drop upstreamed patch 200 (path-fixing script)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-27
changelog:
  - add pyfuntop.stp example (source 7)
  - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  consistency with python.spec


author: Thomas Spura <tomspur@fedoraproject.org> - 3.1.1-26
changelog:
  - rebuild for new package of redhat-rpm-config (rhbz:564527)
  - use 'install -p' when running 'make install'


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-25
changelog:
  - split configure options into multiple lines for easy of editing
  - add systemtap static markers (wcohen, mjw, dmalcolm; patch 8), a systemtap
  tapset defining "python.function.entry" and "python.function.return" to make
  the markers easy to use (dmalcolm; source 5), and an example of using the
  tapset to the docs (dmalcolm; source 6) (rhbz:545179)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-22
changelog:
  - update python-3.1.1-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 7) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copies of expat and zlib from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-21
changelog:
  - introduce %{dynload_dir} macro
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping
  - introduce a macros.pybytecompile source file, to help with packaging python3
  modules (Source3; written by Toshio)
  - rename "2to3-3" to "python3-2to3" to better reflect python 3 module packaging
  plans


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-20
changelog:
  - change python-3.1.1-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-19
changelog:
  - add %py3dir macro to macros.python3 (to be used during unified python 2/3
  builds for setting up the python3 copy of the source tree)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-16
changelog:
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-15
changelog:
  - fix the URLs output by pydoc so they point at python.org's 3.1 build of the
  docs, rather than the 2.6 build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-14
changelog:
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir} (Toshio)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-12
changelog:
  - remove build-time requirements on tix and tk, since we already have
  build-time requirements on the -devel subpackages for each of these (Thomas
  Spura)
  - replace usage of %define with %global (Thomas Spura)
  - remove forcing of CC=gcc as this old workaround for bug 109268 appears to
  longer be necessary
  - move various test files from the "tools"/"tkinter" subpackages to the "test"
  subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-11
changelog:
  - add %check section (thanks to Thomas Spura)
  - update patch 4 to use correct shebang line
  - get rid of stray patch file from buildroot


author: Andrew McNabb <amcnabb@mcnabbs.org> - 3.1.1-10
changelog:
  - switched a few instances of "find |xargs" to "find -exec" for consistency.
  - made the description of __os_install_post more accurate.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-9
changelog:
  - add macros.python3 to the -devel subpackage, containing common macros for use
  when packaging python3 modules


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-8
changelog:
  - add a provides of "python(abi)" (see bug 532118)
  - fix issues identified by a.badger in package review (bug 526126, comment 39):
    - use "3" thoughout metadata, rather than "3.*"
    - remove conditional around "pkg-config openssl"
    - use standard cleanup of RPM_BUILD_ROOT
    - replace hardcoded references to /usr with _prefix macro
    - stop removing egg-info files
    - use /usr/bin/python3.1 rather than /use/bin/env python3.1 when fixing
  up shebang lines
    - stop attempting to remove no-longer-present .cvsignore files
    - move the post/postun sections above the "files" sections


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-7
changelog:
  - remove commented-away patch 51 (python-2.6-distutils_rpm.patch): the -O1
  flag is used by default in the upstream code
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-6
changelog:
  - reword description, based on suggestion by amcnabb
  - fix the test_email and test_imp selftests (patch 3 and patch 4 respectively)
  - fix the test_tk and test_ttk_* selftests (patch 5)
  - fix up the specfile's handling of shebang/perms to avoid corrupting
  test_httpservers.py (sed command suggested by amcnabb)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-5
changelog:
  - fixup importlib/_bootstrap.py so that it correctly handles being unable to
  open .pyc files for writing (patch 2, upstream issue 7187)
  - actually apply the rpath patch (patch 1)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-4
changelog:
  - update patch0's setup of the crypt module to link it against libcrypt
  - update patch0 to comment "datetimemodule" back out, so that it is built
  using setup.py (see Setup, option 3), thus linking it statically against
  timemodule.c and thus avoiding a run-time "undefined symbol:
  _PyTime_DoubleToTimet" failure on "import datetime"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-3
changelog:
  - remove executable flag from various files that shouldn't have it
  - fix end-of-line encodings
  - fix a character encoding


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-2
changelog:
  - disable invocation of brp-python-bytecompile in postprocessing, since
  it would be with the wrong version of python (adapted from ivazquez'
  python3000 specfile)
  - use a custom implementation of __find_provides in order to filter out bogus
  provides lines for the various .so modules
  - fixup distutils/unixccompiler.py to remove standard library path from rpath
  (patch 1, was Patch0 in ivazquez' python3000 specfile)
  - split out libraries into a -libs subpackage
  - update summaries and descriptions, basing content on ivazquez' specfile
  - fixup executable permissions on .py, .xpm and .xbm files, based on work in
  ivazquez's specfile
  - get rid of DOS batch files
  - fixup permissions for shared libraries from non-standard 555 to standard 755
  - move /usr/bin/python*-config to the -devel subpackage
  - mark various directories as being documentation


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.2.0-1
changelog:
  - Only match on specific device types, don't match on joysticks or tablets
  - libinput 0.2.0
  - switch to new fdo host


author: Dan Scott <dan@coffeecode.net> - 0.5.0-1
changelog:
  - Update to 0.5.0
  - Add a Python3 build
  - Run unit tests
  - Remove python-setuptools-devel BR per https://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: David Walluck <dwalluck@redhat.com> 0:1.1-2
changelog:
  - add options to build without integration, jarjar, and tests
  - allow build with java-devel >= 1.5.0
  - remove javadoc scriptlets
  - use more strict file list
  - fix maven directory ownership
  - add non-versioned symlink for demo
  - fix GCJ requires
  - fix eol in LICENSE.txt
  - remove Vendor and Distribution


author: Ralph Apel <r.apel@r-apel.de> - 0:4.3.1-3jpp
changelog:
  - build and upload noarch packages
  - Add pom and depmap frag
  - BR java-devel = 1.5.0
  - Restore Vendor, Distribution from macros


author: Ben Konrath <bkonrath@redhat.com> - 4.3.1-2jpp
changelog:
  - Set gcj_support to 0 to work around problems with GCJ.
  - Fix buglet with the gcj post/postun if statement.
  - Fix tab / space problems.
  - Fix buildroot.
  - Update Summary.
  - Convert html files to Unix file endings.
  - Disable aot-compile-rpm because it's not working ATM.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 3.8.2-3jpp.1
changelog:
  - Committed on behalf of Tania Bento <tbento@redhat.com>
  - Update per Fedora review process
  - Resolves rhbz#225954


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 3.7-6jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for demo package
  - additional sources in individual archives
  - section macro


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 3.7-1mdk
changelog:
  - 3.7
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - moved demo files to %{_datadir}/%{name}


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.7-2
changelog:
  - fix the wpa2 bug with missing password field #bz832893
  - fix the bug with lock indicator #bz912603


author: Lukas Tinkl <ltinkl@redhat.com> 0.9.0.4-1
changelog:
  - upstream version 0.9.0.4 (see
    http://lamarque-lvs.blogspot.cz/2012/07/plasma-nm-0904.html for details)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.70.rc4
changelog:
  - update to 0.9.0_rc4 (0.8.99)
  - drop the nm09 tag, all our builds are NM 0.9 builds now
  - drop the nuking of monolithic stuff, already disabled upstream for a while


author: Lukas Tinkl <ltinkl@redhat.com> - 1:0.9-0.57.20110907git.nm09
changelog:
  - update to current git nm09 snapshot, for details see: 
    http://lamarque-lvs.blogspot.com/2011/09/plasma-nm-bugs-fixed-after-470.html
  - fix #605527: KNetworkManager can´t connect to DSL/PPPoE connection
  - fix #715459: KDE's wireless broken on secure AP w/ "hidden" setup
  - fix #715461: KDE's wireless broken on secure AP w/ manual entry


