# changelog

author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-36
changelog:
  - add ldap backend (#455350)
  - skip sshd init's rsa1 creation in fips mode (#672870)
  - improve audit session key destroy (#642792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-105
changelog:
  - Fix ControlPersist option with ProxyCommand (#1160487)
  - Backport fix of ssh-keygen with error : gethostname: File name too long (#1161454)
  - Backport show remote address instead of UNKNOWN after timeout at password prompt (#1161449)
  - Fix printing of extensions in v01 certificates (#1093869)
  - Fix confusing audit trail for unsuccessful logins (#1127312)
  - Don't close fds for internal sftp sessions (#1085710)
  - Fix config parsing quotes (backport) (#1134938)
  - Enable logging in chroot into separate file (#1172224)
  - Fix auditing when using combination of ForcedCommand and PTY (#1131585)
  - Fix ssh-copy-id on non-sh remote shells (#1135521)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-106
changelog:
  - Add missing ControlPersist option to man ssh (#1197763)
  - Add sftp option to force mode of created files (#1191055)
  - Do not load RSA1 keys in FIPS mode (#1197072)
  - Add missing support for ECDSA in ssh-keyscan (#1196331)
  - Fix coverity/gcc issues (#1196063)
  - Backport wildcard functionality for PermitOpen in sshd_config file (#1159055)
  - Ability to specify an arbitrary LDAP filter in ldap.conf (#1119506)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34
changelog:
  - copy digest algorithm when handling SNI context switch
  - improve documentation of ciphersuites - patch by Hubert Kario
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Bill Nottingham <notting@redhat.com> - 2.1.4-6
changelog:
  - don't run by default
  - don't create/chmod directories in %post, just include them with the
    right perms
  - fix debuginfo
  - fix docs


author: Harald Hoyer <harald@redhat.com> - 2.1.5-1
changelog:
  - added selinux patch from Daniel Walsh
  - initscript now uses translated strings
  - version 2.1.5 with minor fixes


author: Harald Hoyer <harald@redhat.com> - 2.3.0-1
changelog:
  - version 2.3.0
  - reimported specfile
  - PIEd openswan
  - cleaned up initial config files and added include directives
    for easy config drop in


author: Harald Hoyer <harald@redhat.com> - 2.3.1-3
changelog:
  - added openswan-2.3.1-nat_t_aggr.patch
  - added openswan-2.3.1-iproute2.patch
  - added openswan-2.3.1-cisco.patch
  - NAT-T/XAUTH/AGGR-MODE is now possible with a Cisco VPN 3000


author: Harald Hoyer <harald@redhat.com> - 2.4.4-1.1
changelog:
  - version 2.4.4
  - fixes NISCC Vulnerability Advisory 273756/NISCC/ISAKMP
  - fixes NISCC Advisory 3756/NISCC/ISAKMP


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-3
changelog:
  - Removed _smp_mflags macro from from the spec file build section
  - Added BuildRequires for xmlto
  - Changed License from GPL to GPL+
  - removed klips ifdefs from spec file
  - Added patch to move example configs to doc dir
  - Added a patch to make the link to init script relative, 
    for chroot environments


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-4
changelog:
  - Removed use of xmlto and the BuildRequires
  - moved scripts from /usr/lib to /usr/libexec
  - removed man3 pages for libopenswan functions (we don't deliver)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-6
changelog:
  - Moved everything else out of /usr/lib
  - Added tmraz's patch to remove extra slashes in makefile
  - Removed macros from changelog entries


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.08-1
changelog:
  - Moved to latest upstream
  - Replaced the init script source file with a patch to the upstream one
  -    (no functional changes to the init script)
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.18-2
changelog:
  - Addressed some issues related to buzilla 447419
  - Added xmlto and bind-devel to BuildRequires 
  - Removed the patch openswan-2.6-noxmlto.patch
  - Removed the command "rm -rf programs/readwriteconf" from the spec file
    as readwriteconf is used with "make check" for debugging purposes.
  - Removed USE_LWRES=false from the spec file as it has been 
    obsolete in upstream (using bind-devel instead)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - new upstream release
  - Fix for CVE-2009-0790 DPD crasher
  - Fix remaining SADB_EXT_MAX -> K_SADB_EXT_MAX entries
  - Fix ipsec setup --status not showing amount of tunnels with netkey


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-2
changelog:
  - Applied patch to support NSS, currently disabled due to
    dependency on rh bz #491693
  - The patch also supports fips check integrity 
     (requires fipscheck-devel library)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-3
changelog:
  - Updated the Openswan-NSS porting to enable nss by default
  - The patch includes README.nss for information about NSS usage


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Updated the Openswan-NSS porting to enable nss and fipscheck by default
  - fipscheck requires fipscheck-devel library


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-5
changelog:
  - Added support for using PSK with NSS
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.22-1
changelog:
  - New upstream release
  - Added support for using PSK with NSS
  - Fixed several warnings and undid unnecessary debug messages
  - Updated README.nss with an example configuration
  - Moved README.nss to openswan/doc/
  - Improved FIPS integrity check functionality


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.23-1
changelog:
  - New upstream release
  - Supports smartcards now
  - Supports PSK with NSS
  - Supports libcap-ng for lowering capabilities of pluto process 
  - Updated README.nss


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-1
changelog:
  - New upstream release
  - Cisco interop patches
  - Improved init script
  - Fix to allow ";" in the ike/esp parameters
  - Fix to unset IKEv2 Critical flag for payloads defined in RFC 4306
  - Fix to Zeroize ISAKMP and IPsec SA's when in FIPS mode
  - Fix to the issue where Some programs were installed
    twice causing .old files
  - lwdns.req.log moved from /var/tmp/ to /var/run/pluto/ .
    This is to avoid an SElinux AVC Denial
  - Fix for the issueo where ipsec help shows the list twice
  - Fix for compile time warnings


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-2
changelog:
  - Modified summary in spec file
  - Replaced buildroot with RPM_BUILD_ROOT in spec file
  - Included html files in the doc package
  - Patch for disabling openswan startup at the system
    boot by default


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-3
changelog:
  Resolves: #568355 Implementation of new Diffie-Hellman groups 
                    described in RFC 5114
  Resolves: #568493 Pluto's child process can not add routes
  Resolves: #568648 some subcommand doesn't work
  Resolves: #568652 the transport mode doesn't work
  Resolves: #574833 Openswan client can not interop with 
                    Cisco VPN servers
  Resolves: #574839 ImplicitDSOLinking
  Resolves: #574841 Openswan Implementation issue related to 
                    hardcoded length of hash algorithms


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-4
changelog:
  Resolves: #579629
  Resolves: #584224
  Resolves: #586420
  Resolves: #592630
  Resolves: #594767
  Resolves: #579747
  Resolves: #587669


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-7
changelog:
  Resolves: #737973
  Resolves: #737975
  Resolves: #737976
  Resolves: #738385
  Resolves: #742632
  Resolves: #742070


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Hack to get correct syscall for ia64.
  - Hack to get get timer interupt data.
  - Fix doc/Makefile.am.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Syscall value for x86_64.
  - Update manpage and documentation.
  - Revise utils/* to deprecate old.
  - Include CPU_P4_HT2 in op_help.c
  - Revise how CPU_TIMER_INT handled.
  - Apply cookie patch for all archs.
  - Correct autogen.sh location.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - turn on build for ppc64
  - change order op_visualise searches lib directories.
  - revise oprofile-0.4-deprecate patch.
  - utils/oprofile kernel range check, --save, and do_dump corrections.
  - update gui to use "--separate=library".


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Use /proc/ksym for module information.
  - Correct separate debuginfo handling.
  - Configure with --enable-abi.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - check min event counts.
  - revised op_to_source output to avoid changing line count.
  - p4event events revised.
  - hammer events revised.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - put in s390.
  - Fix includes for asserts.
  - Make sure elinks is available for html to txt conversion.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Eliminate AUTOMAKE and ACLOCAL definitions.
  - Correct QTDIR and add oprof_start to file manifests.


author: Will Cohen <wcohen@redhat.com> - 0.9.2-7
changelog:
  - Correct description for package.
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Add shadow-utils to requires. Resolves: rhbz #501357
  - Add LGPL license to provided java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.5-3
changelog:
  - Allow timer mode to work.
  - Correct location for addditional files in man pages. Resolves: rhbz #508669


author: Will Cohen <wcohen@redhat.com> - 0.9.6-5
changelog:
  - Handle debuginfo section differences. rhbz #591538
  - Produce a 32-bit ppc oprofile packages for java support. rhbz #463223


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2
changelog:
  - Add requirements on gnome-mag and newer version of control-center
  - remove .desktop file and make control-center start and configure orca


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.9.3-1
changelog:
  - New upstream release
  - Fixes the folowing bugzilla.redhat.com tickets:
  - 563355 error in tuna --help output
  - 574950 cannot use cpu ranges in the tuna GUI
  - 559770 tuna backtrace when moving threads
  - 563352 tuna backtrace when no thread list is given for --priority
  - 563350 tuna backtrace when scheduler is mis-typed.


author: John Kacur <jkacur@redhat.com> - 0.10.4-4
changelog:
  - Rebuilt for rhel6.6
  - spec: Explicitly use separate patches for non-upstream changes
  - Resolves: rhbz#1029591


author: John Kacur <jkacur@redhat.com> - 0.10.4-5
changelog:
  - CLI: fix traceback where enter -p policy without prio (1035795)
  - tuna-cmd: New command line params for tuning profiles
  - Resolves: rhbz#1059685
  - Resolves: rhbz#1035795


author: John Kacur <jkacur@redhat.com> - 0.10.4-9
changelog:
  - There is still an import of tuna, but the version is unimportant
  - Readd the requires without the version release dependency.
  - Resolves: rhbz#914366


author: John Kacur <jkacur@redhat.com> - 0.12-1
changelog:
  - Update to tuna-0.12, and drop patches that are included in this update.
  - Correct a typo in the net.ipv4.ipfrag_time help string
  - Fix behavior for dot inside /proc/sys/ path
  - CLI: Do not show column headers when not outputting to a tty:
  - tuna: Fix race in is_hardirq_handler
  - tuna: Decide whether to isolate a thread based on PF_NO_SETAFFINITY
  - tuna: Make --isolate/--include operations affect /proc/irq/default_smp_affinity
  - tuna config: Fix pygtk import
  - CLI: Introduce --nohz_full/-N entity
  - Resolves: rhbz#1255727


author: John Kacur <jkacur@redhat.com> - 0.12-2
changelog:
  - A few minor fixes to the man page
  - Add a BuildRequires of the desktop-file-utils
  - print an error msg when sched_setaffinity returns EINVAL
  - specfile changes to ensure all the config files are properly installed
  - Resolves: rhbz#1291811


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Stef Walter <stefw@redhat.com> - 0.16.1-1
changelog:
  - Update to upstream version 0.16.1
  - Setup source directories as appropriate for Shared System Certificates feature


author: Stef Walter <stefw@redhat.com> - 0.16.3-1
changelog:
  - Update to upstream version 0.16.3
  - Split out system trust module into its own package.
  - p11-kit-trust provides an alternative to an nss module


author: Stef Walter <stefw@redhat.com> - 0.17.5-1
changelog:
  - Make 'p11-kit extract-trust' call update-ca-trust
  - Work around 32-bit oveflow of certificate dates
  - Build fixes


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-2
changelog:
  - Reference authors from the project AUTHORS file instead of listing in description
  - Change Source0 to reference the project's Mercurial repo
  - Cleaned up the summaries and descriptions
  - Incorporate the results of Fedora package self-review


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-3
changelog:
  - Include an AUTHORS and license file in each package
  - Change the library package name to pacemaker-libs to be more
    Fedora compliant
  - Remove execute permissions from xml related files
  - Reference the new cluster-glue devel package name
  - Update the tarball from upstream to version c9120a53a6ae
    + High: PE: Only prevent migration if the clone dependancy is stopping/starting on the target node
    + High: PE: Bug 2160 - Dont shuffle clones due to colocation
    + High: PE: New implementation of the resource migration (not stop/start) logic
    + Medium: Tools: crm_resource - Prevent use-of-NULL by requiring a resource name for the -A and -a options
    + Medium: PE: Prevent use-of-NULL in find_first_action()
    + Low: Build: Include licensing files


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-0.4.c9120a53a6ae.hg
changelog:
  - Incorporate the feedback from the cluster-glue review
  - Realistically, the version is a 1.0.5 pre-release
  - Use the global directive instead of define for variables
  - Use the haclient/hacluster group/user instead of daemon
  - Use the _configure macro
  - Fix install dependancies


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-1
changelog:
  - Add dependancy on resource-agents
  - Use the version of the configure macro that supplies --prefix, --libdir, etc
  - Update the tarball from upstream to version 462f1569a437 (Pacemaker 1.0.5 final)
    + High: Tools: crm_resource - Advertise --move instead of --migrate
    + Medium: Extra: New node connectivity RA that uses system ping and attrd_updater
    + Medium: crmd: Note that dc-deadtime can be used to mask the brokeness of some switches


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-2
changelog:
  - Add versioned perl dependancy as specified by
      https://fedoraproject.org/wiki/Packaging/Perl#Packages_that_link_to_libperl
  - No longer remove RPATH data, it prevents us finding libperl.so and no other
    libraries were being hardcoded
  - Compile in support for heartbeat
  - Conditionally add heartbeat-devel and corosynclib-devel to the -devel requirements
    depending on which stacks are supported


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-3
changelog:
  - Update the tarball from upstream to version 38cd629e5c3c
    + High: Core: Bug lf#2169 - Allow dtd/schema validation to be disabled
    + High: PE: Bug lf#2106 - Not all anonymous clone children are restarted after configuration change
    + High: PE: Bug lf#2170 - stop-all-resources option had no effect
    + High: PE: Bug lf#2171 - Prevent groups from starting if they depend on a complex resource which can't
    + High: PE: Disable resource management if stonith-enabled=true and no stonith resources are defined
    + High: PE: Don't include master score if it would prevent allocation
    + High: ais: Avoid excessive load by checking for dead children every 1s (instead of 100ms)
    + High: ais: Bug rh#525589 - Prevent shutdown deadlocks when running on CoroSync
    + High: ais: Gracefully handle changes to the AIS nodeid
    + High: crmd: Bug bnc#527530 - Wait for the transition to complete before leaving S_TRANSITION_ENGINE
    + High: crmd: Prevent use-after-free with LOG_DEBUG_3
    + Medium: xml: Mask the "symmetrical" attribute on rsc_colocation constraints (bnc#540672)
    + Medium (bnc#520707): Tools: crm: new templates ocfs2 and clvm
    + Medium: Build: Invert the disable ais/heartbeat logic so that --without (ais|heartbeat) is available to rpmbuild
    + Medium: PE: Bug lf#2178 - Indicate unmanaged clones
    + Medium: PE: Bug lf#2180 - Include node information for all failed ops
    + Medium: PE: Bug lf#2189 - Incorrect error message when unpacking simple ordering constraint
    + Medium: PE: Correctly log resources that would like to start but can't
    + Medium: PE: Stop ptest from logging to syslog
    + Medium: ais: Include version details in plugin name
    + Medium: crmd: Requery the resource metadata after every start operation


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-4
changelog:
  - Include the fixes from CoroSync integration testing
  - Move the resource templates - they're not documentation
  - Ensure documentation is placed in a standard location
  - Exclude documentation that is included elsewhere in the package

  - Update the tarball from upstream to version ee19d8e83c2a
    + High: cib: Correctly clean up when both plaintext and tls remote ports are requested
    + High: PE: Bug bnc#515172 - Provide better defaults for lt(e) and gt(e) comparisions
    + High: PE: Bug lf#2197 - Allow master instances placemaker to be influenced by colocation constraints
    + High: PE: Make sure promote/demote pseudo actions are created correctly
    + High: PE: Prevent target-role from promoting more than master-max instances
    + High: ais: Bug lf#2199 - Prevent expected-quorum-votes from being populated with garbage
    + High: ais: Prevent deadlock - dont try to release IPC message if the connection failed
    + High: cib: For validation errors, send back the full CIB so the client can display the errors
    + High: cib: Prevent use-after-free for remote plaintext connections
    + High: crmd: Bug lf#2201 - Prevent use-of-NULL when running heartbeat


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-6
changelog:
  - Let snmp automatically pull in lm_sensors-devel if required
    and available on that arch (its not on s390x)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-0.1-00d9bcac8775.hg
changelog:
  - Related: rhbz#rhbz#543948
  - Update the tarball from upstream to version 00d9bcac8775
    + High: PE: Bug 2213 - Ensure groups process location constraints so that clone-node-max works for cloned groups
    + High: PE: Bug lf#2153 - Update regression tests
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes
    + High: PE: Bug lf#2209 - Clone ordering should be able to prevent startup of dependant clones
    + High: PE: Bug lf#2216 - Correctly identify the state of anonymous clones when deciding when to probe
    + High: PE: Bug lf#2225 - Operations that require fencing should wait for 'stonith_complete' not 'all_stopped'.
    + High: PE: Bug lf#2225 - Prevent clone peers from stopping while another is instance is (potentially) being fenced
    + High: PE: Correctly anti-colocate with a group
    + High: PE: Correctly unpack ordering constraints for resource sets to avoid graph loops
    + High: Replace stonithd with the new fencing subsystem
    + High: cib: Ensure the loop searching for a remote login message terminates
    + High: cib: Finally fix reliability of receiving large messages over remote plaintext connections
    + High: cib: Fix remote notifications
    + High: cib: For remote connections, default to CRM_DAEMON_USER since thats the only one that the cib can validate the password for using PAM
    + High: cib: Remote plaintext - Retry sending parts of the message that didn't fit the first time
    + Medium: PE: Bug lf#2206 - rsc_order constraints always use score at the top level
    + Medium: PE: Provide a default action for resource-set ordering
    + Medium: PE: Silently fix requires=fencing for stonith resources so that it can be set in op_defaults
    + Medium: ais: Some clients such as gfs_controld want a cluster name, allow one to be specified in corosync.conf
    + Medium: cib: Create valid notification control messages
    + Medium: cib: Indicate where the remote connection came from
    + Medium: cib: Send password prompt to stderr so that stdout can be redirected
    + Medium: extra: Add the daemon parameter to the controld metadata
    + Medium: fencing: Re-engineer the stonith daemon to support RHCS agents
    + Medium: tools: Make crm_mon functional with remote connections
    + Medium: xml: Bug bnc#552713 - Treat node unames as text fields not IDs
    + Medium: xml: Bug lf#2215 - Create an always-true expression for empty rules when upgrading from 0.6