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.56.20110828git.nm09
changelog:
  - update to 20110828 snapshot, fixes kde#280913 (OpenConnect) among other things
  - bump minimum required NM version to 0.9.0 as required by the new snapshot


author: Lukas Tinkl <ltinkl@redhat.com> - 0.9-0.54.20110812git.nm09
changelog:
  - update to current snapshot, for changes and fixes see 
    http://lamarque-lvs.blogspot.com/2011/07/plasma-nm-bugs-fixed-after-465.html


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.49.20110527git.nm09
changelog:
  - update to 20110527 snapshot from nm09 branch
  - make it clear in Release where the snapshot comes from
  - drop nm09 conditional, this version targets only NetworkManager 0.9


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.42.20110323
changelog:
  - Conditionalize NM 0.9 (with compat patches) support to F15+
  - Merge VPN subpackages into the main package for F15+ to match NM 0.9 packaging


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.28.20101011
changelog:
  - 20101011 snapshot
  - KDE NM applet 20101008 snapshot crashes on new CDMA connection (#641792)
  - Add NetworkManager dependency to knetworkmanager (#618918)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.25.20100920
changelog:
  - make plasma_applet unconditional
  - include javascript to enable nm plasmoid in systray, kde45+ (#604798)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.21.20100603
changelog:
  - Conflicts: kdebase-runtime > 4.4.76 (if built on/for < kde-4.4)
  - use -DINSTALL_KNM_AUTOSTART=ON (compat with f12's cmake)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.13.20100220svn
changelog:
  - make kde-plasma-neworkmanagment an empty placeholder package (#571433)
  - knetworkmanager: move kcm_networkmanagement_tray bits here (from kde-plasma-nm)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.12.20100220svn
changelog:
  - update to revision 1093233 (2010-02-20)
  - use user-readable URL instead of outdated websvn link
  - include translations (#566386, use create_tarball.rb script from kdesdk trunk)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.11.20100210svn
changelog:
  - update to revision 1088283 (2010-02-10)
  - drop F10 conditionals
  - warn about the plasmoid being experimental, recommend knetworkmanager
  - drop minimum version requirements for qt and kdelibs, not needed anymore


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.4.20090930svn
changelog:
  - Build as knetworkmanager4 for F10 so KDE 3 KNM users are not forced to upgrade
  - Obsolete knetworkmanager4 (and keep replacing the KDE 3 KNM) on F11+


author: Rex Dieter <rdieter@fedoraproject.org> 0.8-0.21.20090815svn
changelog:
  - use knetworkmanager pkg names
  - quasi-artificially inflate version to 0.8 (for now), to simplify upgrade path
    for knetworkmanager-0.7 (from F-10)
  - nuke -devel pkg
  - drop references to short-lived kde-plasma-networkmanager


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate
    Resolves: #1584245


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-7
changelog:
  - Mark the devel-docs subpackage as noarch to silence a rpmdiff false positive.
  - Resolves: #1070661


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-1
changelog:
  - New upstream release
  - Factor out the Logitech Unifying support to support other devices
  - Fix batteries which report current energy but full charge
  - Fix several small memory leaks


author: Richard Hughes <rhughes@redhat.com> - 0.9.19-1
changelog:
  - New upstream release
  - Add a Documentation tag to the service file
  - Add support for Logitech Unifying devices
  - Do not continue to poll if /proc/timer_stats is not readable
  - Fix device matching for recent kernels
  - Resolves: #848521


author: Richard Hughes <rhughes@redhat.com> - 0.9.17-1
changelog:
  - New upstream release
  - Don't allow non-power-supply devices to set the OnBattery property
  - Fix the LatencyChanged signal
  - Fix wrong PowerSupply property for devices without a scope sysfs attribute
  - Treat the battery state 'not charging' as PENDING_CHARGE


author: Richard Hughes <rhughes@redhat.com> - 0.9.16-1
changelog:
  - New upstream release
  - Install a systemd service file
  - Clamp the UPS percentage from 0 to 100 to fix syslog spam
  - Correct the cap on the energy rate
  - Fix crash in up_device_csr_finalize
  - Never detect HID devices with batteries as power supplies
  - Re-coldplug dock status when resuming from sleep


author: Richard Hughes <rhughes@redhat.com> - 0.9.15-1
changelog:
  - Use linear regression to get better predicted battery times.
  - Don't spam the log when we're saving history when on low power.
  - Don't assert when the power_supply device type is usb.


author: Richard Hughes <rhughes@redhat.com> - 0.9.12-1
changelog:
  - New upstream release.
  - Fix how we estimate the device rate for batteries that do not provide
    this data.


author: Richard Hughes <rhughes@redhat.com> - 0.9.10-1
changelog:
  - New upstream release.
  - Add a config option 'IgnoreLid' for users with broken lid switches
  - Consider a discharging UPS as "on battery"
  - Support batteries that report both energy and charge
  - Use the new threadsafe signal handling support in GLib


author: Colin Walters <walters@verbum.org> - 0.9.9-2
changelog:
  - Move typelib file to main package; it should go along with the .so;
    i.e. gnome-shell shouldn't require upower-devel.


author: Richard Hughes <rhughes@redhat.com> - 0.9.7-1
changelog:
  - New upstream release.
  - Add support for controlling leds keyboard backlight
  - Fix building with gobject-introspection 0.9.10


author: Richard Hughes <rhughes@redhat.com> - 0.9.6-1
changelog:
  - New upstream release.
  - Fix compile with the latest PolicyKit release.
  - Only save by default 7 days data to stop the log files becoming huge.
  - Do not continue to poll the serial port if there is no Watts Up Pro adaptor.
  - Fix the build with new versions of gobject-introspection.
  - Resolves #634228


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.0.13-7
changelog:
  - Override config.{sub,guess} explicitly due to redhat-rpm-build-config
    behavior change on F-10+, otherwise build fails on ppc64


author: Assim Deodia<assim.deodia@gmail.com> 1.0.13-2
changelog:
  - Inclusion of pkgconfig
  - Removal of INSTALL file
  - Proper placement of Library files
  - Creating devel sub-package
  - Chaning source URL


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-19
changelog:
  - Resolves:rh#886446 - system-config-language tracebacks in TUI mode
  - Resolves:rh#892560 - system-config-language only provides english in Fedora 18
  - Resolves:rh#889956 - include language Kashmiri Arabic


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-5
changelog:
  - apply patch s-c-l-634556.patch
  - resolves bug #634556
  - modifications in s-c-l to install even conditional & default packages


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-2
changelog:
  - resolves bug #624008
  - apply patch s-c-l-624008.patch
  - adds Low-German (nds_DE) to s-c-l
  - comment a redundant line in language_backend.py


author: Naveen Kumar <nkumar@redhat.com>- 1.3.4-2
changelog:
  - apply patch scl-1.3.4-devel.patch
  - contains some enhanc. reg. force. change of lang. when dep. are not installed 
  - Resolves Bug #568688


author: Matej Mužila <mmuzila@redhat.com> - 2.31-9
changelog:
  - Do not update NIS map when master's version is older
  - Open correct _temporary_ db with tokyocabinet
  - Resolves #1305137, #1331882


author: Honza Horak <hhorak@redhat.com> - 2.31-4
changelog:
  - Remove systemd-units and systemd-sysv requirements
  - Clean-up SysV init conversion code
  - Clean-up systemd preset macros compatibility code
  - Remove fedora-releated stuff for maps upgrading


author: Honza Horak <hhorak@redhat.com> - 2.29-1
changelog:
  - Update to new upstream version that fix memory leaks (Related: #845283)
  - Use sdnotify to inform systemd that daemons are ready
  - Some minor spec file clean up
  - Added systemd-devel as a build requirement


author: Honza Horak <hhorak@redhat.com> - 2.28-1
changelog:
  - Update to new upstream version, which fixes several bugs
  - Use Tokyo Cabinet as DBM and rebuild maps after updating
  - Consider NISDOMAIN variable from /etc/sysconfig/network


author: Honza Horak <hhorak@redhat.com> - 2.27-1
changelog:
  - Update to new upstream version, which fixes several bugs 
    (removing patches that aren't needed any more)


author: Honza Horak <hhorak@redhat.com> - 2.26-10
changelog:
  - Added ypserv-pre-setdomain to respect NISDOMAIN environment variable 
    and set domainname if empty
  - Added autoreconf call (thus .path patch modified to keep impact)
  - Patch .aliases fixed
    Resolves: #699826


author: Honza Horak <hhorak@redhat.com> - 2.26-9
changelog:
  - Rebuild against compat_gdbm, because gdbm has changed license 
    to GPLv3+ and it is not compatible with ypserv GPLv2


author: Honza Horak <hhorak@redhat.com> - 2.26-7
changelog:
  - Fixed empty domain handling in ypinit script
    Resolves: #751427
  - Added a wrapper script to use all variables correctly in the unit file
    Resolves: #755775


author: Honza Horak <hhorak@redhat.com> - 2.26-4
changelog:
  - Added passwd.adjunct support in yppasswdd to recognize 
    password format correctly when changing password using yppasswd
    Resolves: #699667


author: Honza Horak <hhorak@redhat.com> - 2.24-4
changelog:
  - Change default aliases file location to /etc/aliases to correspond 
    with default MTAs' config (#699826)


author: Karel Klic <kklic@redhat.com> - 2.24-2
changelog:
  - Removed Buildroot tag
  - Removed %clean section
  - Replace custom %initdir macro with systemwide %_initrddir


author: Karel Klic <kklic@redhat.com> - 2.23-1
changelog:
  - Updated to new upstream version
  - Removed pidfile and nodbclose patches, as those were
    merged by the upstream


author: Karel Klic <kklic@redhat.com> - 2.21-4
changelog:
  - Removed ypserv-2.21-iface.patch, because upstream refused to 
    merge it three times over 7 years. "Since this is 
    not supported by RPC (means portmapper still shows ypserv 
    for the other subnets and portmapper can forward requests 
    from other subnets via loopback), this will give quite some 
    unexpected behaviors and makes it pretty difficult to debug 
    such scenarios."


author: Karel Klic <kklic@redhat.com> - 2.21-2
changelog:
  - Added patch for rpc.ypxfrd to create a pid file
  - Rewrote initscripts to become closer to Packaging:SysVInitScript
    Fedora guildeline
  - Fixed initscript for ypserv (rhbz#523438)
  - Fixed initscript for yppasswdd (rhbz#523394)
  - Fixed initscript for ypxfrd (rhbz#523397)


author: Karel Klic <kklic@redhat.com> - 2.21-1
changelog:
  - Updated to new upstream version
  - Removed ypserv-2.11-nomap.patch, it has been applied by upstream
  - Removed ypserv-2.19-quieter.patch, it has been applied by upstream
  - Removed ypserv-2.13-yplib-memleak.patch, upstream version fixes the problem
  - Removed ypserv-2.19-debuginfo.patch, upstream version no longer needs it
  - Ported -path, -iface patches to the new version


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.19-9
changelog:
  - Mark /var/yp/Makefile as %config(noreplace)
    Resolves: #432582
  - Comment "slp" part of ypserv.conf to avoid ypserv warnings
    Resolves: #154806
  - Spec file cleanup - remove period from end of Summary,
    fix license, remove macros from Changelog


author: Steve Dickson <steved@redhat.com> - 2.19-4
changelog:
  - Made ypserver less verbose on common errors (bz #199236)
  - Don't allow a make for empty domainname's or domainname's set to (none)
    (bz #197646)


author: Phil Knirsch <pknirsch@redhat.com> 2.11-1
changelog:
  - Updated to latest upstream version.
  - Dropped ypserv-2.8-echild.patch (not needed anymore).
  - Fixed several other patches for new version.


author: Alex Larsson <alexl@redhat.com> 2.2-9
changelog:
  - Removed my ypserv-2.2-services patch. According to thorsten
    (yp maintainer) the key in services.byname actually
    SHOULD be port/protocol.


author: Alex Larsson <alexl@redhat.com> 2.2-5
changelog:
  - Add patch that fixes generation of services.byname. (#41851)
  - Actually apply patch #5, seems like it got left out by misstake


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix restart initscript option #57129
  - add a "gawk" requires #57002
  - fix printcap bug #56993
  - fix ypxfrd init script #55234


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add gdbm-devel BuildReq #49767
  - add ypxfrd init script #44845
  - fix #44805
  - fix #20042, adding option to yppasswdd startup
  - own /var/yp


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.3.4
  - fixed the fubared Makefile
  - link against gdbm instead of ndbm (it seems to work better)


author: Erik Troan <ewt@redhat.com>
changelog:
  - supports chkconfig
  - updated initscript for status and restart
  - turned off in all runlevels, by default
  - removed postinstall script which didn't do anything


author: Edward Leung <edward.leung@oracle.com> - 0.9.167-3.0.1
changelog:
  - remove change for favicon.ico from replace-favicon.patch
  - replace logo pcsd/public/favicon.ico in tarball
  - remove Source1 HAM-logo.png


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.1
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
  - Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
  - Resolves: rhbz#1557253