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-1
changelog:
  - Related: rhbz#543948
  - Update the tarball from upstream to version 07ab245be519
    + High: crmd: Always connect to stonith
    + High: crmd: Ensure batch-limit is correctly enforced
    + High: crmd: Ensure we have the latest status after a transition abort
    + High: Fencing: Overhaul the fencing daemon
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes - improved
    + Medium: PE: Allow resource sets to be reused between ordering and colocation constraints
    + Medium: PE: Implement serializing order constraints that dont cause restarts or inhibit migration
    + Medium: PE: Include node attributes for the node to be fenced
    + Medium: PE: Make crm_simulate a full replacement for ptest
    + Medium: PE: Only complain about target-role=master for non m/s resources
    + Medium: PE: Prevent non-multistate resources from being promoted through target-role
    + Medium: PE: Simplify the rsc_order syntax - don't make funky inferences based on score
    + Medium: PE: Support serialized sets of resources
    + Medium: Tools: Bug lf#2286 - Allow the shell to accept template parameters on the command line
    + Medium: Tools: Bug lf#2307 - Provide a way to determin the nodeid of past cluster members
    + Medium: Tools: crm: add update method to template apply (LF 2289)
    + Medium: Tools: crm: direct RA interface for stonith class resource agents (LF 2270)
    + Medium: Tools: crm: don't remove sets which contain id-ref attribute (LF 2304)
    + Medium: Tools: crm: exclude locations when testing for pathological constraints (LF 2300)
    + Medium: Tools: crm: fix exit code on single shot commands
    + Medium: Tools: crm: fix node delete (LF 2305)
    + Medium: Tools: crm: implement -F (--force) option
    + Medium: Tools: crm: rename status to cibstatus (LF 2236)
    + Medium: Tools: crm: stay in crm if user specified level only (LF 2286)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.1-1
changelog:
  - Resolves: rhbz#559868
  - Split off the doc package as it has grown quite large
  - Split off the cluster test suite (CTS) so that it can be used by other projects
  - Update the tarball from upstream to version 46e288ab9014
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: Agents: Prevent shell expansion of '*' when there are files in /var/lib/heartbeat/cores/root
    + High: ais: Bug lf#2340 - Force rogue child processes to terminate after waiting 2.5 minutes
    + High: ais: Bug lf#2359 - Default expected votes to 2 inside Corosync/OpenAIS plugin
    + High: ais: Bug lf#2359 - expected-quorum-votes not correctly updated after membership change
    + High: ais: Bug rhbz#525552 - Move non-threadsafe calls to setenv() to after the fork()
    + High: crmd: Bug bnc#578644 - Improve handling of cancelled operations caused by resource cleanup
    + High: crmd: Make sure we wait for fencing to complete before continuing
    + High: crmd: Prevent use-of-NULL when non-DCs get stonith callbacks
    + High: Fencing: Account for stonith_get_info() always returning a pointer to the same static buffer
    + High: Fencing: Bug bnc#577007 - Correctly parse the hostlist output from stonith agents
    + High: Fencing: Correctly parse arg maps and do not return a provider for unknown agents
    + High: fencing: Fix can_fence_host_with_device() logic and improve hostlist output parsing
    + High: PE: Bug lf#2358 - Fix master-master anti-colocation
    + High: PE: Correctly implement optional colocation between primitives and clone resources
    + High: PE: Suppress duplicate ordering constraints to achieve orders of magnitude speed increases for large clusters
    + High: Shell: move scores from resource sets to the constraint element (lf#2331)
    + High: Shell: recovery from bad/outdated help index file
    + Medium: Shell: implement lifetime for rsc migrate and node standby (lf#2353)
    + Medium: Shell: node attributes update in configure (bnc#582767)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-2
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590992
  - Rebase on new upstream release
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Don ot be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544,
           lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-6
changelog:
  - Update tarball to upstream version: b933cbea41b5
  - Resolves: rhbz#708797
  - Resolves: rhbz#451848
  - Resolves: rhbz#708722
  - Resolves: rhbz#720136


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-1
changelog:
  - Update tarball to upstream version: 148fccf
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/148fccf...a12de08
  - Add libqb-devel as a build dependancy
  - Resolves: rhbz#782255 rhbz#754216 rhbz#729035
  - Related:  rhbz#790627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-2
changelog:
  - Update patch level to upstream version: c26e624
  - Resolves: rhbz#720214 rhbz#720218 rhbz#754216 rhbz#789397
    For full details, see:
      https://github.com/ClusterLabs/pacemaker/compare/c26e624...148fccf


author: David Vossel <dvossel@redhat.com> - 1.1.7-3
changelog:
  - Add libqb-devel as a dependancy of pacemaker-libs-devel
  - Medium: PE: Report resources as active in correct data about resource location
    Resolves:  rhbz#799070
  - Low: Tools: Bug rhbz#801351 - Fix crm_report help text
    Resolves: rhbz#801351


author: David Vossel <dvossel@redhat.com> - 1.1.7-5
changelog:
  - Use default value for HB_DAEMON_DIR define when clusterglue does not provide one.
    Resolves: rhbz#808557


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <andrew@beekhof.net> 1.1.10-1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

  - Resolves: rhbz#891766
  - Resolves: rhbz#902407
  - Resolves: rhbz#908450
  - Resolves: rhbz#913093
  - Resolves: rhbz#951340
  - Resolves: rhbz#951371
  - Related: rhbz#987355


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-3
changelog:
  + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-4
changelog:
  + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: David Vossel <dvossel@redhat.com> - 1.1.12-5
changelog:
  - Properly clear shutdown transient attribute after node leaves
    membership.

    Resolves: rhbz#1198638


author: David Vossel <dvossel@redhat.com> - 1.1.12-6
changelog:
  - Fixes invalid free in attrd
  - Fixes crm_mon -E option for external script.
  - Fixes acl read-only access role assignment.

    Resolves: rhbz#1205292
    Resolves: rhbz#1208896
    Resolves: rhbz#1207621


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-7
changelog:
  - Ensure relevant components clear cache entries are cleared when peers leave the cluster

    Resolves: rhbz#1193499


author: David Vossel <dvossel@redhat.com> - 1.1.12-8
changelog:
  - Reduce log severity for style upgrade notice.
   - Properly export pacemaker related sysconfig variables
   - Remove warning during yum update of pacemaker packages.

    Resolves: rhbz#1163982
    Resolves: rhbz#1177821
    Resolves: rhbz#1210291


author: Klaus Wenninger <kwenning@redhat.com> - 1.1.14-1.0
changelog:
  - Update to upstream release 1.1.14
   - added README_RGManager_porting to document replacement of
       ccs2cib, ccs_flatten & disable_rgmanager
   - added patchset (0100-0111) from master to implement graceful
       stop of pacemaker_remote
   - require minimum-version 0.17.0 of libqb

    Resolves: rhbz#1193499
    Resolves: rhbz#1195500
    Resolves: rhbz#1200853
    Resolves: rhbz#1215809
    Resolves: rhbz#1219103
    Resolves: rhbz#1235316
    Resolves: rhbz#1246490
    Resolves: rhbz#1246563
    Resolves: rhbz#1252206
    Resolves: rhbz#1257333
    Resolves: rhbz#1275223
    Resolves: rhbz#1287535
    Resolves: rhbz#1297564


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-3
changelog:
  - prevent crmd crash after unexpected Pacemaker Remote connection takeover
   - ensure package URL is displayed correctly

    Resolves: rhbz#1252206


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)

    Resolves: rhbz#1253325
    Resolves: rhbz#1312040
    Resolves: rhbz#1322595
    Resolves: rhbz#1326350
    Resolves: rhbz#1356727


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Include upstream fixes to init scripts
   - ClusterMon resource should verify pid is crm_mon's
   - Fix CVE-2016-7035

    Resolves: rhbz#1322595
    Resolves: rhbz#1360234
    Resolves: rhbz#1374775


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Show correct help and error messages in attrd_updater
   - Preserve rolling upgrades involving Pacemaker Remote nodes
   - Update status of clufter in README_RGManager_porting

    Resolves: rhbz#1388558
    Resolves: rhbz#1389028


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-4
changelog:
  - crm_report should avoid grep on binary logs
   - document that clufter is now supported

    Resolves: rhbz#1405205


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-1
changelog:
  - Rebase to upstream bfe4e8042065eb61506cd3ff10fc5f02dd2f3bb7 (1.1.18 plus patches)
   - Resolves: rhbz#1388102
   - Resolves: rhbz#1427643
   - Resolves: rhbz#1500510
   - Resolves: rhbz#1513199


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.%{version}, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group %group syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - update internal db4 to 4.5.20 version
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add select-context option to pam_selinux (#213812)
  - autoreconf won't work with autoconf-2.61 as configure.in is not yet adjusted
    for it


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)
  - update gmo files as we patch some po files (#218271)
  - add use_current_range option to pam_selinux (#220487)
  - improve the role selection in pam_selinux
  - remove shortcut on Password: in ja locale (#218271)
  - revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.0-1
changelog:
  - upgrade to new upstream version
  - drop pam_stack module as it is obsolete
  - some changes to silence rpmlint


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-1
changelog:
  - upgrade to new upstream version resolving CVE-2007-0003
  - pam_namespace: unmount poly dir for override users


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-3
changelog:
  - correctly relabel tty in the default case (#229542)
  - pam_unix: cleanup of bigcrypt support
  - pam_unix: allow modification of '*' passwords to root


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-4
changelog:
  - pam_console: always decrement use count (#230823)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)
  - we don't patch any po files anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-5
changelog:
  - pam_selinux: improve context change auditing (#234781)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.7.1-6
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)
  - pam_namespace: add support for temporary logons (#241226)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-3
changelog:
  - updated db4 to 4.6.18 (#249740)
  - added user and new instance parameters to namespace init
  - document the new features of pam_namespace
  - do not log an audit error when uid != 0 (#249870)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
changelog:
  - most devices are now handled by HAL and not pam_console (patch by davidz)
  - license tag fix
  - multifunction scanner device support (#251468)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-6
changelog:
  - do not ask for blank password when SELinux confined (#254044)
  - initialize homedirs in namespace init script (original patch by dwalsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-9
changelog:
  - do not preserve contexts when copying skel and other namespace.init
    fixes (#298941)
  - do not free memory sent to putenv (#231698)


author: Tomas Mraz <tmraz@redhat.com> 0.99.8.1-17
changelog:
  - test for setkeycreatecon correctly
  - add exclusive login mode of operation to pam_selinux_permit (original
    patch by Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-1
changelog:
  - new upstream release
  - add default soft limit for nproc of 1024 to prevent
    accidental fork bombs (#432903)


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-2
changelog:
  - if shadow is readable for an user do not prevent him from
    authenticating any user with unix_chkpwd (#433459)
  - call audit from unix_chkpwd when appropriate


author: Tomas Mraz <tmraz@redhat.com> 0.99.10.0-4
changelog:
  - pam_namespace: fix problem with level polyinst (#438264)
  - pam_namespace: improve override checking for umount
  - pam_selinux: fix syslogging a context after free() (#438338)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-4
changelog:
  - pam_namespace: allow safe creation of directories owned by user (#437116)
  - pam_unix: fix multiple error prompts on password change (#443872)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-1
changelog:
  - pam_loginuid: uids are unsigned (#460241)
  - new minor upstream release
  - use external db4
  - drop tests for not pulling in libpthread (as NPTL should
    be safe)


author: Tomas Mraz <tmraz@redhat.com> 1.0.2-2
changelog:
  - new password quality checks in pam_cracklib
  - report failed logins from btmp in pam_lastlog
  - allow larger groups in modutil functions
  - fix leaked file descriptor in pam_tally


author: Tomas Mraz <tmraz@redhat.com> 1.0.90-4
changelog:
  - fix parsing of config files containing non-ASCII characters
  - fix CVE-2009-0579 (mininimum days for password change ignored) (#487216)
  - pam_access: improve handling of hostname resolution


author: Tomas Mraz <tmraz@redhat.com> 1.0.91-6
changelog:
  - add password-auth, fingerprint-auth, and smartcard-auth
    for applications which can use them namely gdm (#494874)
    patch by Ray Strode


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-5
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Seth Vidal's no_user_check flag
  - document no_user_check and skip_first_pass options in the man pages
  - rebuild against Kerberos 5 1.2 (release 15)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix prompting when the module's first in the stack and the user does not have
    a corresponding principal in the local realm
  - properly implement TGT validation
  - change a few non-error status messages into debugging messages
  - sync the README and the various man pages up


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only try to delete ccache files once
  - ignore extra data in v4 TGTs, but log that we got some
  - require "validate" to be true to try validating, and fail if validation fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the appdefault API to read krb5.conf if available
  - create v4 tickets in such a way as to allow 1.2.2 to not think there's
    something fishy going on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a separate config file parser for compatibility with settings that
    predate the appdefault API
  - use a version script under Linux to avoid polluting the global namespace
  - don't have a default for afs_cells
  - need to close the file when we succeed in fixing permissions (noted by
    jlkatz@eos.ncsu.edu)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't twiddle ownerships until after we get AFS tokens
  - use the current time instead of the issue time when storing v4 creds, since
    we don't know the issuing host's byte order
  - depend on a PAM development header again instead of pam-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fixup the man page
  - log return code from k_setpag() when debugging
  - create credentials and get tokens when setcred is called for REINITIALIZE


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't fail to fixup the krb5 ccache if something goes wrong obtaining
    v4 credentials or creating a krb4 ticket file (#33262)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat semicolons as a comment character, like hash marks (bug reported by
    Greg Francis at Gonzaga University)
  - use the [:blank:] equivalence class to simplify the configuration file parser
  - don't mess with the real environment
  - implement mostly-complete aging support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't delete tokens unless we're also removing ticket files (report and
    patch from Sean Dilda)
  - report initialization errors better


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add max_timeout, timeout_shift, initial_timeout, and addressless options
    (patches from Simon Wilkinson)
  - fix the README to document the [appdefaults] section instead of [pam]
  - change example host and cell names in the README to use example domains


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that [pam] is still checked in addition to [appdefaults]
  - note that AFS and Kerberos IV support requires working Kerberos IV
    configuration files (i.e., kinit -4 needs to work) (doc changes
    suggested by Martin Schulz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't call initialize_krb5_error_table() or initialize_ovk_error_table()
    if they're not found at compile-time (reported for RHL 6.x by Chris Riley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't set forwardable and assorted other flags when getting password-
    changing service ticket (noted, and fix supplied, by Onime Clement)
  - try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
    or may not be expecting the same number/type of arguments (noted by
    Onime Clement)
  - use krb5_aname_to_localname to convert the principal to a login name
    and set PAM_USER to the result when authenticating
  - some autoconf fixes for failure cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add info about accessing the CVS repository to the README
  - parser cleanups (thanks to Dane Skow for a more complicated sample)


author: Nalin Dahyabhai <nalin@redhat.com> 1.42-1
changelog:
  - return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
    fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that we had to prepend the current directory to a given path in
    dlopen.c when we had to (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com> 1.43-1
changelog:
  - add minimum UID support (#52358)
  - don't link pam_krb5 with libkrbafs
  - make all options in krb5.conf available as PAM config arguments


author: Nalin Dahyabhai <nalin@redhat.com> 1.46-1
changelog:
  - link with libresolv to get res_search, tip from Justin McNutt, who
    built it statically
  - explicitly link with libdes425
  - handle cases where getpwnam_r fails but still sets the result pointer
  - if use_authtok is given and there is no authtok, error out


author: Nalin Dahyabhai <nalin@redhat.com> 1.49-1
changelog:
  - set PAM_USER using the user's parsed name, converted back to a local name
  - add account management service (checks for key expiration and krb5_kuserok())
  - handle account expiration errors


author: Nalin Dahyabhai <nalin@redhat.com> 1.57-1
changelog:
  - force -fPIC
  - add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
  - add per-user stashes and return values


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.5-1
changelog:
  - don't log debug messages that we're skipping session setup/teardown unless
    debugging is enabled (#179037)
  - try to build the module with -Bsymbolic if we can figure out how to do that


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.6-1
changelog:
  - add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
    be disabled completely (Hugo Meiland)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.7-1
changelog:
  - add v4 credential conversion for "use_shmem" and "external" cases (though
    it should be redundant with "use_shmem") (#182239)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.8-1
changelog:
  - don't try to validate creds in a password-changing situation, because the
    attempt will always fail unless the matching key is in the keytab, which
    should never be the case for the password-changing service (#187303, rbasch)
  - if v4 has been disabled completely, go ahead and try to set 2b tokens
    because we're going to end up having to do that anyway (#182378)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.9-1
changelog:
  - return PAM_IGNORE instead of PAM_SERVICE_ERR when we're called in
    an unsafe situation and told to refresh credentials (#197428)
  - drop from setuid to "normal" before calling our storetmp helper, so that
    it doesn't freak out except when *it* is setuid (#190159)
  - fix handling of "external" cases where the forwarded creds don't belong to
    the principal name we guessed for the user (#182239,#197660)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0
changelog:
  - rework prompting so that we stop getting stray prompts every now and then,
    and so that use_first_pass will *never* prompt for any information


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0.1
changelog:
  - revert previous changes to how prompting works, and add a
    no_subsequent_prompt option to suppress libkrb5-based prompts during
    authentication, providing the PAM_AUTHTOK for all questions which
    libkrb5 asks


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15, adjusting the fix for #150056 so that it doesn't run
    afoul of SELinux policy by attempting to read a ccache which was created
    for use by the user via the helper
  - build with --with-default-use-shmem=sshd --with-default-external=sshd, to
    get the expected behavior without requiring administrator intervention


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.16-1
changelog:
  - update to 2.2.16, also avoiding use of the helper if we're creating a ticket
    file for our own use


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.17-1
changelog:
  - correct the license: tag -- this module is dual-licensed (LGPL+ or BSD)
  - fix a man page missing line
  - tactfully suggest in the man page that if your app needs the "tokens"
    flag in order to work properly, it's broken


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.19-1
changelog:
  - log to AUTHPRIV facility by default
  - add a "ccname_template" option, which can be set to "KEYRING:..." to switch
    to using the kernel keyring
  - add a "preauth_options" option for setting generic preauth parameters
  - allow "keytab" locations to be specified on a per-service basis, so that
    unprivileged apps which do password-checking and which have their own
    keytabs can use their own keys to validate the KDC's response


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.20-1
changelog:
  - move temporary ccaches which aren't used for serializing from FILE: type
    into MEMORY: type
  - don't barf during credential refresh when $KRB5CCNAME isn't set


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set perms on the user's KEYRING: ccache so that the user can write to it
  - suppress an error message if a KEYRING: ccache we're about to destroy has
    already been revoked


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.22-1
changelog:
  - make sure we don't fall out of the calling process's PAG when we check
    the .k5login (fallout from #371761)
  - make most boolean options controllable on a per-service basis


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.23-1
changelog:
  - when we're changing passwords, force at least one attempt to authenticate
    using the KDC, even in the pathological case where there's no previously-
    entered password and we were told not to ask for one (#400611)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.1-1
changelog:
  - don't bother trying to set up a temporary v4 ticket file during session open
    unless we obtained v4 creds somewhere


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.4-1
changelog:
  - don't request password-changing credentials with the same options that we
    use when requesting ticket granting tickets, which might run afoul of KDC
    policies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - catch the case where we pass a NULL initial password into libkrb5 and
    it uses our callback to ask us for the password for the user using a
    principal name, and reject that (#502602)
  - always prompt for a password unless we were told not to (#502602,
    CVE-2009-1384)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.5-1
changelog:
  - when we get asked for the user's long-term key, use a plain Password:
    prompt value rather than the library-supplied one


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.7-1
changelog:
  - when called to refresh credentials, store the new creds in the default
    ccache location if $KRB5CCNAME isn't set (#507984)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.8-1
changelog:
  - add a "chpw_prompt" option, to allow changing expired passwords while
    authenticating, as a workaround for applications which don't handle
    password expiration the way PAM expects them to (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.9-1
changelog:
  - add a "multiple_ccaches" option to allow forcing the previous behavior of
    not deleting an old ccache whenever we create a new one, but saving them
    until the call that caused us to create them is reversed, and default the
    setting to being enabled for "su", which needs it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-7
changelog:
  - don't treat setcred() as session open/close in sshd (#720609, #725797)
  - don't create a new ccache when "external" is enabled, as the calling
    application's already managing one (#690832)
  - always re-read "external" creds when possible, and use an in-memory
    ccache when setting up tokens (more of #690832)
  - during password change, if we got creds during the first pass, don't
    ask for the authtok again (#700520)
  - allow things we do to compensate for transplanting in new self-tests to
    fail if the new tests aren't patched in (#708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-8
changelog:
  - in a %{_rawbuild} environment, don't run autoconf, because current
    versions will choke on an unpatched configure.ac (more of #708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-9
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#700520)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/%{_lib} (which
    we assume means that it's in /%{_lib})


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in %{_libdir}/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 254-1
changelog:
  - update to nss_ldap 254
  - use the upstream version scripts
  - stop trying to isolate us from the apps by building with static libraries,
    though that means we're tied to /usr now
  - move the nsswitch module to %{_libdir}; its deps aren't available without
    a mounted /usr anyway
  - make rpmlint happier


author: Nalin Dahyabhai <nalin@redhat.com> - 254-2
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #232713)


author: Nalin Dahyabhai <nalin@redhat.com> - 257-1
changelog:
  - update to nss_ldap 257
  - look harder when we're looking for symbols provided by the resolver library
    (upstream #337)
  - clarify license (both under LGPLv2 or later)


author: Nalin Dahyabhai <nalin@redhat.com> - 257-5
changelog:
  - nss_ldap: go back to linking with static libldap and liblber so that we
    don't get unresolved references which may be resolved by a different libldap
    used by the calling application


author: Nalin Dahyabhai <nalin@redhat.com> - 259-1
changelog:
  - update to nss_ldap 259
  - nss_ldap: update to revised proposed patch for #248
  - pam_ldap: replace two patches to handle password changing against replicas
    with Ralf Haferkamp's revision, which also sends the policy control with the
    initial password change request
  - pam_ldap: enable patch to stop also trying to change password using
    ldap_modify after trying to change it with an exop when the configuration
    is "pam_password exop_send_old"


author: Nalin Dahyabhai <nalin@redhat.com> - 259-2
changelog:
  - apply updated logic for finding libresolv to pam_ldap's build setup
  - add gdm,polkituser to default nss_initgroups_ignoreusers list


author: Nalin Dahyabhai <nalin@redhat.com> - 259-3
changelog:
  - try to work around not having had a populated resolver configuration earlier,
    but needing to use its data when we're asked to look up something (#442272)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-2
changelog:
  - add libssl and libcrypto to the list of libraries against which we link
    statically to avoid running into symbol collisions at run-time (#446860)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - return 0 (fail) instead of 1 (success) when setnetgrent() is called for
    a netgroup which doesn't actually exist or which has no members (#445972,
    upstream #374)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-4
changelog:
  - add missing local-to-network conversion on port numbers when looking up
    services, which affected 259-1 and later (#450634)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-5
changelog:
  - pam_ldap: don't crash when we have to follow a referral while looking up
    information about the authenticating user and we're using SASL, which
    affected 259-1 and later (patch from Paul P Komkoff Jr, #469061)


author: Nalin Dahyabhai <nalin@redhat.com> - 263-1
changelog:
  - update to 263, pulling in Luke's patch for #374 (#445972) which doesn't
    leak the result message, and the fix for #376 (#466794)


author: Nalin Dahyabhai <nalin@redhat.com> - 264-1
changelog:
  - update to 264, pulling in Luke's patch for #248, among others
  - add optional checking of nsRole to pam_ldap (#202135, upstream #382)


author: Nalin Dahyabhai <nalin@redhat.com> - 264/184-100
changelog:
  - split pam_ldap off into a separate binary package
  - require /%{_lib}/security/pam_ldap.so to pull in pam_ldap on upgrades
  - require our configuration file to come from somewhere
  - remove some cruft
  - move the %postun that fixes up pam configs to the pam_ldap package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - revert most of the previous round of changes: splitting pam_ldap off
    won't be helpful in the long term if it, too, is eventually going to conflict
    with the nss-ldapd package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add but don't apply proposed patch for upstream #399: depending on the
    server to enforce the expected case-sensitivity opens up corner cases


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Updated to 0.4:
  - Added "ask_oldauthtok" and "check_oldauthtok" as needed for stacking with
  the Solaris pam_unix;
  - Permit for stacking of more than one instance of this module (no statics).


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - 0.5: preliminary OpenPAM (FreeBSD-current) support in the code and related
  code cleanups (thanks to Dag-Erling Smorgrav).


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Applied minor corrections to the man page and at the same time eliminated
    unneeded/unimportant differences between it and the README.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Use bigcrypt() on HP-UX whenever necessary, from Kevin Steves of Atomic
    Gears LLC.
  - Moved the old password checking into a separate function.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Have the same pam_passwdqc binary work for both trusted and non-trusted
    HP-UX, from Kevin Steves.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Build with Sun's C compiler cleanly, from Kevin Steves.
  - Use install -c as that actually makes a difference on at least HP-UX
    (otherwise install would possibly move files and not change the owner).


author: Solar Designer <solar@owl.openwall.com> 0.7.4-owl1
changelog:
  - Documented that "enforce=users" may not always work for services other
    than the passwd command.
  - Applied a patch to PLATFORMS from Mike Gerdts of GE Medical Systems
    to reflect how Solaris 8 patch 108993-18 (or 108994-18 on x86) changes
    Solaris 8's PAM implementation to look like Solaris 9.


author: Solar Designer <solar@owl.openwall.com> 0.7.5-owl1
changelog:
  - Assume invocation by root only if both the UID is 0 and the PAM service
    name is "passwd"; this should solve changing expired passwords on Solaris
    and HP-UX and make "enforce=users" safe.
  - Produce proper English explanations for a wider variety of settings.
  - Moved the "-c" out of CFLAGS, renamed FAKEROOT to DESTDIR.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.4-2
changelog:
  - set LDFLAGS_LINUX, not LDFLAGS, so that we don't strip the module before
    the debuginfo gets pulled out (#249963)


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-4
changelog:
  - Patch for new configurable options(rhbz# 219201): 
    disable first upper and last digit check, passwords 
    prompts can be read from a file
  - Fixed an issue with spec file where "Release:" is not
    specified with "(?dist)". Without this, it gives problem
    when tagging across different fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-5
changelog:
  - Fixed following rpmlint errors on src rpm:
    pam_passwdqc.src: W: summary-ended-with-dot Pluggable
    password quality-control module.,
    pam_passwdqc.src:11: E: buildprereq-use pam-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-6
changelog:
  - Added explanation of new options, disable_firstupper_lastdigit_check,
    oldpass_prompt_file, and newpass_prompt_file in the man pages
  - Fixed output messages when disable_firstupper_lastdigit_check option
    is used 
  Resolves: #219201 pam_passwdqc should be more configurable


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5-1
changelog:
  - upgrade to 0.5beta1 version
  - BuildRequires now complains compilation of html manual from xml file


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5.2-0
changelog:
  - Updated to 0.5.2 release
  - Changed /etc/pkcs11 for /etc/pam_pkcs11
  - Changed /usr/share/pkcs11_login for /usr/share/pam_pkcs11
  - Next item is change package name to pam_pkcs11


author: Robert Relyea <rrelyea at redhat.com> 0.5.3-6
changelog:
  - Include the login token in the environment
  - Conditionally turn on OCSP
  - Treat uninitialized tokens as not present.


author: Ray Strode <rstrode@redhat.com> 0.5.3-7
changelog:
  - add new wait_for_card option that stalls auth process
    until a card is inserted
  - if the user is reauthenticating (already logged in, but
    say unlocking the screen) then only treat the token the
    user logged in with as a valid authentication token
  - clean up "smart card" word.  Before we had a mix of 
    "smartcard", "Smart Card", "SmartCard", and "smart card" 
    i think.
  - only say "Please insert your smart card." instead of
    "Please insert your Smart Card or enter username" if 
    username based login isn't allowed.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-13
changelog:
  - Fix the default mapping order.
  - Make ocsp support controlled by a config entry.
  - Fix login crash
  - revert to explicit paths until we can fix 'login' and 'authconfig'


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-15
changelog:
  - add l10n support
  - correct mapper order.
  - login should allow SSL Client Auth certs rather than restricting to Email
    Signing certs.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-17
changelog:
  - restrict reauthentication to the token used in the inital login.
  - don't require reauthentication apps to log into a token if the user
    didn't initally log into the token.
  - handle the case where we have more than one token.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-19
changelog:
  - Fix problem where pin was not being passed in the pam password variable
    correctly. Needed for Kerberos PKInit


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-20
changelog:
  - Use pam_syslog rather than syslog (patch by Tmraz).
  - Signal to the user that change password is not supported by pam_pkcs11.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-21
changelog:
  - update password supported patch.
  - fix bug where the user and smart card prompt was coming up in login after
    the username had been entered.
  - use pam_ignore for the case where we always want to drop to the other
    pam_modules.
  - add environment variables for the certificate used to authenticate.


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-1
changelog:
  - Pick up the latest pam_pkcs11 from upstream

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-3
changelog:
  - Move pango.modules generation to posttrans, to make sure modules available
    in an older version but not this one are removed.
  - Resolves #222217


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-4
changelog:
  - Undo the posttrans change.  That's a no no.  We now regenerate the module
    file in postun if there are any other pango versions left.  This should
    take care of the problem in the future.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.4-1
changelog:
  - Update to 1.15.4
  - [Build]Require libthai[-devel]
  - Require pkgconfig in -devel
  - Remove "static libs" from -devel description, since we don't ship them.


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: William Cohen <wcohen@redhat.com> - 4.0.0-2
changelog:
  - correct the ctests/shlib test
  - have PAPI_set_multiplex() return proper value
  - properly handle event unit masks
  - correct PAPI_name_to_code() to match events
  - Resolves: rhbz562935 Rebase to papi-4.0.0


author: William Cohen <wcohen@redhat.com> - 5.1.1-1
changelog:
  - Rebase to 5.1.1 for:
    - rhbz726798: Support for Sandy Bridge in PAPI
    - rhbz785258: FP event on Sandy Bridge when HT enabled
    - rhbz743648: Support for access to various energy and perf registers via papi 
    - rhbz831751: Ivy Bridge: support PAPI 
    - rhbz740909: Allow parallel builds
    - rhbz785975: Correct use of apostrophes in PAPI documentation


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-1
changelog:
  - New upstream release.
    - the bitmap font is now ignored. (#176206)
  - paps-0.6.2-fix-bufferoverflow.patch: applied to fix the buffer overflow.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.3-4
changelog:
  - paps-0.6.3-formfeed.patch: applied to deal with the formfeed mark properly.
  - paps-0.6.3-goption.patch: rewritten option parser using GOption. and segfault
    gone as well. (#187205)
  - paps-0.6.3-header.patch: applied to support the output of the page header.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.5-1
changelog:
  - New upstream release.
    - paps-0.6.3-fix-pagesize.patch: removed. it has been merged in upstream.
    - paps-0.6.3-goption.patch: removed. it has been merged in upstream.
    - paps-0.6.3-header.patch: removed. it has been merged in upstream.
  - paps-makefile.patch: rework to be applied.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-2
changelog:
  - paps-0.6.6-encoding.patch: support --encoding option to be able to convert
    the input file to UTF-8.
  - paps-0.6.6-segfault.patch: fixed a possible segfault issue when reading is
    failed.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-5
changelog:
  - paps-typo-font-scale.patch: backported from CVS.
  - paps-0.6.6-font-option.patch: integrated --font-family and --font-scale
    options to --font.
  - paps-0.6.6-lcctype.patch: follow LC_CTYPE to determine the default language.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-8
changelog:
  - use dist tag.
  - paps-cups.patch: applied to work paps as CUPS filter.
  - paps-0.6.6-encoding.patch: null-terminates the output.


author: Tim Waugh <twaugh@redhat.com> - 0.6.6-9
changelog:
  - Fixed font-option patch.
  - Adjusted CUPS patch: CUPS invokes the filter with the destination
    printer name in argv[0], not the binary name.
  - CUPS filter lives in CUPS_SERVERBIN, which is /usr/lib/cups on all
    architectures -- not %{_libdir}/cups.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-10
changelog:
  - paps-0.6.6-cpilpi.patch: add --cpi and --lpi option to support the characters
    per inch and the lines per inch.
  - paps-cups.patch: add cpi and lpi support.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-16
changelog:
  - paps-0.6.6-exitcode.patch: exit immediately with proper exit code
    when unrecoverable error occurs. (#208592)


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-19
changelog:
  - Fix PostScript breakage following the non-monetary numeric format from
    current locale. (#231916)


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-1
changelog:
  - New upstream release.
    - Remove patches merged and unnecessary anymore:
      - paps-makefile.patch
      - paps-formfeed.patch
      - paps-0.6.6-encoding.patch
      - paps-typo-font-scale.patch
      - paps-0.6.6-segfault.patch
      - paps-0.6.6-font-option.patch
      - paps-0.6.6-lcctype.patch
  - paps-0.6.8-shared.patch: Enable building shared library.
  - paps-0.6.8-wordwrap.patch: Update a bit to get it working without an wordwrap
    mode.
  - Add paps-libs and paps-devel package.
  - paps-cups.patch: Update.
  - paps-cpilpi.patch: Update.
  - Fix the wrong rendering with CPI option. (#237202)
  - Fix the unnecessary rotation with the landscape option when paps is running
    as CUPS filter. (#222137)


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-6
changelog:
  - paps-cups.patch: Fix printing with -o landscape in CUPS. (#222137)
  - paps-autoconf262.patch: Fix an error on autoreconf.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.4.11
  - add EFI GPT patch from Matt Domsch (<Matt_Domsch@dell.com>)
  - don't run autoconf, it relies on a newer non-released version
    of autoconf...


author: Matt Wilson <msw@redhat.com>
changelog:
  - include python binding
  - enable shared library (for python binding, we want fpic code)
    with --enable-shared
  - build parted binary static with --enable-all-static
  - don't run libtoolize on this.


author: Matt Wilson <msw@redhat.com>
changelog:
  - added another fix for ext2/ext3
  - added Patch4 to move the crc32 function into its own namespace so
    we don't colide with zlib when both are in the same executable space


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a new dist tarball that contains a check in python code to
    make sure that a partition exists within a disk before trying to
    remove it from the disk
  - also changed _probe_with_open to make the first probed filesystem win


author: Matt Wilson <msw@redhat.com>
changelog:
  - 1.4.16
  - regenerated gpt patch against 1.4.16, incorporated
    parted-1.4.15-pre1-gpt-printf.patch into the same patch, removed Patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - made a new dist from CVS that includes binding for
    disk.get_partition_by_sector and accessing the name of a disk type


author: Matt Wilson <msw@redhat.com> 1.4.16-6
changelog:
  - added a patch (Patch1) to link the c library in dynamically, the
    rest of the libs statically for the parted binary (MF #49358)


author: Matt Wilson <msw@redhat.com> 1.4.16-8
changelog:
  - new dist from cvs with changes to the python binding: register
    DEVICE_I20 and DEVICE_ATARAID, check to make sure that a partition
    exists in the PedDisk when using it to find ped_disk_next_partition


author: Matt Wilson <msw@redhat.com> 1.4.20-0.1pre3
changelog:
  - new dist from CVS with new autoconf and automake
  - gpt is in 1.4.20, removed patch1 (gpt support)
  - partstatic is in 1.4.20, removed patch2 (partstatic patch)


author: Jeremy Katz <katzj@redhat.com> 1.4.24-6hammer
changelog:
  - libtoolize, etc for x86_64
  - hack to get the python module in the right place until python.m4 
    from automake is fixed


author: Jeremy Katz <katzj@redhat.com> 1.4.24-7
changelog:
  - use make LIBTOOL=/usr/bin/libtool instead of recreating everything
  - add patch from Jack Howarth <howarth@bromo.med.uc.edu> to self host properly
  - add patch to treat GPT structs as little-endian always and treat GUIDS 
    as little-endian blobs
  - add patch to recognize hp service partitions


author: Karsten Hopp <karsten@redhat.de> 1.6.3-11
changelog:
  - use different define to enable DASD debugging
    Otherwise we'll get a lot of dasd debug output because DEBUG is
    always defined


author: Matt Wilson <msw@redhat.com> 1.6.3-18
changelog:
  - use metadata partitions to protect DASD VTOC
  - stash DASD specific data in disk specific areas, not arch specific
    areas.


author: Matt Wilson <msw@redhat.com> 1.6.3-20
changelog:
  - don't detect AIX physical volumes as msdos partition tables (#91748)
  - added stubbed code for manipulating AIX PVs, enough to clobber the
    signature. (#91748)


author: Jeremy Katz <katzj@redhat.com> 1.6.3-33
changelog:
  - 2.6 removes the geometry fixups that used to be present for IDE disks.  
    According to Andries, just follow what's in the partition table and don't 
    worry about what Linux "detects"


author: Jeremy Katz <katzj@redhat.com> - 1.6.6-1
changelog:
  - update to 1.6.6 
  - split dasd into a patch instead of included in the tarball
  - python module is now in the pyparted package (separate src.rpm)
  - ExcludeArch: ppc64 (#118183)