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5
changelog:
  - Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
  - Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
  - Resolves: rhbz#1415197


author: Ivan Devat <idevat@redhat.com> - 0.9.162-3
changelog:
  - Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
  - Fixed a crash in the pcs booth sync command
  - Resolves: rhbz#1464781 rhbz#1527530


author: Ivan Devat <idevat@redhat.com> - 0.9.162-2
changelog:
  - Changed snmp agent logfile path
  - It is now possible to set the `action` option of stonith devices in GUI by using force
  - Do not crash when `--wait` is used in `pcs stonith create`
  - A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
  - Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378


author: Ondrej Mular <omular@redhat.com> - 0.9.162-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749


author: Ivan Devat <idevat@redhat.com> - 0.9.161-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110


author: Ivan Devat <idevat@redhat.com> - 0.9.160-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6
changelog:
  - It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
  - Fixed timeout when cluster setup takes long time in web UI
  - It is now mandatory to specify container type in the "resource bundle create" command
  - Resolves: rhbz#1447910 rhbz#1284404


author: Ivan Devat <idevat@redhat.com> - 0.9.158-5
changelog:
  - `pcs cluster setup` uses existing pacemaker authkey if it exists
  - `pcs resource create` shows only warning when case of remote node is detected
  - Resolves: rhbz#1459503


author: Ivan Devat <idevat@redhat.com> - 0.9.158-4
changelog:
  - Added support for enable and disable in bundles
  - New clusters are created with corosync encryption disabled by default
  - Flag `--master` is backward compatible in `pcs resource create`
  - Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153


author: Ivan Devat <idevat@redhat.com> - 0.9.158-3
changelog:
  - Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
  - Added option to create not hardened cluster from web UI
  - Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
  - Fixed creating a new cluster from the web UI
  - `pcs cluster node add-guest` now works with the flag `--skipp-offline`
  - `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
  - Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
  - Binary data are stored in corosync authkey
  - Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.158-2
changelog:
  - Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
  - Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
  - Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
  - Fixed "Error: unable to get cib" when adding a node to a stopped cluster
  - Resolves: rhbz#1176018


author: Ivan Devat <idevat@redhat.com> - 0.9.158-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984


author: Ivan Devat <idevat@redhat.com> - 0.9.157-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958


author: Ivan Devat <idevat@redhat.com> - 0.9.156-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10
changelog:
  - Fixed error when stopping qdevice if is not running
  - Fixed removing qdevice from a cluster
  - Fixed documentation regarding booth
  - Fixed return code when no matching ticket constraint found during remove
  - Resolves: rhbz#1158805 rhbz#1305049


author: Ivan Devat <idevat@redhat.com> - 0.9.152-9
changelog:
  - Added warning when stopping/destroying qdevice instance which is being used
  - Fiexed removing qdevice from a cluster which uses sbd
  - Fixed re-running "pcs cluster node add" if it failed due to qdevice
  - Fixed documentation regarding booth
  - Added warning when using unknown booth ticket option
  - Added constraint ticket remove command
  - Fixed return code and message when displaying node utilization for nonexistent node
  - Fixed setting utilization attributes in web UI
  - Fixed support for node utilization on remote node
  - Fixed updating of selected group when displaying new resource dialog
  - Fixed group list when managing cluster running older pcs in web UI
  - Fixed displaying unmanaged status for resources for older pcs in web UI
  - Fixed clone/master/unclone group/ungroup buttons for older pcs in web UI
  - Fixed node standby/unstandby for older pcs in web UI
  - Resolves: rhbz#1158805 rhbz#1308514 rhbz#1305049 rhbz#1158500 rhbz#1231858


author: Ivan Devat <idevat@redhat.com> - 0.9.152-8
changelog:
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed missing line at the end of booth config
  - Fixed documentation regarding booth
  - Fixed remove multiple booth resources with "--force" flag
  - Fixed cleanup of ip resource if it fails to create booth resource
  - Added bash completion for booth
  - Fixed display full booth configuration
  - Added ability to display booth config from remote node
  - Added support for ticket options during adding booth ticket
  - Fixed adding node to cluster when booth is not installed
  - Added restart command for booth
  - Fixed check if auto_tie_breaker is required when enabling sbd
  - Improved way of displaying status of unmanaged primitive resources in web UI
  - Resolves: rhbz#1247088 rhbz#1308514 rhbz#1164402 rhbz#1264360


author: Ivan Devat <idevat@redhat.com> - 0.9.152-7
changelog:
  - Added possibility to hide inactive resources in "pcs resource show" command
  - Fixed exceptions handling when waiting for response from user in command line
  - Fixed nonexisting resource detection in pcsd
  - Fixed SBD_WATCHDOG_TIMEOUT option value validation
  - Removed possibility to change SBD_PACEMAKER
  - Fixed exception when disabling service on systemd systems
  - Added automatic auto_tie_breaker quorum option set whenever it is needed for SBD to work
  - Fixed setting sbd watchdog in config
  - Fixed error handling when upgrading cib schema
  - Improved consistency of syntax 'pcs alert recipient add' command
  - Resolves: rhbz#1298585 rhbz#1354498 rhbz#1346852 rhbz#1164402 rhbz#1315371 rhbz#1366307


author: Ivan Devat <idevat@redhat.com> - 0.9.152-6
changelog:
  - Fixed documentation regarding clufter
  - Added possibility to change order of resources in a group in web UI
  - Added support for unmanaged resources in web UI
  - Added support for booth (cluster ticket manager)
  - Resolves: rhbz#1357945 rhbz#1281391 rhbz#1264360 rhbz#1308514


author: Ivan Devat <idevat@redhat.com> - 0.9.152-5
changelog:
  - Fixed traceback when stopping pcsd shortly after start
  - Fixed removing a dead node from a cluster
  - Added support for clufter's 'dist' parameter
  - Fixed filtering by property name in "pcs property show"
  - Fixed an error in web UI when removing resources takes a long time
  - Fixed occasional missing optional arguments of resources in web UI
  - Improved help for alerts
  - Fixed recreating a remote node resource
  - Fixed exceptions when authenticating cluster nodes
  - Fixed permissions for bash completion file
  - Resolves: rhbz#1348579 rhbz#1225423 rhbz#1357945 rhbz#1302010 rhbz#1301993 rhbz#1346852 rhbz#1231858 rhbz#1315371 rhbz#1303136 rhbz#1329472 rhbz#1359154 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-4
changelog:
  - Added colocation constraint support in web UI
  - Fixed displaying cluster config when cib is provided as a file
  - Removed side effect on /etc/hosts during build
  - Recipient id is used as identifier in alarms
  - Improved quorum device commands syntax
  - Fixed pcs client for running on a remote node
  - Resolves: rhbz#1281364 rhbz#1269242 rhbz#1353607 rhbz#1315371 rhbz#1158805 rhbz#1289418


author: Ivan Devat <idevat@redhat.com> - 0.9.152-3
changelog:
  - Added support for pacemaker alerts
  - Added support for qdevice/qnetd provided by corosync
  - Fixed sbd calls on python3
  - Fixed bad request when resource removal takes longer than pcs expects
  - Added support for set expected votes on a live cluster
  - Added a wrapper for holding SELinux context when pcsd is started by systemd
  - Resolves: rhbz#1315371 rhbz#1158805 rhbz#1164402 rhbz#1346852 rhbz#1327739 rhbz#1348579 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-1
changelog:
  - Rebased to latest upstream sources
  - Added support for sbd configuration
  - Added support for constraint tickets in web UI
  - Added warning to pcs quorum unblock command
  - Fixes in manpage and built-in help
  - Config files marked as config
  - Resolves: rhbz#1299847 rhbz#1164402 rhbz#1305049 rhbz#1264566 rhbz#1225946 rhbz#1231858 rhbz#1328066 rhbz#1341114


author: Ivan Devat <idevat@redhat.com> - 0.9.151-1
changelog:
  - Rebased to latest upstream sources
  - Added support for utilization attributes
  - Optimized pcs status command
  - Fixes in manpage and built-in help
  - Improved resource cleanups
  - Added --wait support for cluster start and node standby commands
  - Improved resource and fence agent options in web UI
  - Added ability to put a node into maintenance mode
  - Fixed adding acl permission when targed id does not exists
  - Fixed deleting resource when referenced in acl
  - Improved pcsd launch script
  - Added automatically setting provides=unfencing meta attribute for stonith device
  - Improved Cluster Properties page in web UI
  - Fixed page update after adding group in web UI
  - Fixed deleting group (clones) when managing older cluster in web UI
  - Fixed stonith update command when fence agents fails to get metadata
  - Added support for putting Pacemaker Remote nodes into standby
  - Added support for omission stopped resources in status command
  - Added login input sanitization in web UI
  - Added config settings for SSL options and ciphers
  - Improved resource update command to inform user about missused op settings
  - Spec file fixes
  - Added support for constraint tickets from command line
  - Fixed CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI
  - Fixed CVE-2016-0721 pcs: cookies are not invalidated upon logout
  - Resolves: rhbz#1299847 rhbz#1158500 rhbz#1207405 rhbz#1219581 rhbz#1225946 rhbz#1220512 rhbz#1229822 rhbz#1231858 rhbz#1247088 rhbz#1248990 rhbz#1249085 rhbz#1252050 rhbz#1262773 rhbz#1281371 rhbz#1283562 rhbz#1286664 rhbz#1287320 rhbz#1290512 rhbz#1298585 rhbz#1305786 rhbz#1315652 rhbz#1321021 rhbz#1315743 rhbz#1315357 rhbz#1305049 rhbz#1335779 rhbz#1330884


author: Chris Feist <cfeist@redhat.com> - 0.9.143-14
changelog:
  - Fixed remaining issues when managing resources/groups/etc. that were
    previously unmanaged
  - Resolves: rhbz#1268801


author: Chris Feist <cfeist@redhat.com> - 0.9.143-12
changelog:
  - Fixed issue managing resources that were clones and had the unmanaged
    meta attribute set under the clone/master
  - Resolves: rhbz#1268801


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-10
changelog:
  - Web UI fixes
  - Added more detailed warnings for 'pcs stonith confirm'
  - Resolves: rhbz#1189857 rhbz#1245264


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-9
changelog:
  - Multiple fixes in web UI (dashboard, nodes, resources, fence devices)
  - Fixed an authentication issue in web UI
  - Port parameter of fence agents is now considered optional
  - Resolves: rhbz#1158566 rhbz#1188361 rhbz#1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-8
changelog:
  - Fixes in loading cluster status for web UI
  - Fixed checking user/group membership
  - Fixed a typo in an error message
  - Resolves: #rhbz1158566 #rhbz1158569 #rhbz1158571


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-7
changelog:
  - Multiple fixes in web UI
  - Fixed crash on missing nagios agents metadata
  - Check user/group membership on each request
  - Print output of crm_resource in pcs resource cleanup
  - Resolves: #rhbz1158571 #rhbz1189857 #rhbz1235022 #rhbz1257369


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-5
changelog:
  - Fixed pcsd certificates synchronization
  - Multiple fixes in web UI
  - Resolves: #rhbz1158566 #rhbz1158577 #rhbz1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-3
changelog:
  - Fixed relocation of remote nodes to their optimal node
  - Fixed pcs/pcsd path detection
  - Fixed command injection vulnerability
  - Resolves: #rhbz1122818 #rhbz1253294 #rhbz1253491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-2
changelog:
  - Fixed relocation of unique clone resources to their optimal node
  - Improved logging of node to node communication
  - Fixed 'Add resource' form in web UI
  - Fixed support for nagios agents
  - Resolves: rhbz#1122818 rhbz#1158577 rhbz#1189857 rhbz#1235022


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-1
changelog:
  - Added support for setting permissions for users and groups to clusters managed by web UI
  - Resources are now displayed in a tree (clone, master/slave, group, primitive) in web UI
  - Renamed 'pcs resource relocate clean' command to 'pcs resource relocate clear'
  - Improved logging of config files synchronization
  - Various fixes in Resources tab in web UI
  - Added missing dependecy on initscripts to the spec file
  - Fixed traceback when running 'pcs resource enable clvmd --wait'
  - Resolves: rhbz#1122818 rhbz#1158571 rhbz#1158577 rhbz#1182119 rhbz#1189857 rhbz#1198640 rhbz#1219574 rhbz#1243579 rhbz#1247818 rhbz#1250720


author: Chris Feist <cfeist@redhat.com> - 0.9.142-1
changelog:
  - Rebase to latest upstream sources
  - Added ability to set hostname when using IP address to create a cluster
  - Added ability to clear out tokens with pcs pcsd clear-auth
  - Added ability to use nagios agents
  - Fixed issue with orphaned resources causing GUI to fail to work properly
  - More dashboard fixes
  - Synchronize files between pcsd instances in a cluster to allow for HA pcsd
  - ACL role fixes for pcs/pcsd
  - Resolves: rhbz#118310 rhbz#1207805 rhbz#1235022 rhbz#1198222 rhbz#1158566 rhbz#1158577 rhbz#1166160


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.141-1
changelog:
  - Rebased to latest upstream packages
  - Added a command to relocate resources to their preferred host
  - Fixed the dashboard in web UI
  - Configure corosync to log to a file
  - Added warning when creating a duplicate resource operation
  - Added support for debugging resource agents
  - Do not automatically use --force when removing a resource using web UI
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Updated ruby gems
  - Spec file fixes
  - Resolves: rhbz#1198265 rhbz#1122818 rhbz#1158566 rhbz#1163671 rhbz#1175400 rhbz#1185096 rhbz#1198274 rhbz#1213429 rhbz#1231987 rhbz#1232644 rhbz#1233574


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.140-1
changelog:
  - Rebased to latest upstream packages
  - Added a note to man page and help poiting to cluster properties description
  - Fixed parsing of the corosync.conf file
  - Fixed diferences between the 'pcs cluster status' and 'pcs status cluster' commands as one is documented to be an alias of the other
  - Do not remove constraints referencing a group when removing a resource from the group
  - Added dashboard showing status of clusters to web UI
  - Added node authentication dialog to web UI
  - Added synchronization of web UI configuration files across cluster nodes
  - Fixed node authentication when one of the nodes is unreachable
  - Fixed an error message in the 'pcs config restore' command if a node is not authenticated
  - Fixed parsing of 'pcs acl role create' command's parameters
  - Properly overwrite a tokens file if its contents is unparsable
  - The 'pcs config' command now displays resources defaults and operations defaults
  - Show a useful error message when attempting to add a duplicate fence level in web UI
  - Added the require-all parameter to ordering constraints listing
  - Fixed VirtualDomain resource removal when there are constraints for the resource
  - Added a warning when removing a cluster node may cause a loss of the quorum
  - Fixed an error when uncloning a non-cloned resource
  - Fixed an error when removing a resource from a cloned group
  - Fixed waiting for resource commands to finish
  - Fixed 'pcs cluster start' and similar commands when run under a non-root account
  - Fixed parsing of 'pcs constraint order set' command's parameters
  - Fixed an error when creating a resource with an id which already exists
  - Improved man page and help for the 'pcs resource move' and 'pcs resource ban' commands
  - Fixed an error when referencing a non-existing acl role in 'pcs acl' commands
  - Fixed an error when adding an invalid stonith level
  - Fixed constraints removal and node standby / unstandby using remote web UI
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - The 'pcs status --full' command now displays node attributes and migration summary
  - Clufter moved to a standalone package
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Fixed a timeout value in the fence_xvm agent form
  - Fixed the 'pcs resource enable' command when working with clones and multi-state resources
  - Resolves: rhbz#1198265 rhbz#1121791 rhbz#1134426 rhbz#1158491 rhbz#1158537 rhbz#1158566 rhbz#1158569 rhbz#1158577 rhbz#1163682 rhbz#1165803 rhbz#1166160 rhbz#1170205 rhbz#1176687 rhbz#1182793 rhbz#1182986 rhbz#1183752 rhbz#1186692 rhbz#1187320 rhbz#1187571 rhbz#1188571 rhbz#1196412 rhbz#1197758 rhbz#1199073 rhbz#1201452 rhbz#1202457 rhbz#1204880 rhbz#1205653 rhbz#1206214 rhbz#1206219 rhbz#1206223 rhbz#1212904 rhbz#1213429 rhbz#1215198 rhbz#1218979