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-1
changelog:
  - update to 1.6.9
  - need automake17
  - python-devel is superfluous with pyparted as a separate package
  - lose the fake-libtool stuff, 1.6.9 was disted with newer auto*


author: Jeremy Katz <katzj@redhat.com> - 1.6.9-4
changelog:
  - add patch from Matt Domsch to not use the get/set last sector ioctls 
    with a 2.6 kernel (#121455)


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-1
changelog:
  - update to 1.6.12 with major changes to CHS handling to hopefully fix #115980
  - adjust dasd patch accordingly, drop some included patches


author: Jeremy Katz <katzj@redhat.com> - 1.6.12-2
changelog:
  - fix assertion error when checking flags on non-active partition (#130692)
  - buildrequires: gettext-devel


author: Phil Knirsch <pknirsch@redhat.com> 1.6.15-4
changelog:
  - Fixed dasd patch (had some duplicate file patches in it)
  - Fixed problem with parted segfaulting on SCSI discs on s390 (#133997)


author: Jeremy Katz <katzj@redhat.com> - 1.6.15-5
changelog:
  - add patch from Matt Domsch to add a unique signature to new DOS labels 
    so that we can later determine which BIOS disk is which (#106674)


author: Jeremy Katz <katzj@redhat.com> - 1.6.16-2
changelog:
  - add patch from Matt Domsch to fix consistency of GPT disk labels 
    with the EFI specification for disks > 2TB (#138480)
  - understand the new Sun UFS partition ID
  - merge the new geometry probing from CVS to see if that helps the 
    assertions people are seeing (#138419)


author: Chris Lumens <clumens@redhat.com> 1.6.22-1
changelog:
  - Updated to 1.6.22.
  - Get rid of separate gc4 patch that's now included upstream.
  - Take Mac LVM patch from parted CVS.


author: Chris Lumens <clumens@redhat.com> 1.6.22-3
changelog:
  - Modified Apple_Free patch to take care of the case where the partitions
    are unnamed, causing many errors to be printed (#159047).


author: Chris Lumens <clumens@redhat.com> 1.6.23-1
changelog:
  - Updated to 1.6.23.
  - Get rid of separate Mac patches that are now included in upstream.
  - Update DASD and AIX patches.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-11
changelog:
  - Expand error buffer to 8192 bytes in vtoc_error()
  - Do not apply O_DIRECT patch on S/390 or S/390x platforms


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-12
changelog:
  - Updated O_DIRECT patch to work around s390 problems
  - Update LastUsableLBA on GPT-labeled disks after LUN resize (#194238)
  - Fix exception when backup GPT table is not in the correction location
    and parted tries to move it (#194238)


author: Peter Jones <pjones@redhat.com> - 1.7.1-13
changelog:
  - Don't use the "volume name" as the device node name on dm device
    partitions, it isn't really what we want at all.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-14
changelog:
  - Improve error message returned by _parse_header() on GPT-labeled disks
    so users actually have an idea of how to correct the problem
  - Fix off-by-one error with LastUsableLBA and PartitionEntryLBA overlap
    to prevent possible data corruption when using non-parted GPT editing
    tools


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-16
changelog:
  - Don't throw PED_EXCEPTION_ERROR in ped_geometry_read() if accessing
    sectors outside of partition boundary, since returning false will
    shift ped_geometry_check() to the correct sectors.


author: David Cantrell <dcantrell@redhat.com> - 1.7.1-17
changelog:
  - For init_generic() failures on user-mode Linux block devices, goto
    error_free_arch_specific instead of error_free_dev.


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-2
changelog:
  - Preserve starting sector for primary NTFS 3.1 partitions (Windows
    Vista) when modifying the DOS disk label.  NTFS 3.1 partitions do
    not start on the 2nd head of the 1st cylinder at the beginning of
    the drive.


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-3
changelog:
  - Remove BR for libtermcap-devel
  - Specifically preserve starting alignment of 0x800 on Windows Vista
    (see http://support.microsoft.com/kb/923332 for details)
  - Fix incorrect sector parameter used to initialize a new PedAlignment


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-4
changelog:
  - Patched parted.8 man page to show partition names apply to GPT disklabels
    as well as Mac and PC98 disklabels (#221600)


author: David Cantrell <dcantrell@redhat.com> - 1.8.2-5
changelog:
  - Remove period from end of summary line (package review)
  - Use preferred BuildRoot (package review)
  - BR device-mapper-devel


author: David Cantrell <dcantrell@redhat.com> - 1.8.4-1
changelog:
  - Upgrade to GNU parted-1.8.4, summary of major changes:
       a) Update to use newest GNU developer tools
       b) Use gnulib, the GNU portability library
       c) HFS+ resize support
       d) Windows Vista fixes
       e) AIX disk label fixes
       f) >512 byte logical sector read support on Linux
  - Spec file cleanups per Fedora packaging guidelines


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-1
changelog:
  - Upgrade to GNU parted-1.8.6, summary of major change(s):
       a) Revert linux-swap(new) and linux-swap(old) fs types, it's
          linux-swap for all swap types (#233085)


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-4
changelog:
  - Fix primary partition cylinder alignment error for DOS disk labels (#229745)
  - Do not build and package up libparted.a, only the shared library


author: David Cantrell <dcantrell@redhat.com> - 1.8.6-12
changelog:
  - Add KNOWN ISSUES section to parted(8) man page explaining that we cannot
    currently do ext3 resizing inside parted (#367101)
  - Update the xvd patch to include 'xvd' in the string table that parted
    uses when printing device types (#366971)
  - Do not install the linux.h or gnu.h headers


author: Peter Jones <pjones@redhat.com> - 1.8.8-4
changelog:
  - Don't interactively ask to fix an AlternateGPT's location when not
    at the end of the disk; this is so that disk images written to a
    usb-key can work reasonably.


author: Joel Granados <jgranado@redhat.com> - 1.8.8-15
changelog:
  - Begin to identify virtio devices.
  - Actually change the partition type in msdos lables (dcantrell).


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-15
changelog:
  - ped_partition_is_busy() should not throw exceptions (#527035)
  - msdos_partition_is_flag_available() should return 1 for swap flag (#513729)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-17
changelog:
  - Only change the partition type to 82 when setting the swap flag on dos
    labels, not when resetting it


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-20
changelog:
  - Fix error when creating a fresh dasd disk (#532425)
  - Rewrite dasd disk duplication patches, as the old old ones conflicted
    with fixing creating a fresh dasd disk


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-22
changelog:
  - Fix error when creating a fresh dasd disk on a dasd device
    with a corrupted dasd label (#533808)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-24
changelog:
  - Allow partitioning of loopback devices (#546622)
  - Add libparted function to query maximum partition length and start
    addresses for a given disk (#533417)
  - Add per disk flags functions from upstream, this is the way upstream
    has implemented the disable cylinder alignment functionality
  - Add --align cmdline option to specify how to align new partitions
    see the parted man page for details (#361951)
  - Make the default alignment for new partitions optimal (#361951)
    Resolves: #361951
  - When cylinder alignment is disabled, allow use of the last (incomplete)
    cylinder of the disk (#533328)
  - Don't crash when printing partition tables in Russian (#543029)
  - Make parted work correctly with new lvm (#525095)


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-25
changelog:
  - Fix crash when partitioning loopback devices (#546622)
    Resolves: #549075
  - Drop no-cylinder-align patch:
    - its functionality is superseeded by the per disk flags
    - its only user (pyparted) has been updated to use those
    - this is not upstream so we don't want other programs to start using it


author: Hans de Goede <hdegoede@redhat.com> 2.1-1
changelog:
  - New upstream release 2.1
  - Drop all our patches (all merged upstream)
  - This fixes the usage of disks with 4k logical sectors (#523954)
    Resolves: #523954


author: Hans de Goede <hdegoede@redhat.com> 2.1-2
changelog:
  - Fix various memory leaks in error paths (#556012)
  - Add %check section to the specfile, invoking make check
  - If a drive does not have alignment information available default
    to an alignment of 1MiB (#559639)
    Resolves: #559639


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
    Resolves: #563419
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)
    Resolves: #563211


author: Hans de Goede <hdegoede@redhat.com> 2.1-7
changelog:
  - Properly check dm_task_run return value (#585158)
    Resolves: #585158
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)
    Resolves: #585159
  - Add a flag for detecting diagnostics / recovery partitions


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Brian C. Lane <bcl@redhat.com> 2.1-14
changelog:
  - Fix scsi_debug race condition in tests
  - turn t9020 and t9030 tests back on
  - Add legacy_boot support to GPT disklabel (#711148)
    Resolves: #711148
  - Remove asserts from CHS guessing code (#692562)
    Resolves: #692562
  - Fix snap radius and don't allow values < 1 (#665496)
    Resolves: #665496


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: PLD Team <pld-list@pld.org.pl>
changelog:
  All persons listed below can be reached at <cvs_login>@pld.org.pl

  $Log: passivetex.spec,v $
  Revision 1.8  2001/08/21 10:12:42  wrobell
  - ver. 1.6
  - stb

  Revision 1.7  2001/03/27 16:55:44  wiget
  Requires xmltex

  Revision 1.6  2001/03/27 16:53:29  wiget
  changed Source URL, updated to 1.5 version, more files in package; now passivetex is more powerfull and work ;-)

  Revision 1.5  2001/01/27 03:25:36  kloczek
  - added tetex to Prerq,
  - simplified %post, %postun.

  Revision 1.4  2001/01/27 00:08:39  klakier
  - added URL

  Revision 1.3  2001/01/27 00:07:47  klakier
  - added URL

  Revision 1.2  2001/01/24 12:41:17  klakier
  - small fixes

  Revision 1.1  2001/01/24 12:31:43  klakier
  - initial


author: Tim Waugh <twaugh@redhat.com> 1.6-2
changelog:
  - New archive from Sebastian.
  - Run fmtutil in %post and %postun.
  - Require new xmltex.
  - Fix body-start().


author: Ondrej Vasik <ovasik@redhat.com> - 1.25-6
changelog:
  - added doc files
  - used texconfig-sys rehash instead of texhash
  - dist tag, license tag, rpmlint silencing


author: Nalin Dahyabhai <nalin@redhat.com> 0.64.1-7
changelog:
  - fix unguarded printf() (noted by Chris Evans)
  - add missing build dependency on pwdb and pam-devel (#49550)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64.1-8
changelog:
  - man page fix (-r is the opposite of -l, not --stdin, which precedes it)
    from Felipe Gustavo de Almeida


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-4
changelog:
  - modify default PAM configuration file to not specify directories, so that
    the same configuration can be used for all arches on multilib systems
  - fix BuildPrereq on glib-devel to specify glib2-devel instead
  - remove unpackaged files in %install phase


author: Jindrich Novy <jnovy@redhat.com> 0.68-10
changelog:
  - moved to 0.68-10 to fix problem with RHEL4-Alpha4 #129548
  - updated GNU build scripts and file structure to recent style


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - applied cleanup patch from Steve Grubb #120060
  - fixed man page #115380
  - added libselinux-devel to BuildPrereq #123750, #119416


author: Tomas Mraz <tmraz@redhat.com> 0.72-1
changelog:
  - merged audit patch to upstream cvs
  - improved passwd -S output (#170344)
  - make passwd -d work with stripped down proc (#196851)
  - corrected link to pam docs (#193084)
  - spec file cleanups


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-6
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix the case where stderr isnt flushed for ask(). Now the 'no such file'
    appears before the skip patch question, not at the very end, Doh!


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - use .orig as default suffix, as per man page and previous behaviour
    (bug #20202).
  - use better patch for this, from maintainer.


author: Tim Waugh <twaugh@redhat.com> 2.5.4-31
changelog:
  - Convert spec file to UTF-8 (bug #226233).
  - Use _bindir macro in %files (bug #226233).
  - Parallel make (bug #226233).
  - Better defattr declaration (bug #226233).


author: Tim Waugh <twaugh@redhat.com> 2.5.4-35
changelog:
  - Don't fail if setfilecon() returns EPERM (bug #453365), although the
    setfilecon man page suggests that ENOTSUP will be returned in this
    case.


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Tim Waugh <twaugh@redhat.com> 0.2.31-4
changelog:
  - Versioned obsoletes/provides (bug #226234).
  - Created %check section (bug #226234).
  - Avoid %makeinstall (bug #226234).
  - Fixed defattr declaration (bug #226234).


author: Matt Wilson <msw@redhat.com>
changelog:
  - pull PAX source tarball from the SuSE package (which is based off
    this one yet claims copyright on the spec file)


author: Radek Brich <rbrich@redhat.com> - 3.4-2
changelog:
  - applied patch for #239000 (pax fails creation of ustar
    if an absolute name is exactly 100 characters long)


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-7
changelog:
  - Merge review #226235: do ship doc files,
    do comment patches, use better buildroot and
    defaults for attributes, allow parallel builds


author: Elliot Lee <sopwith@redhat.com> 2.1.10-5
changelog:
  - Add patch4 for ppc64. The basic rule seems to be that on any platform
  where it is possible to be running a 64-bit kernel, we need to always 
  print out 64-bit addresses.


author: Jeremy Katz <katzj@redhat.com> 2.1.11-2
changelog:
  - build a diet libpci_loader.a on i386
  - always assume pread exists, it does with diet and all vaguely recent glibc


author: Harald Hoyer <harald@redhat.com> 2.2.9-3
changelog:
  - removed static library, preserve timestamps on install (rhbz#226236)
  - added modified patch from Michael E. Brown @ Dell, to also
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)


author: Michal Hlavinka <mhlavink@redhat.com> 3.0.1-1
changelog:
  - version 3.0.1
  - add support for Super-H (sh3,sh4) (#446600)
  - fix: broken -L in libpci.pc (#456469)


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Bill Nottingham <notting@redhat.com> 006-2
changelog:
  - udev patch - right idea, awful execution. fix that (#163311)
  - add requirement for 2.6.13-rc1, basically


author: Martin Hicks <mort@sgi.com> - 3.0.1-2
changelog:
  - Remove IB dependencies.  The Infiniband PMDA is being moved to
    a stand-alone package.
  - Move cluster PMDA to a stand-alone package.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.5-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Fix security flaws: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 (BZ 848629)


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.6-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Introduces new python-pcp and pcp-testsuite sub-packages.


author: Nathan Scott <nathans@redhat.com> - 3.6.9-1
changelog:
  - Update to latest PCP sources.
  - Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
  - Fix sar2pcp uninitialised perl variable warning (BZ 859117)
  - Fix pcp.py and pmcollectl with older python versions (BZ 852234)


author: Nathan Scott <nathans@redhat.com> - 3.6.10-1
changelog:
  - Update to latest PCP sources.
  - Resolve tmpfile security flaws: CVE-2012-5530
  - Introduces new "pcp" user account for all daemons to use.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-2
changelog:
  - Ensure tmpfile directories created in %files section.
  - Resolve tmpfile create/teardown race conditions.


author: Nathan Scott <nathans@redhat.com> - 3.8.0-1
changelog:
  - Update to latest PCP sources.
  - Validate metric names passed into pmiAddMetric (BZ 958019)
  - Install log directories with correct ownership (BZ 960858)


author: Nathan Scott <nathans@redhat.com> - 3.8.1-1
changelog:
  - Update to latest PCP sources.
  - Fix log import silently dropping >1024 metrics (BZ 968210)
  - Move some commonly used tools on the usual PATH (BZ 967709)
  - Improve pmatop handling of missing proc metrics (BZ 963085)
  - Stop out-of-order records corrupting import logs (BZ 958745)


author: Nathan Scott <nathans@redhat.com> - 3.8.2-1
changelog:
  - Update to latest PCP sources.
  - Integrate gluster related stats with PCP (BZ 969348)
  - Fix for iostat2pcp not parsing iostat output (BZ 981545)
  - Start pmlogger with usable config by default (BZ 953759)
  - Fix pmatop failing to start, gives stacktrace (BZ 963085)


author: Nathan Scott <nathans@redhat.com> - 3.8.3-1
changelog:
  - Default to Unix domain socket (authenticated) local connections.
  - Introduces new pcp-pmda-infiniband sub-package.
  - Disable systemtap-sdt-devel usage on ppc.


author: Nathan Scott <nathans@redhat.com> - 3.8.4-1
changelog:
  - Very minor release containing mostly QA related changes.
  - Enables many more metrics to be logged for Linux hosts.


author: Nathan Scott <nathans@redhat.com> - 3.8.6-1
changelog:
  - Update to latest PCP sources.
  - Rework pmpost test which confused virus checkers (BZ 1024850)
  - Tackle pmatop reporting issues via alternate metrics (BZ 998735)


author: Nathan Scott <nathans@redhat.com> - 3.8.9-1
changelog:
  - Reduce set of exported symbols from DSO PMDAs (BZ 1025694)
  - Symbol-versioning for PCP shared libraries (BZ 1037771)
  - Fix pmcd/Avahi interaction with multiple ports (BZ 1035513)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.0-1
changelog:
  - Create new sub-packages for pcp-webapi and pcp-manager
  - Split configuration from pcp-libs into pcp-conf (multilib)
  - Fix pmdagluster to handle more volumes, fileops (BZ 1066544)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources again (BZ 1158681).
  - Fixes bug in s390x /proc/cpuinfo parsing (BZ 1196540).
  - Added explicit PAPI 5.1.1 build dependencies (BZ 1188045).
  - Improved diagnostics for chkconfig-driven service (BZ 1131022).
  - New sub-package for pcp-import-ganglia2pcp.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-2
changelog:
  - Resolve PAPI build dependency issues again (BZ 1188045).
  - Fix Avahi-related pmwebd memory corruption (BZ 1199052).
  - Resolve QA test case failures (BZ 1198031 & BZ 1198981).