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-11
changelog:
  - Stop cluster nodes in parallel and keep cluster quorate during pacemaker
    shutdown
  - Resolves: rhbz#1180506


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-9
changelog:
  - Added acl enable and disable commands
  - Display whether acls are enabled in the 'pcs acl' output
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.cmo> 0.9.137-8
changelog:
  - Configuration of resource-discovery is now available on advanced location
    constraint rules
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-7
changelog:
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-6
changelog:
  - Allowed configuration of resource-discovery option on location constraint
    rules
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-5
changelog:
  - Fixed error message when creating a user with the same name as a role
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-4
changelog:
  - Fixed displaying globally-unique clones in GUI
  - Added latest version of clufter package
  - Resolves: rhbz#1170150 rhbz#1133897


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-2
changelog:
  - Improved error messages for scoped cib operations
  - Fixed waiting for resource commands to finish
  - Resolves: rhbz#1115537 rhbz#1156311


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-1
changelog:
  - Added support for score-attribute in location rules in GUI
  - Added ability to wait for resource commands to finish
  - Fix clufter doc files installed with executable flag
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1073075 rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.136-1
changelog:
  - Added support for 'pcs resource restart'
  - Added ability to wait for a resource to start after creation
  - Fixed issue with backports and ruby 2.0.0p576
  - Fix for deleting a resource with a large number of options
  - Fix warning when unpacking a pcs config tarball
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1156597


author: Chris Feist <cfeist@redhat.com> - 0.9.135-1
changelog:
  - Added new clufter package
  - Rebased to latest upstream sources
  - Constraints tables are collapsed properly
  - Resolves: rhbz#1111368 rhbz#1145560


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.131-1
changelog:
  - Rebased to latest upstream packages
  - Resolves: rhbz#1111368
  - Added python-clufter subpackage (configuration conversion tool)
  - Related:  rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.115-30
changelog:
  - Fix traceback with bad arguments to location rules
  - Fix results code when attempting to remove an order that doesn't exist


author: Chris Feist <cfeist@redhat.com> - 0.9.115-29
changelog:
  - Don't allow users to clone groups that have already been cloned
  - Fix order remove <resource> to remove resources from sets
  - Don't allow a user to force-start a group, clone or master/slave
  - When using debug-start use proper return code
  - Added cluster properties hover text
  - Fixed issue with stripping a nil value
  - HTML escape resource descriptions


author: Chris Feist <cfeist@redhat.com> - 0.9.115-28
changelog:
  - Remove leading/trailing white space in resource descriptions
  - Added tooltips for advanced cluster creation options
  - Fixed other 'Remove fence devices' button
  - When deleting a resource with pcsd use --force to prevent issues
  - Add proper tooltip for resource description info icon
  - Fix for long cluster names in menu
  - Do a better job of detecting when to send a redirect and when to notif
  - Don't silently ignore bad operation names


author: Chris Feist <cfeist@redhat.com> - 0.9.115-26
changelog:
  - Fixed dialog text when removing a fence device
  - Show tool tips for optional fence agent arguments
  - Fix bad link on resource remove sprite
  - When removing a resource or fence device, show blank info
  - Fix resource management issues when pacemaker is not running
  - If first node is down, allow other nodes to show resource/stonith forms
  - Removing all nodes, now removes cluster configuration
  - Added ability to see nodes corosync/pacemaker/pcsd startup settings
  - Added extra colspan to improve long cluster name display
  - Added ability to configure IPv6 cluster
  - Added ability to set corosync transport in GUI
  - Added ability to set advanced cluster options on creation
  - Renamed last_node_standing to last_man_standing
  - On cluster creation color unauthorized nodes in orange
  - Added proper redirect when session variable times out
  - Fixed traceback when missing authentication tokens


author: Chris Feist <cfeist@redhat.com> - 0.9.115-24
changelog:
  - Added support for meta attributes in the GUI
  - Moved pcmk_host_list/map/check to optional arguments


author: Chris Feist <cfeist@redhat.com> - 0.9.115-22
changelog:
  - Fixed selection arrow when selecting new resource on resources page
  - Fixed permissions on pcsd.service file


author: Chris Feist <cfeist@redhat.com> - 0.9.115-21
changelog:
  - Added support for resource descriptions
  - Show all nodes a resource is on for cloned resources
  - Improve visibility of dropdown menus
  - Keep last attempted login username if login fails


author: Chris Feist <cfeist@redhat.com> - 0.9.115-20
changelog:
  - Fixed issue when removing all resources or fence devices
  - Fixed duplicate id on fence device page


author: Chris Feist <cfeist@redhat.com> - 0.9.115-19
changelog:
  - Fixed issue when creating a cluster from the GUI on a node that isn't in
    the newly formed cluster
  - The GUI is now better at keeping track of nodes in the cluster


author: Chris Feist <cfeist@redhat.com> - 0.9.115-17
changelog:
  - Fixed issue with cluster properties not displaying properly when running
    pcsd on a node that was not in the cluster being managed
  - Fixed /etc/sysconfig/pcsd file for pcsd


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Tim Niemueller <tim@niemueller.de> - 0.9.2-3
changelog:
  - Add missing BR gnutls-devel and libgcrypt-devel
  - Added patch to fix test apps (NSS instead of GnuTLS/OpenSSL curl,
    implicit DSO linking)
  - Disable test cases for now due to false errors, reported upstream


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0a-1
changelog:
  - Update to version 0.4.0a
  - Drop upstreamed patch
  - Added a new patch to fix a 64bit issue
  - The -devel package now contains a pkgconfig file
  - The configure script is now run with '--enable-messages --enable-https'
  - Made the -doc subpackage noarch (F11+)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - This version introduces a API bump (which is required for
    supporting large files on 32bit environments)
  - The license issues we had with version 0.3.1 of this package (as
    discussed in #457924) are resolved in this version. The license
    of this package is now changed to LGPLv2+
  - Added a patch to fix two testcases on 64bit environments (upstream bug #1454)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.3.1-3
changelog:
  - Changed license to GPLv3+ and added some comments
    regarding the license issues with this package


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: gil cattaneo <puntogil@libero.it> 0:1.2.1-1
changelog:
  - Upgraded to 1.2.1
  - remove ant-nodeps reference
  - changed group in javadoc sub package (from Development/Documentation in Documentation)
  - add maven metadata
  - add manual
  - Adapt to current guidelines.