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 7.8-7
changelog:
  - Check starting offest for pointing into a subject string
    (Resolves: #1193524)
  - Pass back detailed error when UTF-8 check fails at runtime
    (Resolves: #1193524)


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.73-1
changelog:
  - Cluster name is now viewable on RHEL 6
  - Cluster.conf is now removed on destroy
  - Misc man page & usage updates
  - When removing the last resource from a group, remove any constraints still
    remaining on group


author: Chris Feist <cfeist@redhat.com> - 0.9.74-1
changelog:
  - pcs cluster edit should now work properly
  - Allow removal of group and resources inside group with
    pcs resource delete <group name>


author: Chris Feist <cfeist@redhat.com> - 0.9.75-1
changelog:
  - Removing a resource that is part of a resource set is now allowed
  - When you try to remove a group from a master that has more than one
    resource you now recieve a helpful error
  - Unclone works on clones where constraints have been added
  - Removing a group with constraints now works properly
  - Master/Slave groups now have constraints properly removed before being
    deleted


author: Chris Feist <cfeist@redhat.com> - 0.9.76-1
changelog:
  - Renamed resource group remove/delete to ungroup
  - Fixed moving resource masters
  - Allow cloing/mastering last resource in a group


author: Chris Feist <cfeist@redhat.com> - 0.9.77-1
changelog:
  - Fixed managing/unmanaging groups/clones/masters of resources
  - Fixed issue when using --group when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.78-1
changelog:
  - Fixed error codes and stdout/stderr output on errors from pcs resource
    enable/disable
  - Automatically add interval to operations which don't specify an interval


author: Chris Feist <cfeist@redhat.com> - 0.9.79-1
changelog:
  - Fixed OCF_CHECK_LEVEL operation setting in resource update
  - Return proper error codes when stopping/starting/enable/disabling resources
  - Return proper error code on auth


author: Chris Feist <cfeist@redhat.com> - 0.9.80-1
changelog:
  - More fixes for OCF_CHECK_LEVEL issues
  - Fix traceback when adding a resourcew with a provider that doesn't exist
  - Create proper two_node cluster when only two nodes are specified in cluster
    setup
  - Give useful error when bad options are used with 'op'


author: Chris Feist <cfeist@redhat.com> - 0.9.81-1
changelog:
  - Fix issues when updating resource with multiple operations with the same
    action
  - Fixed constraint rules and improved usage documentation


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.101-1
changelog:
  - Rebase for new features
  - Added ability to set uidgid in cluster.conf
  - Stonith level add now properly recognizes nodes
  - Resolves: rhbz#1025053 rhbz#1019410


author: Chris Feist <cfeist@redhat.com> - 0.9.101-3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1066927


author: Chris Feist <cfeist@redhat.com> - 0.9.118-2
changelog:
  - Re-synced to upstream sources
  - Fixed dependency on rubygems
  - Fixed pam long timeouts due to fprintd
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.120-2
changelog:
  - Use /usr/sbin/pcs for pcs instead of /sbin/pcs
  - Use Open4 instead of POpen4 for running commands
  - Fixed cluster setup for RHEL6
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.121-1
changelog:
  - Don't try to get metadata for fence_check, fence_tool & fence_node
  - Cloned M/S groups can now be deleted
  - Clone options can now follow --clone
  - Cloned resources with globally-unique=true can now be deleted
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.138-1
changelog:
  - Rebased to latest upstream packages
  - Fixed creating default resource operations
  - Added support for RRP and corosync options for cman based clusters
  - Allowed scope=configuration in cib commands
  - Added support for configuring a cluster remotely using pcsd
  - Fixed globally-unique clone resources in pcsd
  - Added resource location to resources / stonith devices list
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - Parallelized cluster start and cluster stop
  - Added warning when nodes stop will cause a loss of the quorum
  - pcs status --full now displays Node attributes and Migration summary
  - Resolves: rhbz#1185738 rhbz#1031141 rhbz#1121769 rhbz#1126835 rhbz#1160359 rhbz#1168986 rhbz#1174244 rhbz#1174793 rhbz#1174798 rhbz#1174801 rhbz#1184763 rhbz#1184922


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-1
changelog:
  - Rebased to latest upstream packages
  - Fixed constraints removal and node standby/unstandby using remote GUI
  - Fixed displaying of fence / resource agent metadata in GUI
  - Added Pacemaker Resource defaults and Op defaults to 'pcs config' output
  - Fixed 'pcs resource clear' used on cloned group
  - Added support for scope option in cib commands
  - Added warning when creating a cluster with UDPU transport
  - Reload cluster.conf after node addition / removal
  - Resolves: rhbz#1185738 rhbz#1168982 rhbz#1174793 rhbz#1187488 rhbz#1190167 rhbz#1190168 rhbz#1191898 rhbz#1193433


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.145-1
changelog:
  - Rebased to latest upstream packages
  - Added a warning to "pcs cluster setup" when a node is already in a cluster
  - Fixes in help text and man page
  - Rubygems built with RELRO
  - Added option to put a node into maintenance mode
  - Ungrouping the last resource from a cloned group no longer produces an invalid CIB
  - Removing a resource from a group no longer removes constraints referencing that group
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Added support for exporting cluster configuration to a list of pcs commands using clufter
  - Added automatic removal of old config file backups
  - Fixed removing a fence device from fence levels on deleting the device
  - Resolves: rhbz#1260021 rhbz#1190732 rhbz#1203802 rhbz#1230368 rhbz#1242158 rhbz#1243744 rhbz#1245721 rhbz#1247883 rhbz#1247979 rhbz#1253288 rhbz#1253292 rhbz#1264795 rhbz#1273391 rhbz#1275254


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.146-1
changelog:
  - Rebased to latest upstream packages
  - Rubygems built with RELRO
  - Resolves: rhbz#1260021 rhbz#1242158


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.148-1
changelog:
  - Rebased to latest upstream packages
  - Fixed crashes on one-node clusters
  - Resolves: rhbz#1260021 rhbz#1283627


author: Ivan Devat <idevat@redhat.com> - 0.9.148-2
changelog:
  - Moved DISABLED_GUI option to /etc/sysconfig/pcsd
  - Added backend support for new cluster properties form in web UI
  - Fixed multilib .pyc/.pyo issue
  - Resolves: rhbz#1297782 rhbz#1298163


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Ivan Devat <idevat@redhat.com> - 0.9.154-1
changelog:
  - Rebased to latest upstream packages
  - Keep a cluster qauorate as long as possible when shutting it down
  - Fixed disabling TLSv1.1 in pcsd
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed adding a node when fencing configuration has been manually changed in cluster.conf
  - Make pcsd init script wait for pcsd to fully start
  - Gracefully handle errors when reading cluster properties definition
  - Resolves: rhbz#1373874 rhbz#1353738 rhbz#1344928 rhbz#1369029 rhbz#1319070 rhbz#1328870 rhbz#1325459


author: Ivan Devat <idevat@redhat.com> - 0.9.155-1
changelog:
  - Rebased to latest upstream packages
  - When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
  - Fixed occasional crashes / failures when using locale other than en_US.UTF8
  - Added SBD support for cman clusters
  - Added alerts management in web UI
  - Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480


author: Ivan Devat <idevat@redhat.com> - 0.9.155-2
changelog:
  - Fixed upgrading CIB to the latest schema version
  - Adding a node in a cluster does not cause the new node to be fenced immediately
  - Fixed handling of HTTP communication failure
  - Added dependency on cman
  - Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857


author: Ondrej Mular <omular@redhat.com> - 0.9.155-3
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Resolves: rhbz#1557962


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.0.2.rc3
changelog:
  - Update to 1.2.0-rc3.
  - Trivial init script improvements.
  - Enable %{_smp_mflags}.
  - Don't bother trying to enable SCF.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.6
changelog:
  - Improve package summary.
  - Improvements based on suggestions from Ludovic Rousseau:
    - Don't install pcsc_demo but do include its source in -devel.
    - Sync reader.conf with current upstream CVS HEAD (better docs, less
      intrusive in USB-only setups where it's not needed).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-10
changelog:
  - Disable dependency tracking to speed up the build.
  - Drop reader.conf patch, it's not needed any more.
  - Rename update-reader-conf to update-reader.conf for consistency with Debian,
    and improve it a bit.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.0-13
changelog:
  - Don't ship static libraries.
  - Don't mark the init script as a config file.
  - Use rm instead of %exclude.
  - Specfile cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-2
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.


author: Karsten Hopp <karsten@redhat.com> 1.4.102-4
changelog:
  - remove excludearch s390, s390x (#467788)
    even though s390 does not have libusb or smartCards, the libusb
    packages are required to build other packages.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Michal Schmidt <mschmidt@redhat.com> - 3.0-2.0.16.gb2f2e82
changelog:
  - Respect distro CFLAGS, restore fortification.
  - debuginfo package had executable source files.
  - Related: bz1127235, bz1129312


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-105
changelog:
  - 547657 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead
  - subpackage parent and Parse-CPAN-Meta; add them to core's dep list
  - exclude "parent".
  - exclude Parse-CPAN-Meta.
  Resolves: rhbz#547657


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-106
changelog:
  - 554654 -  "perldoc perlvar" renders incorrectly in C and en_US.UTF-8 locales.
  - 554666 -  Wrong man pages location specified in perl manual page
  - Resolves: rhbz#554654, rhbz#554666


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-107
changelog:
  - clean spec - remove unused patches, rename patches, sources
  - add releases macros for all modules
  - change license according to legal
  - update modules to stable version. e.g. Module-Build can't be updated anymore
    because of API breakage, that's true also for some other modules.
  - Related: rhbz#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-108
changelog:
  - remove DPERL_USE_SAFE_PUTENV from Configure #577229 Use perl internal
   putenv, which doesn't leak memory.
  - 580238 wrong version of module
  Resolves: rhbz#580238


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - 597982 add all version* in -version sub-package
  - Resolves: rhbz#597982, rhbz#598397, rhbz#595387, rhbz#595387


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-111
changelog:
  - fix conflicts in specfile, upload missing sources, upload patch with
   wrong name
  - Related: rhbz# 594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-113
changelog:
  - fix CGI test data location to pass internal tests 
  - remove CPAN and CPANPLUS sysconfig declarations as they are not provided
  - disable tests on s390(x) and ppc64 as multithread stress tests fails
  - Related: rhbz#594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-114
changelog:
  - Remove unused @INC paths
  - Own all used @INC paths
  - Own architecture dependent paths by perl-libs due to multiarch
  - Resolves: rhbz#554671


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.56-0.fdr.1
changelog:
  - Update to 1.56.
  - License corrected.
  - Require perl >= 1:5.6.1 for vendor install dir support.
  - Moved make test to section %check
  unset DISPLAY
  .
  - Use pure_install to avoid perllocal.pod workarounds.


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Steven Pritchard <steve@kspei.com> 2.11-1
changelog:
  - Update to 2.11.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to resemble cpanspec output.
  - Drop explicit perl build dependency.


author: Steven Pritchard <steve@kspei.com> 1.28-2
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Remove redundant BR perl.
  - BR ExtUtils::MakeMaker, Test::More, Test::Pod, and Test::Pod::Coverage.
  - Patch t/setrlimit.t to fix bogus test failure.
  - Set OPTIMIZE when running Makefile.PL, not make.


author: Steven Pritchard <steve@kspei.com> 6.4-3
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Improve Summary.
  - Remove redundant perl build dependency.
  - BR ExtUtils::MakeMaker.
  - Set OPTIMIZE when we run Makefile.PL, not make.
  - BR perl(Carp::Clan) instead of perl-Carp-Clan.
  - Remove redundant Carp::Clan dependency.
  - Filter unversioned Provides: perl(Bit::Vector)


author: Robin Norwood <rnorwood@redhat.com> 6.4-4
changelog:
  - Resolves: rhbz#247212
  - Fix broken perl_provides script - it was removing both the versioned
    and unversioned Provides: perl(Bit::Vector)


author: Robin Norwood <rnorwood@redhat.com> - 5.9-1
changelog:
  - Update to latest CPAN version: 5.9
  - Upstream Makefile.PL prompts for user input to include
    Object::Deadly as a prerequisite.  We don't ship Object::Deadly, so
    just comment out the prompt.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.23-3
changelog:
  - Unconditionally BR: perl(Test::CPAN::Meta).
  - Adjust minimum perl version in META.yml (Add Class-Inspector-1.23.diff).


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.10-1
changelog:
  - fix compile bug by going to 2.10 (CPAN says it is unauthorized, 
    but the copyright holder says it is ok)


author: Ralf Corsépius <rc040203@freenet.de> - 2.10-4
changelog:
  - Remove %clean ||: (BZ 449442, FTBFS).
  - Use %version in Source0-URL.
  - Don't skip 0-signature.t.
  - Misc. minor spec-file overhaul.


author: Steven Pritchard <steve@kspei.com> 1.4-1
changelog:
  - Update to 1.4.
  - Update License tag.
  - Drop our copy of the license text.
  - Improve Summary.
  - Make description match cpanspec output.
  - BR Test::More.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.42-1
changelog:
  - 2.42.
  - Patch test suite to use system installed Tie::IxHash.
  - Fix some spelling errors in %description.
  - Use Source0: instead of Source:.


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.52-1
changelog:
  - 2.52 bump, specify all dependencies
  - Resolves: #658946 - Stop error reporting when config is a directory


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> - 0:1.6-0.fdr.3
changelog:
  - Changed URL to canonical location (bug 1140).
  - Added build req perl >= 1:5.6.1 and perl(Test::More) (bug 1140).
  - Added missing req perl(:MODULE_COMPAT_...) (bug 1140).
  - Updated to match most recent perl spec template (bug 1140).
  - Removed unneeded optimization settings and find *.bs (bug 1140).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.21-1
changelog:
  - Update to 0.21.
  - Corrected several changelog entries.
  - Removed an explicit perl(Convert::ASN1) provides.


author: Paul Howarth <paul@city-fan.org> 1.119-3
changelog:
  - use full paths for all commands used in build
  - use search.cpan.org download URL
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Wes Hardaker <wjhns174@hardakers.net> - 0.03-2
changelog:
  - Add BuildRequire openssl-devel
  - Don't manually require openssl
  - Use vendorarch instead of vendorlib


author: Wes Hardaker <wjhns174@hardakers.net> - 0.24-3
changelog:
  - BuildRequire perl(Test) perl(ExtUtils::MakeMaker) perl(Crypt::OpenSSL::Bignum)
  - Fixed source code URL


author: Ville Skyttä <ville.skytta at iki.fi> 0.51-8
changelog:
  - Own more installed dirs (#73908).
  - Enable rpmbuild's internal dependency generator, drop unneeded dependencies.
  - Require perl(:MODULE_COMPAT_*).
  - Run tests in the %check section.
  - Fix License, Source0, URL, and Group tags.


author: Robin Norwood <rnorwood@redhat.com> - 0.55-2
changelog:
  - Update to latest version from CPAN: 0.55
  - Remove two old patches, update lib64 patch for Makefile.PL changes.


author: Robin Norwood <rnorwood@redhat.com> - 0.57-1
changelog:
  - Update to latest upstream version.
  - Remove old patch (patch applied to upstream)
  - Several fixes for package review:
  - Fixed BuildRequires (added Test::Pod and LWP::UserAgent)
  - Apply patch to avoid prompting for input when building Makefile
  - Fix defattr line
  - Resolves: bz#226248


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Chip Turner <cturner@redhat.com>
changelog:
  - turn ssl on and allow Makefile.PL to yse mysql_config to find proper link flags
  - update to 2.1021


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.01 bugfix release ("bytea" coredumped with values outside 0...127)
  - Add perl-DBI and perl to BuildRequires (they were just in Requires: previously)


author: Robin Norwood <rnorwood@redhat.com> - 1.49-5
changelog:
  - Fix license tag
  - Add %doc
  - Remove explicit Provides: perl(DBD::Pg) = %{version}
  - Other cleanups


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-3
changelog:
  - DBD::SQLite fails to build with the current FC-5 sqlite version (3.3.3);
    see bugzilla entry #183530.
    Forcing package rebuild with the included version of sqlite (3.2.7).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-4
changelog:
  - Patch to build with system sqlite 3.3.x (#183530).
  - Patch to avoid type information segv (#187873).


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - build for main distribution
  - use %{_tmppath}
  - change name of specfile
  - don't use a find script to generate file lists
  - general cleanup
  - add descriptive summary and description


author: Jose Pedro Oliveira <jpo@di.uminho.pt> - 1.48-4
changelog:
  - (#154762)
  - License information: GPL or Artistic
  - Removed the Time::HiRes building requirement (see Changes)
  - Removed the empty .bs file
  - Corrected file permissions


author: Robin Norwood <rnorwood@redhat.com> - 1.56-1
changelog:
  - Update to latest CPAN version: 1.56
  - Move the filter requires step into %prep
  - Remove very old patch (for perl 5.8.1)
  - Fix a couple of rpmlint issues (non-UTF8 manpage and script with
    incorrect shebang line


author: Robin Norwood <rnorwood@redhat.com> - 1.601-1
changelog:
  - Update to latest CPAN version: 1.601
  - Fix some issues from package review:
    - patch to change #! line in script
    - make script executable
    - fix requires and buildrequires


author: Marcela Mašláňová <mmaslano@redhat.com> - 6.3-1
changelog:
  - new upstream version - noarch, because since 6.0 there were bigger
   changes like stripping this module into more of them


author: Robin Norwood <rnorwood@redhat.com> - 5.44-2
changelog:
  - Add support for KRAT and KRAST timezones
  - Include magic dist tag in release
  - Resolves: rhbz#214709
  - Related: rhbz#100786


author: Robin Norwood <rnorwood@redhat.com> - 5.44-4
changelog:
  - Apply patch to use date +%z as possible source for timezone data
  - Fix license tag
  - Add TODO and HISTORY to %doc list


author: Ed Avis <eda@waniasset.com> - 5.48-1
changelog:
  - Update to 5.48.
  - rhbz#214709 Krasnoyarsk patch now upstream.
  - Changed name to Date-Manip as now used on CPAN.


author: Petr Pisar <ppisar@redhat.com> - 6.24-1
changelog:
  - Rebase to version 6.24 (bug #672934)
  - Patch perl-Date-Manip-5.48-datez-rhbz248500.patch inlcuded in upstream
    already.
  - Move to core Perl path to comply with RHEL Developer Guide


author: Paul Howarth <paul@city-fan.org> 0.2901-2
changelog:
  - Unpack each tarball only once
  - Use Module::Build's build script where available
  - Help each module find the others when needed
  - Clean up files list
  - Include additional documentation from DT::Locale & DT::TimeZone
  - Add BR: perl(File::Find::Rule) & perl(Test::Pod) to improve test coverage
  - Remove unversioned provides of perl(DateTime) & perl(DateTime::TimeZone)


author: Steven Pritchard <steve@kspei.com> 1:0.32-1
changelog:
  - Update to DateTime 0.32.
  - Improve Summary, description, and source URLs.
  - Fix find option order.


author: Steven Pritchard <steve@kspei.com> 1:0.35-1
changelog:
  - Update to DateTime 0.35.
  - Update to DateTime::Locale 0.3101.
  - LICENSE.icu seems to have been renamed LICENSE.cldr.
  - Update to DateTime::TimeZone 0.54.
  - Use fixperms macro instead of our own chmod incantation.
  - Convert DateTime::LeapSecond to UTF-8 to avoid a rpmlint warning.


author: Steven Pritchard <steve@kspei.com> 1:0.36-1
changelog:
  - Update to Date::Time 0.36.
  - Update to DateTime::Locale 0.33.
  - Update to DateTime::TimeZone 0.59.


author: Steven Pritchard <steve@kspei.com> 1:0.37-2
changelog:
  - Filter Win32::TieRegistry dependency.
  - Do the provides filter like we do in cpanspec.
  - Drop some macro usage.


author: Steven Pritchard <steve@kspei.com> 1:0.4302-1
changelog:
  - Update to DateTime 0.4302.
  - Update to DateTime::TimeZone 0.77.
  - Update to DateTime::Locale 0.4001.
  - BR List::MoreUtils.
  - Define IS_MAINTAINER so we run the pod tests.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Steven Pritchard <steve@kspei.com> 1.09-1
changelog:
  - Update to 1.09.
  - Reformat to match cpanspec output.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 2.03-20
changelog:
  - (#155463)
  - BuildArch correction (noarch).
  - Bring up to date with current Fedora.Extras perl spec template.


author: Ville Skyttä <ville.skytta at iki.fi> - 2.11-2
changelog:
  - Sync with latest rpmdevtools perl spec template.
  - BuildRequire perl(ExtUtils::MakeMaker).
  - Convert docs to UTF-8.


author: Steven Pritchard <steve@kspei.com> 1:0.17011-1
changelog:
  - Update to 0.17011.
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Improve Summary.
  - Reformat to match cpanspec output.
  - Build with Module::Build.


author: Steven Pritchard <steve@kspei.com> 1.23-2
changelog:
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Drop executable bit from Exception/Class.pm to avoid a rpmlint warning.


author: Steven Pritchard <steve@kspei.com> 1.24-1
changelog:
  - Update to 1.24.
  - Bump Devel::StackTrace dependency to 1.17.
  - Clean up to match current cpanspec output.
  - Improve Summary and description.
  - Build with Module::Build.
  - BR Test::Pod and Test::Pod::Coverage and define IS_MAINTAINER.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 0.38.1-1
  - new version with COPYING file as requested from upstream
    many thanks to Martin Hosken for quick action!


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 0.45-1
  ⌖ Fedora 10 alpha general package cleanup
  ⚖ Upstream needs to relicense fast to avoid culling


author: Chip Turner <cturner@redhat.com>
changelog:
  - add patch from RHN to allow raw non-conformat calls.
  - doesn't affect main code path, but adds functionality
  - similar to python xmlrpc module


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.06-39
changelog:
  - Source URL: using the Comprehensive Perl Arcana Society Tapestry address
    (Frontier::RPC version 0.06 no longer available in CPAN mirrors).
  - spec cleanup (#156480)


author: Robin Norwood <rnorwood@redhat.com> - 0.07b4-3
changelog:
  - Various fixes from package review:
  - Remove BR: perl
  - Use dist tag in release
  - Resolves: bz#226258


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.12-0.fdr.3
changelog:
  - Avoid RPATH problem in FC1 (bug 1756).
  - Replaced hardcoded value by rpmmacro (%{__perl}) (bug 1756).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.19-1
changelog:
  - Update to 2.19.
  - GIF support has been restored in gd 2.0.28.
  - Module autoconfigures itself with the gdlib-config program.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.35-7
changelog:
  - tests work fine locally, one fails in mock, maybe needs a desktop? 
    conditionalized them, default off.


author: Stepan Kasal <skasal@redhat.com> - 2.44-1
changelog:
  - new upstream version
  - run tests always
  - do not add bdf_scripts/ to docs
  - switch off the test that fails in i686 koji


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.43-0.fdr.2
changelog:
  - Bring up to date with current fedora.us perl spec template.
  - Added the samples directory to the documentation files.


author: Steven Pritchard <steve@kspei.com> 0.24-2
changelog:
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Source in /etc/profile.d/krb5-devel.sh to get our path right.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3.56-1
changelog:
  - Update to 3.56.
  - Brought specfile closer to the Fedora's Perl template.
  - Converted specfile to UTF-8 (changelog entries).
  - Added examples and doc files.


author: Jason Vas Dias <jvdias@redhat.com> - 3.10-1
changelog:
  - fix bug 176720: upgrade to 3.10
  - make .spec file conform to fedora-rpmdevtools spectemplate-perl.spec


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.20-6
changelog:
  - Add Hook-LexWrap-0.20-cpan-rt-38892.diff to fix
    http://rt.cpan.org/Public/Bug/Display.html?id=38892
    (Bugs shows while building rt3).


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
  - New upstream maintainer => new source URL
  - Add buildreqs perl(Test::More) and perl(Test::Pod)
  - Update patch for CPAN RT#38892 to apply without fuzz
  - Fix argument order for find with -depth


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.22-1
changelog:
  - Upstream update.
  - Reflect upstream having fixed CPAN RT#38892:
    Remove Hook-LexWrap-0.21-cpan-rt-38892.diff.
  - Reflect upstream having fixed permissions.


author: Robin Norwood <rnorwood@redhat.com> - 1.12-1
changelog:
  - Update to latest upstream version: 1.12
  - Fix license tag
  - Add BuildRequires for ExtUtils::MakeMaker and Test::Simple
  - Fix package review issues:
  - Source URL
  - Resolves: bz#226264


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to latest upstream version: 1.15
  - Add buildreq and req for perl(Net::LibIDN) to avoid croaking when trying to
    verify an international name against a certificate


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Robin Norwood <rnorwood@redhat.com> - 1.08-3
changelog:
  - Fix various package review issues:
  - Remove BR: perl
  - Remove "|| :" from check section
  - Add dist tag
  - Fix Source URL
  - Fix old changelog entries
  - Resolves: bz#226265


author: Paul Howarth <paul@city-fan.org> 2.110-3
changelog:
  - use search.cpan.org download URL
  - use full paths for all commands used in build
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Steven Pritchard <steve@kspei.com> 0.82-1
changelog:
  - Update to 0.82.
  - Use fixperms macro instead of our own chmod incantation.
  - Fix Source0 URL.
  - BR Test::More.
  - Include LICENSE, README, and abuse/ in docs.
  - Cleanup to more closely resemble cpanspec output.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.042-2
changelog:
  - fix license tag (technically, it was correct before, but this keeps rpmlint from
    flagging this package as a false positive)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.16-0.fdr.3
changelog:
  - Reverted Image::Xbm and Image::Xpm patches.
  - Patched Image::Info::XBM.pm and Image::Info::XPM.pm instead.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.18-1
changelog:
  - Update to 1.18 (broken: cpan ticket #6558).
  - Dropped patches Image-Info-1.16-X[BP]M.pm.patch (accepted upstream).
  - Dropped patch Image-Info-1.16-string.t.patch (test has been rewritten).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.19-1
changelog:
  - Update to 1.19 (broken: cpan tickets: #18020 and #18147).
  - Module::Install 0.58 is broken (Image-Info-1.19-inc-Module-Install.pm.patch).
  - BR: perl(Image::Xbm), perl(Image::Xpm), perl(XML::Simple).


author: Robin Norwood <rnorwood@redhat.com> - 1:0.33-3
changelog:
  - Bugzilla: 207430
  - Incorporate fixes from Jose Oliveira's patch
  - Add perl(IO::Socket::SSL) as a BuildRequires as well
  - Other cleanups from Jose


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Petr Pisar <ppisar@redhat.com> - 1:0.40-2
changelog:
  - Do not set SSL ciphers at all by default (bug #1090966)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104069)


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.13-0.fdr.2
changelog:
  - Sync with IANA 20040517.
  - Require perl >= 1:5.6.1 for vendor install dir support.
  - Use pure_install to avoid perllocal.pod workarounds.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:5.413-0.fdr.1
changelog:
  - Update to 5.413, includes the mimedefang patches.
  - Bring up to date with current fedora.us Perl spec template.


author: Paul Howarth <paul@city-fan.org> - 5.420-1
changelog:
  - 5.420
  - Cosmetic changes reflecting new maintainer's preferences
  - Examples remain executable since they don't introduce new dependencies
  - Simplify provides filter


author: Paul Howarth <paul@city-fan.org> 5.425-1
changelog:
  - Update to 5.425
  - Add note about File::Temp requirement
  - New upstream maintainer -> updated URL for source
  - Given that this package will not build on old distributions, don't cater
    for handling old versions of MIME::QuotedPrint in %check and buildreq
    perl(MIME::Base64) >= 3.03
  - Buildreq perl(File::Path) >= 1, perl(File::Spec) >= 0.6, and
    perl(IO::Stringy) >= 2.110
  - Only include README as %doc, not README*
  - Dispense with provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> 5.426-1
changelog:
  - Update to 5.426
  - Now require File::Temp >= 0.18
  - Add POD tests, coverage disabled because of lack of coverage from upstream


author: Dams <anvil[AT]livna.org> 0:1.58-0.fdr.2
changelog:
  - Added forgotten description
  - Modified Summary according to Michael Schwendt suggestion
  - Modified tarball permissions to 0644


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.64-0.fdr.1
changelog:
  - Update to 1.64, patch applied upstream.
  - Bring up to date with current fedora.us Perl spec template.


author: Paul Howarth <paul@city-fan.org> - 1.67-1
changelog:
  - update to 1.67 (#161830)
  - assume perl_vendorlib is set
  - license is same as perl (GPL or Artistic) according to README
  - don't include module name in summary
  - use macros consistently
  - add dist tag


author: Paul Howarth <paul@city-fan.org> 1.74-2
changelog:
  - cosmetic spec file changes
  - fix CPAN RT#20726 (RH #200450), allowing Mail::Util::read_mbox() to open
    files with weird names


author: Paul Howarth <paul@city-fan.org> 1.76-1
changelog:
  - Update to 1.76
  - Add comment text about the patch for fixing CPAN RT#20726
  - BuildRequire perl(ExtUtils::MakeMaker) rather than perl-devel


author: Paul Howarth <paul@city-fan.org> 2.02-1
changelog:
  - Update to 2.02
  - Remove buildreqs perl(Net::SMTP) and perl(Net::Domain), bundled with perl
  - Add buildreqs perl(Date::Format), perl(Date::Parse), perl(Test::More), and
    perl(Test::Pod)
  - Remove patch for CPAN RT#20726, now fixed upstream
  - Buildreq perl >= 5.8.1
  - Tweak files list to mark pod files as %doc
  - Fix character encoding for ChangeLog


author: Steven Pritchard <steve@kspei.com> 0.65-1
changelog:
  - Update to 0.65.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.


author: Ralf Corsépius <rc040203@freenet.de> - 0.67-2
changelog:
  - BR: perl(Test::More), perl(CPAN) (BZ 419631).
  - Remove TEST_POD (Unused).
  - Add AUTOMATED_TESTING.
  - BR: perl(Test::Pod) for AUTOMATED_TESTING.
  - Adjust License-tag.


author: Steven Pritchard <steve@kspei.com> 0.74-1
changelog:
  - Update to 0.74.
  - Update versioned dependencies for File::Remove, Module::ScanDeps,
    PAR::Dist, and YAML::Tiny.
  - BR Test::CPAN::Meta.


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.91-3
changelog:
  - dist_file.txt wasn't packaged -> removed, it's needed only for test of build
  - Resolves: rhbz#550011


author: Steven Pritchard <steve@kspei.com> 0.81-1
changelog:
  - Update to 0.81.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Chris Weyl <cweyl@alumni.drew.edu> 0.95-1
changelog:
  - auto-update to 0.95 (by cpan-spec-update 0.01)
  - add perl_default_filter (pro forma)
  - altered br on perl(ExtUtils::MakeMaker) (0 => 6.42)


author: Rich Megginson <richm@stanfordalumni.org> - 1.5-7
changelog:
  - Incorporate comments from Fedora Extras review - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219869
  - Remove all Requires except perl - use autogenerated ones
  - Remove ExclusiveArch
  - Remove files that don't need to be packaged
  - add full URL to sources
  - set API.so to mode 755


author: Rich Megginson <richm@stanfordalumni.org> - 1.5-9
changelog:
  - remove only perl(Mozilla::LDAP::Entry) from Provides, leave in 
  - perl(Mozilla::LDAP::Entry) = 1.5


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Ville Skyttä <ville.skytta at iki.fi> - 0.49-2
changelog:
  - Explicitly disable tests requiring network access at build time.
  - Exclude Win32 and Cygwin specific modules.
  - More specfile cleanups.
  - Honor $RPM_OPT_FLAGS.


author: Robin Norwood <rnorwood@redhat.com> - 0.59-2
changelog:
  - Resolves: bz#226270
  - Fixed issues brought up during package review
  - BuildRequires should not require perl, and fixed the format.
  - Fixed the BuildRoot


author: Robin Norwood <rnorwood@redhat.com> - 0.61-3
changelog:
  - Split Nameserver.pm into subpackage, per recommendation from
    upstream maintainer Dick Franks.
    - Separates the server bits from the client bits.
    - Removes the dependancy on perl(Net::IP) from perl-Net-DNS
  - Add BR for perl(Test::Pod) and perl(Digest::BubbleBabble)


author: Marcela Maslanova <mmaslano@redhat.com> - 0.63-4
changelog:
  - 437681 remove previous patch and use upstream patch, which should solve
          all problems with noisy logs.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.20-0.fdr.6
changelog:
  - BuildRequire perl >= 1:5.6.1-34.99.6 for support for vendor installdirs.
  - Use pure_install to avoid perllocal.pod workarounds.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.22-2
changelog:
  - 1.22, include test case for rt.cpan.org #7528 patch.
  - Patch to mute stdout noise from ip_reverse().


author: Chris Weyl <cweyl@alumni.drew.edu> 2.0-5
changelog:
  - disable tests which will fail under mock
  - remove execute bits from files which shouldn't have them
  - include additional buildreq of perl(Time::Timezone)
  - also include perl(Time::Timezone) as a requires, as it provides optional
    functionality and is not picked up by the autoreq/prov scripts.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0-9
changelog:
  - fix license tag (technically, it was correct before, but this change prevents
    rpmlint from flagging it as bad in a false positive)


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
changelog:
  - Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
    with the rest of the world.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
changelog:
  - Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
    enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
  - Bring outdated test14 up to date (bug 1859, test suite still not enabled).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
changelog:
  - CVE-2005-0106: patch from Mandriva
    http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023


author: Paul Howarth <paul@city-fan.org> - 1.32-1
changelog:
  - update to 1.32, incorporate new upstream URLs
  - cosmetic spec changes suiting new maintainer's preferences
  - fix argument order for find with -depth
  - remove patch for CVE-2005-0106, fixed upstream in 1.30 (#191351)
    (http://rt.cpan.org/Public/Bug/Display.html?id=19218)
  - remove test patch, no longer needed
  - re-encode Credits as UTF-8
  - include TODO as %doc
  - add buildreqs perl(Array::Compare), perl(MIME::Base64), perl(Sub::Uplevel),
    perl(Test::Exception), perl(Test::NoWarnings), perl(Test::Pod),
    perl(Test::Warn), perl(Tree::DAG_Node)
  - add patch needed to disable testsuite non-interactively
  - run test suite but disable external tests by default; external tests can be
    enabled by using rpmbuild --with externaltests
  - add patch to change hosts connected to in external tests


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.03-7
changelog:
  - Fix bug 226273:
    * Add dist tag.
    * Fix rpmlint errors for %description.
    * Remove MANIFEST from package.
  - General clean up of spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.02-1
changelog:
  - update to 1.02
  - note license change:  perl to LGPL
  - switched over to Build.PL; misc spec file cleanups


author: Gary Benson <gbenson@redhat.com>
changelog:
  - make like all the other perl modules we ship (bind to perl version,
    use perl dependency finding scripts, build filelist automatically).
  - include documentation
  - build against perl 5.6.1


author: Steven Pritchard <steve@kspei.com> 0.29-1
changelog:
  - Update to 0.29.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Chris Weyl <cweyl@alumni.drew.edu> 0.103-1
changelog:
  - auto-update to 0.103 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 6.42)


author: Steven Pritchard <steve@kspei.com> 1.6-1
changelog:
  - Update to 1.6.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Ralf Corsépius <rc040203@freenet.de> - 0.33-1
changelog:
  - Upstream update.
  - Conditionally BR: perl(Test::CPAN::Meta).
  - Hack testsuite to accept Test::CPAN::Meta != 0.07.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.35-1
changelog:
  - Upstream update.
  - Remove BuildArch: noarch (package now is arch'ed).
  - Remove testsuite hack to accept perl(Test::CPAN::Meta) != 0.07.


author: Robin Norwood <rnorwood@redhat.com> - 1.95.1-3
changelog:
  - Apply fixes from package review:
    - Remove BR: perl
    - Use iconv to convert file to utf-8
    - Include BR: perl(Test::Pod)
    - Fix old changelog entry
  - Resolves: bz#226274


author: Chris Weyl <cweyl@alumni.drew.edu> 1.962.2-1
changelog:
  - updated for latest GA SQL::Translator
  - add default filtering
  - auto-update to 1.962.2 (by cpan-spec-update 0.01)
  - added a new br on perl(Text::Balanced) (version 0)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.098-1
changelog:
  - "neaten" filtering
  - auto-update to 1.098 (by cpan-spec-update 0.01)
  - added a new br on perl(strict) (version 0)
  - added a new br on perl(Scalar::Util) (version 0)
  - added a new br on perl(File::Temp) (version 0)
  - added a new br on perl(Pod::Usage) (version 0)
  - added a new br on perl(File::Find) (version 0)
  - added a new br on perl(PPI::Token::Whitespace) (version 1.203)
  - added a new br on perl(charnames) (version 0)
  - added a new br on perl(PPI::Document::File) (version 1.203)
  - added a new br on perl(File::Spec::Unix) (version 0)
  - added a new br on perl(List::Util) (version 0)
  - added a new br on perl(lib) (version 0)
  - added a new br on perl(Getopt::Long) (version 0)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test::More) (version 0)
  - added a new br on perl(overload) (version 0)
  - added a new br on perl(base) (version 0)
  - added a new br on perl(version) (version 0)
  - added a new br on perl(Carp) (version 0)
  - added a new br on perl(warnings) (version 0)
  - added a new br on perl(PPI::Document) (version 1.203)
  - added a new br on perl(File::Basename) (version 0)
  - added a new br on perl(PPI::Token::Quote::Single) (version 1.203)
  - added a new br on perl(File::Spec) (version 0)
  - added a new br on perl(File::Path) (version 0)
  - added a new br on perl(Pod::PlainText) (version 0)
  - added a new br on perl(Pod::Select) (version 0)
  - added a new br on perl(PPI::Node) (version 1.203)
  - added a new br on perl(English) (version 0)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.105-2
changelog:
  - remove optional BR, and switch off author tests. aspell is here only for
   author test.
  - rhbz#586154
  - Related: rhbz#543948


author: Steven Pritchard <steve@kspei.com> 0.19-1
changelog:
  - Update to 0.19.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20 (test updates)
  - No README in upstream distribution
  - BR: perl(Test::More)
  - More specific files list


author: Chris Weyl <cweyl@alumni.drew.edu> 1.03-6
changelog:
  - add explict requires on perl(Readonly::XS).  perl(Readonly::XS) is available
    for all architectures fedora supports, so there's no good reason to not
    require it.
  - spec file rework


author: Chris Weyl <cweyl@alumni.drew.edu> 1.05-1
changelog:
  - update to 1.05
  - filter our provides to prevent private lib from showing up
  - drop patch1; incorporated upstream as of 1.05


author: Ondrej Vasik <ovasik@redhat.com> - 1.03ii-16.3
changelog:
  - added dist tag
  - License to GPL+
  - spec file cleanup (all things from merge review by pnemade #226278)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.05-0.fdr.2
changelog:
  - The homepage changed placed in 2004-08-23.
  - The author repackaged the files using the same tar.gz version (1.05).


author: Lubomir Rintel <lkundrak@v3.sk> - 0.710.08-1
changelog:
  - New upstream release
  - Enable tests
  - Include examples in documentation
  - Don't grab in dependencies of exotic transports (for the sake
    of consistency with existing practice of Jabber transport)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.710.08-3
changelog:
  - Filter out perl(LWP::Protocol) Provides, which comes from a file
    not stored in Perl's search path for modules (#472359).