author: Vivek Lakshmanan <vivekl@redhat.com> 0:1.0.1-1jpp.1.fc7
changelog:
  - rpmlint fixes
  - Use fedora approved naming convention
  - Fix buildroot to conform to Fedora packaging guidelines
  - Add LICENSE to the rpm and label as doc
  - Remove Vendor and Distribution tags
  - Minor formatting fixes
  - Use proper javaoc handling
  - Add requires and requires(x) on jpackage-utils
  - Add GCJ support
  - BR on ant-trax and xalan-j2


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Jiri Skala <jskala@redhat.com> 1.0.9-4
changelog:
  - added man mages
  - splitted patch to more files
  - filled up scen file of office workload
  - updated to latest upstream sources


author: Jiri Skala <jskala@redhat.com> 1.0.8-2
changelog:
  - optimized bltk.conf - SOFFICE_PROG
  - fixed working dir in reports
  - fixed SIGHUP handling
  - finalized implementation of stop file in office and reader WLs


author: Matthew Garrett <mjg@redhat.com> 0.1.0-7.pre1
changelog:
  - fprint-add-udev-rules.patch - build udev rules for autosuspend
  - move hal fdi into the main package rather than -devel
  - add autoreconf as a build depend while carrying the udev diff


author: Karsten Hopp <karsten@redhat.com> 0.1.0-6.pre1.1
changelog:
  - Excludearch s390 s390x, we don't have USB devices there and this package
    doesn't build without USB support


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.9.1-6
changelog:
  - Do not impose -O4 and -w in build options
  - Change package group to Development/Libraries
  - Corrected license to LGPLv2
  - setup macro no longer needs the name and version arguments
  - Rename patches to include name and version


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.9.1-3
changelog:
  - Remove the clean section since it is not needed in F-13 and later
  - Correct installation of docs into defaultdocdir instead of docdir


author: Paul Howarth <paul@city-fan.org> 2.53-1
changelog:
  - update to 2.53
    - fixed to_json (CPAN RT#68359)
    - backport JSON::PP 2.27200 (fixed incr_parse decoding string more correctly
      - CPAN RT#68032)
    - made Makefile.PL skip an installing XS question when set $ENV{PERL_ONLY} or
      $ENV{NO_XS} (CPAN RT#66820)


author: Paul Howarth <paul@city-fan.org> 2.51-1
changelog:
  - update to 2.51 (#683052)
    - import JSON::PP 2.27105 as BackportPP
    - fix documentation (CPAN RT#64738)


author: Paul Howarth <paul@city-fan.org> 2.50-1
changelog:
  - update to 2.50 (#665621)
    - JSON::PP split off into separate distribution and replaced with
      JSON::backportPP instead for internal use
  - BR: perl(Test::Pod)
  - drop t/ from %doc as the tests are in the -tests subpackage
  - filter private module perl(JSON::backportPP) from requires
  - filter private module perl(JSON::backportPP::Boolean) from provides
  - filter private module perl(JSON::Backend::PP) from provides
  - filter private module perl(JSON::Boolean) from provides
  - filter private module perl(JSON::PP) from provides (really JSON::backportPP)
  - filter private module perl(JSON::PP::IncrParser) from provides


author: Chris Weyl <cweyl@alumni.drew.edu> 2.17-1
changelog:
  - update by Fedora::App::MaintainerTools 0.004
  - PERL_INSTALL_ROOT => DESTDIR
  - dropped old BR on perl(HTTP::Request)
  - dropped old BR on perl(HTTP::Response)
  - dropped old requires on perl(HTTP::Daemon)
  - dropped old requires on perl(LWP::UserAgent)
  - dropped old requires on perl(Scalar::Util)


author: Dennis Gilmore <dennis@ausil.us> - 1.0.3-5
changelog:
  - set broken_fed_dbg_opts to 0 its the recomended option upstream
  - this works around sparc GCC problems
  - add smpflags and cflags to make check


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Jerry James <loganjerry@gmail.com> - 3.0-3.20110227cvs
changelog:
  - Update to 3.0 (20110227 snap)
  - Drop upstreamed -sigwinch patch
  - Preserve ChangeLog timestamp when converting to UTF-8
  - Fix "unused direct shared library dependency" warning from rpmlint
  - Don't BR gawk; it is on the exceptions list


author: Kamil Dudka <kdudka@redhat.com> 3.0-2.20090923cvs
changelog:
  - eliminated compile-time warnings
  - fix to not break the read loop on SIGWINCH, patch contributed
    by Edward Sheldrake (#575383)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.19-1
changelog:
  - new upstream release
  - set environment in protect-tool (#548528)
  - do not reject OCSP signing certs without keyUsage (#720174)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Karsten Hopp <karsten@redhat.com> 2.0.10-1
changelog:
  - don't require pcsc-lite-libs and libusb on mainframe where
    we don't have those packages as there's no hardware for that


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: Miroslav Suchý <msuchy@redhat.com> 0.5.0-4
changelog:
  - 612998 - remove binaries. Just in case
  - 612998 - filter provide PAMmodule.so()(64bit)
  - 612998 - do not use INSTALLED_FILES feature, and enumerate files manualy
  - 612998 - use %{__python} in %build section
  - 612998 - fix buildrequires for PyPAM
  - 612998 - add macros for rhel5


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - include compilation flags for openssl as defined for pkg-config
  - don't blow up on compile because key schedules aren't arrays


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: Jan Cholasta <jcholast@redhat.com> - 0.78.3-1
changelog:
  - Resolves: #1244914 scep ca helper does not parse command line options
    correctly
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.3


author: Jan Cholasta <jcholast@redhat.com> - 0.78.1-1
changelog:
  - Resolves: #1140241 RFE: Add SCEP support to certmonger
  - Resolves: #1148001 ipa-getcert killed by SIGABRT
  - Resolves: #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.1


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-3
changelog:
  - backport change from git to correctly retrieve string values from DBus
    property interface replies (#1181022)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-2
changelog:
  - backport dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.4-2
changelog:
  - add a %trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
    when we detect certmonger versions prior to 0.58 being installed, to
    avoid cases where some older versions choke on CAs with nicknames that
    contain characters that can't legally be part of a D-Bus name (#948993)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.3-1
changelog:
  - read and cache whether or not we saw a noOCSPcheck extension in certificates
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.2-1
changelog:
  - when generating keys using OpenSSL, if key generation fails, try
    again with the default key size, in case we're in FIPS mode
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-1
changelog:
  - add a -w (wait) flag to the getcert's request/resubmit/start-tracking
    commands, and add a non-waiting status command


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.96-1
changelog:
  - make the trust settings we apply to CA-supplied certificates while
    saving them to NSS databases run-time configurable
  - fix compiling against EL5-era OpenSSL
  - when saving CA certificates we pull from an IPA server, nickname
    it using the realm name with " IPA CA" appended rather than just
    naming it "IPA CA"
  - fix the local signer so that when it issues itself a new certificate,
    it uses the same subject name
  - add a -w flag to getcert's request, resubmit, and start-tracking
    commands, telling it to wait until either the certificate is issued,
    we get to a state where we know that we won't be able to get one, or
    we are waiting for a CA


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.94-1
changelog:
  - fix self-test errors that we trigger with new OpenSSL
  - fix a build error that would sometimes happen when we're told to
    build PIE binaries
  - quiet a compile warning


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.93-1
changelog:
  - add some self-tests
  - simplify the internal submit-to-CA logic
  - fixes for more problems found through static analysis