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.710.10-3
changelog:
  - if ENV(MOD_PERL) is defined, then standard read insted of sysread must
    be used.
  - Resolves: rhbz#748376


author: Paul Howarth <paul@city-fan.org> 1.4-3
changelog:
  - fix typo in %summary and tidy up %description
  - remove redundant dependency on perl >= 1:5.6.1
  - fix argument order for find with -depth
  - drop "|| :" from %check (only required for ancient rpmbuild versions)
  - add buildreq perl(ExtUtils::MakeMaker)


author: Steven Pritchard <steve@kspei.com> 0.1901-1
changelog:
  - Update to 0.1901.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Steven Pritchard <steve@kspei.com> 0.1.1-1
changelog:
  - Specfile autogenerated by cpanspec 1.68.
  - BR libvirt-devel and pkgconfig.
  - Fix License.
  - Drop non-doc autobuild.sh and add the examples directory.
  - Don't try to build the included perl-Sys-Virt.spec.


author: Steven Pritchard <steve@kspei.com> 0.1.2-1
changelog:
  - Update to 0.1.2.
  - Drop Sys-Virt-doc.patch.
  - BR XML::XPath.
  - No longer need to BR pkgconfig or xen-devel.
  - Disable 100-connect test.


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.8-1
changelog:
  - Update to 0.2.8 release (rhbz #717887)
  - Fixes missing VIR_DOMAIN_XML_SECURE binding (rhbz #705792)


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.10-3
changelog:
  - Fix migration speed units (rhbz #800766)
  - Fix typed param string handling (rhbz #800734)
  - Fixed block stats ref counting


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-1
changelog:
  - Update to 0.10.2 release (rhbz #836955)
  - Fix passing flags with schedular parameters (rhbz #848309)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-4
changelog:
  - Fix mistakes in POD docs (rhbz #869130)
  - Fix updating of node memory params (rhbz #865310)
  - Make flags parameters optional (rhbz #873203)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-5
changelog:
  - Fix module type in list_all_nwfilters (rhbz #883775)
  - Fix POD doc errors in StoragePool module (rhbz #882829)
  - Fix return value checks (rhbz #886028)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-6
changelog:
  - Fix handling of flags in get_vcpu_info (rhbz #905836)
  - Fix handling of get_parent with NodeDev object (rhbz #908274)


author: Ville Skyttä <ville.skytta at iki.fi> - 2.14-3
changelog:
  - Filter false positive provides.
  - Include template library, switch to %{_datadir}/tt2.
  - Tune build dependencies for full test suite coverage.
  - Fix and enable GD tests.
  - Include more documentation.
  - Fine tune dir ownerships and file permissions.


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.30-10
changelog:
  - remove the last test, which lead to hang-up of test suite in mock
   Test are non standart, it was need a patch.
  - Resolves: rhbz#558919


author: Steven Pritchard <steve@kspei.com> 0.10-1
changelog:
  - Specfile autogenerated by cpanspec 1.75.
  - Enable author tests.
  - Add examples to docs.
  - BR Test::More.
  - Convert LICENSE to UTF-8.
  - Drop bogus Requires.


author: Steven Pritchard <steve@kspei.com> 0.093-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Improve description.
  - Fix License.
  - Remove explicit dependency on Test::Tester and Test::NoWarnings.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - Drop executable bits.


author: Petr Pisar <ppisar@redhat.com> 1.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Add BuildRequires covered by perl package
  - Distribute examples
  - Install into perl core (i.e. do not use vendor paths)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:0.93-0.fdr.2
changelog:
  - Bring up to date with current fedora.us perl spec template.
  - Require perl >= 2:5.8.0 for vendor install dir support
    (also resolves the ExtUtils::MakeMaker version problem).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:0.14-0.fdr.1
changelog:
  - Update to 0.14.
  - Require perl >= 1:5.6.1 for vendor install dir support.
  - Use pure_install to avoid perllocal.pod workarounds.
  - Moved make test to section %check.


author: Steven Pritchard <steve@kspei.com> 0.082-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit dependency on perl(Test::Tester).  (Seems to be bogus.)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.07-1
changelog:
  - Update to 0.07.
  - Test::Builder version problem (see #205537).
  - Removed the README file (copy of the manpage).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.14-0.fdr.1
changelog:
  - Update to 1.14.
  - Require perl(:MODULE_COMPAT_*).
  - Add patch to avoid warnings from all_pod_files().


author: Steven Pritchard <steve@kspei.com> 1.030-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit Requires.
  - Disable tests by default (uses network).


author: Steven Pritchard <steve@kspei.com> 1.032-1
changelog:
  - Update to 1.032.
  - Use fixperms macro instead of our own chmod incantation.
  - Add LICENSE to docs.


author: Ralf Corsépius <rc040203@freenet.de> - 1.02-2
changelog:
  - Reflect license tag changes.
  - BR: perl(Test::More).
  - Remove BR: perl.
  - Add chmod -x Changes lib/Test/*pm


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11 (#477298)
  - Buildreq ExtUtils::MakeMaker, File::Spec, Test::Builder,
    Test::Builder::Tester, and Test::More (from upstream Makefile.PL)
  - Add runtime dependencies on Test::Builder and Test::Builder::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> 0.21-1
changelog:
  - add perl default filter (pro forma)
  - use _fixperms incantation
  - auto-update to 0.21 (by cpan-spec-update 0.01)
  - altered br on perl(Test::Builder::Tester) (0 => 1.02)
  - altered req on perl(Test::Builder::Tester) (0 => 1.02)


author: Steven Pritchard <steve@kspei.com> 0:1.13-0.fdr.0.1.beta
changelog:
  - Specfile regenerated.
  - Update to 0.13beta, which includes the upstream fix for a bug reported to
    the author.


author: Steven Pritchard <steve@kspei.com> 0:1.13-0.fdr.0.2.beta
changelog:
  - Minor update to 0.13beta source, from
    http://rt.cpan.org/NoAuth/Bug.html?id=8018 (pointed out by jpo@di.uminho.pt)


author: Steven Pritchard <steve@kspei.com> 0.35-3
changelog:
  - Improve Summary, description, and Source0 URL.
  - Fix find option ordering.
  - Don't generate license texts.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.37-1
changelog:
  - add filtering
  - auto-update to 1.37 (by cpan-spec-update 0.01)
  - altered br on perl(Algorithm::Diff) (0 => 1.19)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test) (version 0)


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.3-0.fdr.1
changelog:
  - Update to 1.3, patch naughty upstream Makefile.PL so that INSTALLDIRS= works.
  - Avoid RPATH on < FC2.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.11-0.fdr.3
changelog:
  - Better summary info (bug 1353 comment #4).
  - Canonical source URL (bug 1353 comment #4).
  - Missing requirement: TeX::Hyphen (bug 1353 comment #4).
  - Replaced /usr/bin/perl by %{__perl} (bug 1353 comment #4).
  - Corrected file permissions (bug 1353 comment #4).


author: Steven Pritchard <steve@kspei.com> 1:1.16-4
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.
  - Remove check macro cruft.


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Robin Norwood <rnorwood@redhat.com> - 0.81-3
changelog:
  - fix various issues from package review:
  - remove || : from %check
  - remove tabs and fix spacing
  - fix encoding for README file


author: Ville Skyttä <ville.skytta at iki.fi> - 0.46alpha-29
changelog:
  - Rewrite specfile using fedora-rpmdevtools' spec template, fixes #176889.
  - Fix License, include docs.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.46alpha-32
changelog:
  - fix license tag with upstream confirmation
    see: http://perl-xml.cvs.sourceforge.net/perl-xml/XML-Grove/COPYING?revision=1.2&view=markup


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-34
changelog:
  - cleaned up universe vs. tab conflict
  - added an explanation why the Version tag does not conform to the rules
  - fixed the source tarball (bz2->gz), to match the upstream exactly
  - improved BuildRoot tag


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-35
changelog:
  - re-enable check, it seems to work
  - improved the explanation of the non-standard Version tag (Patrice Dumas)
  - filter out bogus and redundant reuires (Paul Howarth)
  - move -depth to the right place on find cmd line (Paul Howarth)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.58-1
changelog:
  - #121168
  - Update to 1.58.
  - Require perl(:MODULE_COMPAT_*).
  - Handle ParserDetails.ini parser registration.
  - BuildRequires libxml2-devel.
  - Own installed directories.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.12-7
changelog:
  - #121167
  - Handle ParserDetails.ini parser registration.
  - Require perl(:MODULE_COMPAT_*).
  - Own installed directories.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.16-1
changelog:
  - Update to 0.16.
  - Brings specfile closer to Fedora Perl template.
  - Corrects Source0 URL (upstream maintainer has changed).
  - Move Requires filter into spec, and add Provides filter.


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-7
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.
  - Resolves: rhbz#562173


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.12-0.fdr.2
changelog:
  - missing $RPM_OPT_FLAGS in the %build section.
  - optional test module as build requirement perl(Tie::IxHash).


author: Jason Vas Dias <jvdias@redhat.com> - 2.14-4
changelog:
  - fix bug 191911: make test fails when default Parser is XML::SAX::PurePerl -
                    succeeds when default Parser is XML::LibXML::SAX -
                    +BuildRequires: perl(XML::LibXML) perl(XML::LibXML::Common)


author: Robin Norwood <rnorwood@redhat.com> - 2.17-1
changelog:
  - Update to latest CPAN version: 2.17
  - Add BuildRequires
  - Fix macro-in-changelog rpmlint warning
  - Fix license tag


author: Chris Weyl <cweyl@alumni.drew.edu> 1.22-1
changelog:
  - first f-e spec.
  - patched the tests to try to connect to the gtalk jabber servers, since the
    default one seemed to be "non-funct"


author: Chris Weyl <cweyl@alumni.drew.edu> 1.22-8
changelog:
  - add IO::Socket::SSL as a BR/R (see BZ#455344)
  - also add Net::DNS
  - make tests run if --with network-tests
  - misc spec touchups


author: Jeff Fearn <jfearn@redhat.com> - 3.09-4
changelog:
  - Remove %doc from man files, used glob
  - Simplify XML in filelist
  - Remove OPTIMIZE setting from make call
  - Change buildroot to fedora style
  - Remove unused defines


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Steven Pritchard <steve@kspei.com> 0.62-3
changelog:
  - Use fixperms macro instead of our own chmod incantation.
  - Drop Test::Base build dependency to avoid a BR loop (#215637).
  - BR ExtUtils::MakeMaker.


author: Steven Pritchard <steve@kspei.com> 0.82-1
changelog:
  - Specfile autogenerated by cpanspec 1.69.1.
  - Remove explicit build dependency on perl.
  - Include JSON module.
  - BR Devel::Leak (for tests).


author: Steven Pritchard <steve@kspei.com> 1.04-1
changelog:
  - Specfile autogenerated by cpanspec 1.70.
  - Drop redundant perl build dependency.
  - BR YAML, YAML::Syck, and Test::Pod for better test coverage.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.39-1
changelog:
  - auto-update to 1.39 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.80)


author: Robin Norwood <rnorwood@redhat.com> - 5.808-1
changelog:
  - Update to latest CPAN version
  - Re-enable tests.  We'll see if they work now
  - Move Requires filter into spec file
  - Add Provides filter for unnecessary unversioned provides


author: Robin Norwood <rnorwood@redhat.com> - 5.808-4
changelog:
  - Fix various issues from package review:
  - Fix tabs and spacing
  - Remove unneeded BR: perl
  - convert non-utf-8 files to utf-8
  - Resolves: bz#226268


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Petr Pisar <ppisar@redhat.com> - 5.833-3
changelog:
  - Implement hostname verification that is disabled by default. You can install
    IO::Socket::SSL Perl module and set PERL_LWP_SSL_VERIFY_HOSTNAME=1
    enviroment variable (or modify your application to set ssl_opts option
    correctly) to enable the verification. See LWP::UserAgent POD for more
    details. (bug #745800)


author: Petr Pisar <ppisar@redhat.com> - 5.833-4
changelog:
  - Support HTTPS_CERT_FILE and HTTPS_KEY_FILE Net::SSL environment variables
    with IO::Socket::SSL back-end (bug #1365490)


author: Petr Pisar <ppisar@redhat.com> - 5.833-5
changelog:
  - Honor HTTPS_PROXY and https_proxy Net::SSL environment variables with
    IO::Socket::SSL back-end by default (bug #1400632)


author: Robin Norwood <rnorwood@redhat.com> - 0.08-3
changelog:
  - Fix old changelog entry
  - Fix issues from package review:
  - Remove extra BR: perl
  - Remove "|| :" from check section
  - Add dist tag to release
  - Remove extra Provides: perl(Data::Grove)
  - Clean up tabs and spacing
  - Resolves: bz#226269


author: Simon Perreault <nomis80@nomis80.org> 20021130-2
changelog:
  - Changed architecture from i386 to noarch
  - Added my name as packager
  - Bumped up release number, which was forgotten by Anthony Rumble


author: Ville Skyttä <ville.skytta at iki.fi> - 0:20031021-1
changelog:
  - Sync with fedora-rpmdevtools' Perl spec template to fix x86_64 build.
  - Move version to the version field.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.9-2
changelog:
  - fix BR
  - remove unnecessary Requires
  - use version-release in changelog entries
  - fix directory ownership
  - use python_sitearch
  - make python "scripts" executable


author: Panu Matilainen <pmatilai@welho.com> 0.999-0.fdr.1
changelog:
  - get rid of distrel munging, buildsys does that...
  - update to 0.999
  - update doc and example tarballs
  - fix build on python <> 2.2
  - use -O1 in install to generate .pyo files instead of manually creating the files
  - require python-abi = pyver to get dependencies right


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.999-2
changelog:
  - Use python_sitelib macro to resolve build issues on x86_64.
  - %ghost *.pyo
  - Install ANSI.py, screen.py, and FSM.py into the examples.  These are intended
    to suplement pexpect eventually but they are currently much less robust and
    not installed to by default.  But they are needed by some examples.
  - Use __python macro in build/install for consistency.
  - Add --skip-build to the invocation of setup.py in install.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.99999b-2
changelog:
  - Add LICENSE File.
  - Make noarch.
  - Remove executable permissions from the modules copied to examples.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-2
changelog:
  - Remove pyver define as it's not needed with the automatic python(abi).
  - Stop ghosting .pyos.
  - Let automatic python compilation take care of creating pyos.
  - Rebuild for FC6.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-4
changelog:
  - qt4.(sh|csh): place-holders only, don't define QTDIR (and QTLIB)
    as that (potentially) conflicts with qt-3.x.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-7
changelog:
  - rework %post/%postun, mostly to placate rpmlint
  - drop Prefix:
  - drop use of qt4.(sh|csh), they're empty atm anyway
  - use Source'd designer.desktop (instead of inline cat/echo)
  - symlinks to %_bindir: qmake4, designer4, qtconfig4
  - drop qtrc, qt4 doesn't use it.
  - -docs subpkg for API html docs, demos, examples.
  - BR: libXcursor-devel libXi-devel (fc5+)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-10
changelog:
  - cleanup/simplify license bits, include LICENSE.QPL
  - drop unused -styles/-Xt subpkg reference
  - drop unused motif extention bits
  - drop initialpreference from .desktop files


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-11
changelog:
  - drop optional ld.so.conf.d usage, make mandatory
  - make %_bindir symlinks to all %qtdir/bin stuff (even qt3to4)
  - pkgconfig files: hardlinks -> relative symlinks, strip -L/usr/lib/mysql
    and -L%{_builddir}/qt-x11-opensource-src-%version/lib
  - cleanup/simplify Summary/%description entries
  - $RPM_BUILD_ROOT -> %buildroot, $RPM_BUILD_DIR -> %_builddir


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-14
changelog:
  - remove MapNotify from .desktop file(s).
  - install -m644 LICENSE.*
  - -docs: don't mark examples as %doc
  - drop unused %debug macro


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org> - 4.1.2-15
changelog:
  - Rename -docs to -doc.
  - Files in the -doc subpackage are no longer in %doc.
  - Move qtdemo to the subpackage -doc.
  - Fix symlinks in %{_bindir}.
  - Only modify mkspecs/linux-g++*/qmake.conf, instead of all mkspecs/*/qmake.conf.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-16
changelog:
  - set/use RPM_OPT_FLAGS only for our platform
  - (really) don't give %_bindir symlink for qt3to4 another "4" suffix
  - don't add 4 suffix to uic3, rcc (they don't conflict with qt(3)-devel)
  - -devel: add  linguist.desktop
  - -doc: move assistant here, Provides: %{name}-assistant, add assistant.desktop
  - -doc: add qtdemo.desktop
  - -doc: Requires qt4 (instead of qt4-devel)
  - assistant4.patch: search for assistant4 instead of (qt3's) assistant in $PATH 
  - -qtconfig: add qtconfig.desktop
  - updated %sumaries to mention where (some) tools are, including assistant, linguist,
    qtdemo


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-17
changelog:
  - .desktop: Qt -> Qt4, and Comment= (where missing)
  - -devel: include -designer here, Obsoletes/Provides: %name-designer.
     It's small, simplifies things... one less subpkg to worry about.
  - -doc: include %qtdir/doc symlink here
  - -docdir %_docdir/%name-doc-%version


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-18
changelog:
  - %_bindir symlinks: qtconfig4 -> qt4config, qtdemo4 -> qt4demo
  - -libdir %qtdir/%_lib, simplifies %_lib != lib case
  - -docdir %_docdir/%name-%version
  - build shared versions of libQtAssistantClient,libQtUiTools too
  - strip extraneous -L paths, libs from *.prl files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-20
changelog:
  - fix some unowned dirs
  - try harder to purge %builddir from .pc,.prl files
  - -docdir %_docdir/%name-doc-%version, since we use %doc macro in main pkg
  - -doc: own %qt_docdir
  - use qt4-wrapper.sh to ensure launch of qt4 versions of apps that
    (may) overlap with those from qt3 
  - use %qtdir/%_lib in ld.so.conf.d/*.conf files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-1
changelog:
  - 4.1.3
  - %qtdir/lib/*.pc -> %qtdir/%_lib/*.pc 
    (hopefully, the last hardcoded reference to %qtdir/lib)