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.92-1
changelog:
  - retrieve CA information from CAs, if the helpers can do so, and
    add a command to explicitly refresh that data: "getcert refresh-ca"
  - offer to save CA certificates to files and databases, when specified with
    new -a and -F flags to getcert request/resubmit/start-tracking (#1098208,
    trac #31)
  - add IP address subject alternate names when getcert request/resubmit
    is passed the -A option (trac #35)
  - read and cache the freshestCRL extension in certificates
  - properly interpret KDC-unreachable errors encountered in the IPA
    submission error as a server-unreachable error that we will retry,
    rather than a misconfiguration error which we won't
  - don't let tests get tripped up by new formatting used in dos2unix status
    messages (#1099080)
  - updated translations
  - be explicit that we are going to use bashisms in test scripts by calling
    the shell interpreter as 'bash' rather than 'sh' (trac #27)


author: Nalin Dahyabhai <nalin@redhat.com> 0.74-1
changelog:
  - also save state when we exit due to SIGHUP
  - don't get tripped up when enrollment helpers hand us certificates which
    include CRLF line terminators (ticket #25)
  - be tolerant of certificate issuer names, subject names, DNS, email, and
    Kerberos principal namem subjectAltNames, and crl distribution point URLs
    that contain newlines
  - read and cache the certificate template extension in certificates
  - enforce different minimum key sizes depending on the type of key we're
    trying to generate
  - store DER versions of subject, issuer and template subject, if we have
    them (Jan Cholasta, ticket #26)
  - when generating signing requests with subject names that don't quite parse
    as subject names, encode what we're given as PrintableString rather than
    as a UTF8String
  - always chdir() to a known location at startup, even if we're not becoming
    a daemon
  - fix a couple of memory leaks (static analysis)
  - add missing buildrequires: on which


author: Nalin Dahyabhai <nalin@redhat.com> 0.73-1
changelog:
  - updates to 0.73
    - getcert no longer claims to be stuck when a CA is unreachable,
      because the daemon isn't actually stuck


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates to 0.73
    - also pass the key type to enrollment helpers in the environment as
      a the value of "CERTMONGER_KEY_TYPE"


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates for 0.73
    - set the flag to encode EC public key parameters using named curves
      instead of the default of all-the-details when using OpenSSL
    - don't break when NSS supports secp521r1 but OpenSSL doesn't
    - also pass the CA nickname to enrollment helpers in the environment as
      a text value in "CERTMONGER_CA_NICKNAME", so they can use that value
      when reading configuration settings
    - also pass the SPKAC value to enrollment helpers in the environment as
      a base64 value in "CERTMONGER_SPKAC"
    - also pass the request's SubjectPublicKeyInfo value to enrollment helpers
      in the environment as a base64 value in "CERTMONGER_SPKI" (part of #16)
    - when generating signing requests using NSS, be more accommodating of
      requested subject names that don't parse properly


author: Nalin Dahyabhai <nalin@redhat.com> 0.72-1
changelog:
  - update to 0.72
    - support generating DSA parameters and keys on sufficiently-new OpenSSL
      and NSS
    - support generating EC keys when OpenSSL and NSS support it, using key
      size to select the curve to use from among secp256r1, secp384r1,
      secp521r1 (which are the ones that are usually available, though
      secp521r1 isn't always, even if the other two are)
    - stop trying to cache public key parameters at all and instead cache public
      key info properly
    - encode the friendlyName attribute in signing requests as a BMPString,
      not as a PrintableString
    - catch more filesystem permissions problems earlier (more of #996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.71-1
changelog:
  - check for cases where we fail to allocate memory while reading a request
    or CA entry from disk (John Haxby)
  - only handle one watch at a time, which should avoid abort() during
    attempts to reconnect to the message bus after losing our connection
    to it (#1055521)


author: Nalin Dahyabhai <nalin@redhat.com> 0.70-1
changelog:
  - add a --with-homedir option to configure, and use it, since subprocesses
    which we run and which use NSS may attempt to write to $HOME/.pki, and
    0.69's strategy of setting that to "/" was rightly hitting SELinux policy
    denials (#1047798)


author: Nalin Dahyabhai <nalin@redhat.com> 0.69-1
changelog:
  - tweak how we decide whether we're on the master or a minion when we're
    told to use certmaster as a CA
  - clean up one of the tests so that it doesn't have to work around internal
    logging producing duplicate messages
  - when logging errors while setting up to contact xmlrpc servers, explicitly
    note that the error is client-side
  - don't abort() due to incorrect locking when an attempt to save an issued
    certificate to the designated location fails (part of #1032760/#1033333,
    ticket #22)
  - when reading an issued certificate from an enrollment helper, ignore
    noise before or after the certificate itself (more of #1032760/1033333,
    ticket #22)
  - run subprocesses in a cleaned-up environment (more of #1032760/1033333,
    ticket #22)
  - clear the ca-error that we saved when we had an error talking to the CA if we
    subsequently succeed in talking to the CA
  - various other static-analysis fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.68-1
changelog:
  - notice when the OpenSSL RNG isn't seeded
  - notice when saving certificates or keys fails due to filesystem-related
    permission denial (#996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-3
changelog:
  - pull up a patch from master to adapt self-tests to certutil's diagnostic
    output having changed (#992050)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-1
changelog:
  - when saving certificates to NSS databases, try to preserve the trust
    value assigned to a previously-present certificate with the same nickname
    and subject, if one is found
  - when saving certificates to NSS databases, also prune certificates from
    the database which have both the same nickname and subject as the one
    we're adding, to avoid tripping up tools that only fetch one certificate
    by nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.66-1
changelog:
  - build as position-independent executables with early binding (#883966)
  - also don't tag the unit file as a configuration file (internal tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64-1
changelog:
  - at startup, if we resume the state machine for a given certificate to a state
    which expects to have the newly-added lock already acquired, acquire it
    before moving on with the certificate's work (still aimed at fixing #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.63-1
changelog:
  - serialize access to NSS databases and the running of pre- and post-save
    commands which might also access them (possibly fixing part of #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.62-1
changelog:
  - add a -u flag to getcert to enable requesting a keyUsage extension value
  - request subjectKeyIdentifier extensions from CAs, and include them in
    self-signed certificates
  - request basicConstraints from CAs, defaulting to requests for end-entity
    certificates
  - when requesting CA certificates, also request authorityKeyIdentifier
  - add support for requesting CRL distribution point and authorityInfoAccess
    extensions that specify OCSP responder locations
  - don't crash when OpenSSL can't build a template certificate from a request
    when we're in FIPS mode
  - put NSS in FIPS mode, when the system booted that way, except when we're
    trying to write certificates to a database
  - fix CSR generation and self-signing in FIPS mode with NSS
  - fix self-signing in FIPS mode with OpenSSL
  - new languages from the translation team: mai, ml, nn, ga


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport change from git to not choke if X509_REQ_to_X509() fails when we're
    self-signing using OpenSSL
  - backport another change from git to represent this as a CA-rejected error


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.60-1
changelog:
  - adjust internals of logic for talking to dogtag to at least have a
    concept of non-agent cases
  - when talking to an IPA server's internal Dogtag instance, infer which
    ports the CA is listening on from the "dogtag_version" setting in the
    IPA configuration (Ade Lee)
  - send a notification (or log a message, whatever) when we save a new
    certificate (#766167)