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org>
changelog:
  - Fix the last reference to %{qtdir}/lib: use lib instead of "lib".
  - Fix the ownership of subpackages: they need to own parents of directories they install files in.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-5
changelog:
  - strip -lXi from .pc files (#193258)
  - simplify sql plugin builds via %buildSQL macro
  - -libdir %qt_libdir


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-8
changelog:
  - qmake.conf: undefine QMAKE_STRIP to get useful -debuginfo (bug #193602)
  - move (not symlink) .pc files into %_libdir/pkgconfig


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-2
changelog:
  - -devel: include -debug libs (bug #196513)
  - -devel: move libQtDesigner here
  - -config: mash into main pkg, should be multilib friendly now


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-3
changelog:
  - -debug: drop, adds nothing over -debuginfo, make lib..._debug 
    symlinks instead (bug #196513)
  - assistant.desktop: fix tooltip (bug #197039)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.2.tp1
changelog:
  - -system-nas-sound, BR: nas-devel (bug # 197937)
  - -qdbus (fc6+, BR: dbus-devel >= 0.62)
  - -glib (BR: glib2-devel)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.6.20060821
changelog:
  - update to 4.2.0-snapshot-20060821 (same as today's qt-copy)
  - -no-separate-debug-info
  - - ./configure -xfixes, BR: libXfixes-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-0.9.20060927
changelog:
  - update to qt-4.2.0-snapshot-20060927
  - update QDBus executable names
  - -x11: exclude plugins/designer (which belong to -devel)
  - BuildConflicts: qt4-devel
  - drop -fno-strict-aliasing hack (fc5+)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-5
changelog:
  - fixup qconfig-multilib.h (#223663)
  - qt4.(sh|csh): define QMAKESPEC (#223663)
  - null'ify QMAKE_LIBDIR_QT, leave QMAKE_INCDIR_QT alone for now. (#230224)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-7
changelog:
  - fixup qconfig-multilib.h for powerpc/powerpc64 (#223663)
  - include qt-copy's 0154-qdbuscpp2xml-moc_path.diff (#230875)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-1
changelog:
  - qt-4.2.3
  - multilib: move all arch-specific mkspecs bits to %qt4_prefix/mkspecs (#223663)
  - +%_sysconfdir/rpm/macros.qt4
  - +%config %qt4_sysconfdir/Trolltech.conf


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-8
changelog:
  - QFileDialog file wrapping patch (qt#153635, rh#236908)
  - License: GPL, dropping LICENSE.QPL (#237702)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.3.0-0.3.snapshot20070423
changelog:
  - update to qt-4.3.0-snapshot-20070423
  - build with SSL support (BR openssl-devel)
  - drop upstreamed mysql_config.patch


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-7
changelog:
  - prepare for possible rename qt4 -> qt (+Provides: qt4)
  - make _qt4_* macro usage consistent (with %check's)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-9
changelog:
  - multilib broken: qconfig.h (#248768)
  - +%_qt4_demosdir,%_qt4_examplesdir
  - + Qt.pc, provide pkgconfig access to qt4 macros/variables


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-2
changelog:
  - License: GPLv2 (see also GPL_EXCEPTIONS*.txt)
  - omit needless %check
  - (re)add package review comment/reference


author: Than Ngo <than@redhat.com> - 4.3.1-4
changelog:
  - fixed bz241452, add qtdemo/qtconfig icons
  - fixed bz249242, designer4 - segmentation fault on s390x


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-7
changelog:
  - include qt4-logo icon, used by qtdemo/qtconfig (#241452)
  - linguist.desktop: use new linguist4 icons
  - -devel,-x11: %post/%postun scriptlets (icons, mimetypes)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.2-1
changelog:
  - qt-4.3.2
  - (re)fix ppc64 segfaults, ppc64 fix upstreamed (previous patch was 
    inadvertantly not applied) (#246324)


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-6
changelog:
  - qt-copy 20080130 patch set (helps address previous 0180-window-role BIC)
  - Trolltech.conf: (default) fontsize=10
  - License: GPLv2 with exceptions or QPL


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-8
changelog:
  - qt-copy patches 20080219
  - drop -optimized-qmake, for now, to avoid qmake segfaults (gcc43 issue?)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.3.rc1
changelog:
  - qt-4.4.0-rc1
  - -xmlpatterns (and drop -no-exceptions)
  - -reduce-relocations, -dbus-linked, -openssl-linked
  - -no-nas
  - -no-phonon (-no-gstreamer), -no-webkit (for now, at least until
    conflicts with WebKit-qt and kdelibs4 are sorted out)
  - %_qt4_bindir -> %_bindir, avoid qt4-wrapper hackage (#277581, #422291)
  - qtconfig.desktop: NoDisplay=true (#244879)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.4.0-0.4.rc1
changelog:
  - updated patch for #437440 ([as-IN] Consonant combination issue) by Pravin Satpute
  - port the patch to Qt 4.4 (the code moved to harfbuzz) and reenable it


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.6.rc1
changelog:
  - -webkit (include in -x11 subpkg), drop separate -webkit-devel
  - omit qt4-wrapper.sh deps (since it's not used atm)
  - qt-copy-patches-20080429
  - Obsoletes/Provides: WebKit-qt(-devel) <|= 1.0.0-1  (#442200)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-6
changelog:
  - qt-copy-patches-20080606
  - drop BR: libungif-devel (not used)
  - move libQtXmlPatters, -x11 -> main
  - move qdbuscpp2xml, qdbusxml2cpp, xmlpatters, -x11 -> -devel


author: Than Ngo <than@redhat.com> 4.4.3-2
changelog:
  - bz#468814, immodule selection behavior is unpredictable without QT_IM_MODULE,
    patch from Peng Wu
  - backport fix from 4.5


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.3-10
changelog:
  - drop qt-x11-opensource-src-4.3.4-no-hardcoded-font-aliases.patch (#447298),
    in favor of qt-copy's 0263-fix-fontconfig-handling.diff


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.4.rc1
changelog:
  - saner versioned Obsoletes
  - -gtkstyle, Obsoletes: qgtkstyle < 0.1
  - enable phonon support and associated hackery


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.5.rc1
changelog:
  - revert license, change won't land until official 4.5.0 release
  - workaround broken qhostaddress.h (#485677)
  - Provides: qgtkstyle = 0.1


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-2
changelog:
  - License: LGPLv2 with exceptions or GPLv3 with exceptions
  - BR: gstreamer-devel
  - drop qgtkstyle patch (no longer needed)
  - -x11: move libQtScriptTools here (linked with libQtGui)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-7
changelog:
  - include more phonon bits, attempt to fix/provide phonon bindings
    for qtscriptgenerator, PyQt, ...


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-4
changelog:
  - qt-doc noarch
  - qt-demos, qt-examples (split from -doc)
  - (cosmetic) re-order subpkgs in alphabetical order
  - drop unused profile.d bits


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-8
changelog:
  - fix invalid assumptions about mysql_config --libs (bug #440673)
  - fix %files breakage from 4.5.1-5


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-2
changelog:
  - take current qt-copy-patches snapshot (20090626)
  - disable patches which are already in 4.5.2
  - fix the qt-copy patch 0274-shm-native-image-fix.diff to apply against 4.5.2


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-6
changelog:
  - use linker scripts for _debug targets (#510246)
  - tighten deps using %{?_isa}
  - -x11: Requires(post,postun): /sbin/ldconfig


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-12
changelog:
  - use platform linux-g++ everywhere (ie, drop linux-g++-64 on 64 bit),
    avoids plugin/linker weirdness (bug #478481)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-20
changelog:
  - use internal Qt Assistant/Designer icons
  - -devel: move designer.qch,linguist.qch here
  - move ownership of %_qt4_docdir, %_qt4_docdir/qch to main pkg


author: Than Ngo <than@redhat.com> - 4.5.3-2
changelog:
  - cleanup patches
  - if ! phonon_internal, exclude more/all phonon headers
  - qt-devel must Requires: phonon-devel (#520323)


author: Than Ngo <than@redhat.com> - 4.6.0-0.2.beta1
changelog:
  - subpackage sqlite plugin, add Require on qt-sqlite in qt-x11
    for assistant
  - build/install qdoc3 again


author: Rex Dieter <rdieter@fedoraproject.org> - 4.6.0-4
changelog:
  - Fix crash when QGraphicsItem destructor deletes other QGraphicsItem (kde-qt cec34b01)
  - Fix a crash in KDE/Plasma with QGraphicsView. TopLevel list of items (kde-qt 63839f0c)


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-11
changelog:
  - drop optional ld.so.conf.d usage, make mandatory
  - make %_bindir symlinks to all %qtdir/bin stuff (even qt3to4)
  - pkgconfig files: hardlinks -> relative symlinks, strip -L/usr/lib64/mysql
    and -L%{_builddir}/qt-x11-opensource-src-%version/lib
  - cleanup/simplify Summary/%description entries
  - $RPM_BUILD_ROOT -> %buildroot, $RPM_BUILD_DIR -> %_builddir


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org>
changelog:
  - Fix the last reference to %{qtdir}/lib: use lib64 instead of "lib".
  - Fix the ownership of subpackages: they need to own parents of directories they install files in.


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Joe Orton <jorton@redhat.com> - 1:1.9.4-1
changelog:
  - update to 1.9.4 (#651897)
  - update XML_RPC to 1.5.4, Structures_Graph to 1.0.4, Archive_Tar to 1.3.7


author: Remi Collet <rcollet@redhat.com> - 1:1.9.4-5
changelog:
  - fix unexpanded RPM macro in triggerpostun #1018131
  - define date.timezone in pear/pecl commands #1040839
  - define %php_metadir macro #953810
  - fix incorrect handling of backslashes in file names #1216952


author: - Chris Chabot <chabotc@xs4all.nl> - 3.0.10-3
changelog:
  - Renamed to php-pecl-apc and added provides php-apc
  - Removed php version string from the package version


author: Tim Jackson <rpm@timj.co.uk> - 3.0.19-1
changelog:
  - Update to 3.0.19
  - Fix PHP Zend API/ABI dependencies to work on EL-4/5
  - Fix "License" tag
  - Fix encoding of "NOTICE" file
  - Add registration via PECL


author: Remi Collet <Fedora@FamilleCollet.com> - 3.1.3p1-1
changelog:
  - update to 3.1.3 patch1 (beta, for PHP 5.3 support)
  - add test suite (disabled for http://pecl.php.net/bugs/bug.php?id=16793)
  - add use_request_time, lazy_classes, lazy_functions options (apc.ini)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.9-1
changelog:
  - update to 3.1.9 (bugfix, stable) (#662655)
  - create -devel subpackage with header files
  - ship apc.php for easier referral in the config files


author: Remi Collet <Fedora@FamilleCollet.com> 2.2.0-1
changelog:
  - new version
  - add new INI directives (hash_strategy + hash_function) to config
  - add BR on php-devel >= 4.3.11


author: Joe Orton <jorton@redhat.com> - 3.0.5-1
changelog:
  - rebase to 3.0.5 (#638892, #638887)
  - fix casting in memcache_pool.c (#672363)
  - fix Release (#604559)


author: Tim Powers <timp@redhat.com> 0.11.0-3
changelog:
  - add %{_libdir}/libpisock++.so and %{_libdir}/libpisock++.so.* to
    the file lists to fix the broken deps


author: Than Ngo <than@redhat.com> 0.11.8-6
changelog:
  - add fix to avoid an out-of bounds array access
  - add buildprereq on readline-devel, libpng-devel, bug #111119
  - add patch to fix segfault in Net Library, bug #125878


author: Than Ngo <than@redhat.com> 2:0.11.8-15
changelog:
  - fix pilot-xfer crash on missing device node #186779, #175334
  - don't include unnecessary man page #185147


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 2:0.12.3-4
changelog:
  - Synchronize with F-8 branch: 
  - Add README.fedora and visor configs as fallbacks (#280251: thanks Kevin Page)
  - Don't tag HAL/PolicyKit files as %config (#427840)
  - Remove visor module if currently loaded (#280251)


author: - Bastien Nocera <bnocera@redhat.com> - 2:0.12.3-5
changelog:
  - Add Bluetooth support, with patch from Matt Davey <mcdavey@mrao.cam.ac.uk>
    to avoid crashing when pi_close is called


author: Ivana Varekova <varekova@redhat.com> - 2:0.12.3-6
changelog:
  - Synchronize with F-8 branch:
  - remove visor modul remove from %post script
  - Change README.fedora use "ttyUSB[13579]" in 60-pilot.rules


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.6.9-0.fdr.1
changelog:
  - Update to 0.6.9.
  - Smoother experience with --excludedocs.
  - Don't change alternative priorities on upgrade.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.7.2-1
changelog:
  - 0.7.2, docs patch applied upstream.
  - Switch to GTK2 in -gtk.
  - Fine tune dependencies.
  - Build with dependency tracking disabled.
  - Clean up obsolete pre-FC2 support.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Mike A. Harris <mharris@redhat.com> 0.6.4-9
changelog:
  - Now how ironic is *this* one?...  The info documentation on pinfo has been
    missing from our packages.  Mass rebuild tests caught this.  Fixed now.
  - Added post/preun scripts for updating info dir db with install-info


author: Mike A. Harris <mharris@redhat.com> 0.6.8-8
changelog:
  - Added pinfo-0.6.8.memcorruption.patch and pinfo-0.6.8.memleak.patch by
    Sami Farin to fix a couple pinfo bugs reported in (#138770)


author: Mike A. Harris <mharris@redhat.com> 0.6.8-9
changelog:
  - Replaced pinfo-0.6.0-mkstemp.patch with updated pinfo-0.6.8-mkstemp.patch
    to fix an additional insecure tempnam() usage detected by our buildsystem


author: Mike A. Harris <mharris@redhat.com> 0.6.8-11
changelog:
  - Work around an idiotic bug in rpm (#118780) by using multiple Requires
    lines instead of the Requires(foo,bar) syntax that rpm documentation
    states is valid.  This fixes reported pinfo kickstart issue (#155700)


author: Miroslav Lichvar <mlichvar@redhat.com> 0.6.9-2
changelog:
  - use correct group when dropping group privileges (#221107)
  - open also files without .info suffix
  - make scriptlets safer
  - make sure readline support isn't compiled in


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - restructured the package to come from CVS
  - renamed it
  - added oot's lvs daemon
  - added the perl client_monitor tool from Lars Marowsky-Bree
  - put stubs in for the GUI
  - buffed up the Makefile


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added a send_arp tool to the package
  - removed the /etc/lvs.cf entry (it was dumb here)
  - strip all binaries too
  - added nanny to package


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Minor updates to doc files and man pages.
  - Added headers and history to some source files
  - Created nanny.h file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that RPM_BUILD_ROOT != / when installing
  - handle case if httpd not installed during %install
  - handle gzipped man pages


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Changed pulse call to send_arp to /usr/sbin
  - Suppress sock error on unconfigured tunl device
  - Bumped version


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added NAT/direct routing/tunneling to the web interface
  - fixed up the web documents to tell the web browsers that
    caching them would be a BAD idea
  - Added some prettify stuff


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Added send/expect parsing to lvs, lvsconfig, and nanny.
  - Updated nanny man page and sample.cf file


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Bumped version to reflect Bryce's changes to install scripts
  - Added persistent netmask to lvsconfig and lvs and sample.cf


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed segfault problem in nanny
  - Minor changes reporting the phase out of the old GUI
  - Bumped version number
  - Changed spec file to include web in GUI RPM


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed passthrough of routing type options
  - Fixed man pages to reflect routing type options
  - Changed formatting of sample.cf file and included comments
  - Bumped version number


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - *NO* "echo's" in spec files!
  - made /etc/lvs.cf a %config so it'll get backed up on upgrades
  - cleaned up some useradd/groupadd errors


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - New version of pulse with enhanced signals
  - New service = xxx parameter in config system
  - New man pages and doc updates


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added password services to web control
  - Altered pulse to provide a signal escalator between nobody root
    as we now have a "use a uid/gid < 100" limitation that
    apache's suexec doesn't cater for
  - Added default password to web (null)
  - minor spec file changes


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected memory errors in parser
  - Updated fos
  - Improved (but have not finished) pulse changes
  - Bumped version to reflect parser change


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected signaling, heartbeat, and failover in pulse
  - Bumped version to reflect a stable release
  - Note: pulse USR1/2 disabled in this checkin


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added fos to file list
  - moved apache & php requires to gui package
  - reordered the install of killapache to make strip not puke


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Improved take control heartbeat login in pulse
  - Enhanced old GUI README to notify user of special conditions
  - Bumped version


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed killapache
  - changed sample httpd shutdown to use proper init scripts
  - Keith fixed MORONIC spelling error in pulse.c :)
  - moved the GUI README into the %doc list


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Security exposure raised by ISS regarding the passwd.php3
    file fixed by replacing the external call to htpasswd with
    php3s own crypt function (see parse.php3 change_password)
  - Rebuilt packages and generated errata.


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - changed the password updating/setting policy.  Made all password actions
    root operations via a root owned shell tool (piranha-passwd)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - core item ipvsadm has been updated to use ipvs-0.9.12-2.2.14
  - Minor tweeking of directory scruture
  - gui files no longer included in rpm builds
  - added a load of patches from the bugzilla archives
  - made kernel diffs
  - made sure the rpms built and installed correctly


author: Philip Copeland <copeland@redhat.com>
changelog:
  - modified the piranha.spec.in file and Makefile to allow for
    release number updates (from editing the Makefile)
  - fixed a bug in redundancy.php3 which occurs when no lvs.cf file
    is present
  - made ipvsadm popt change (minor patch which shouldn't affect
    native redhat installed systems)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Fixed an incorrect pag redirection in the failover pages
  - added two missing subnet masks to the peristance netmask field


author: Philip Copeland <copeland@redhat.com>
changelog:
  - removed the 'accept' input button in control.php3 to
    better fit the documentation
  - Updated the lvserror.php3 to reflect another not so uncommon
    fault that may prevent correct running of the GUI
  - Tidied up some eyecandy


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Backed out some patches to pulse.c, fos.c, lvs.c, and nanny.c
  - Updated documentation
  - Changed "take control" heartbeat


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Merged Bryce's ipvsadm changes
  - Changed nobody to apache (if apache user apache exists)
  - Migrate existing lvs.cf file if appropriate
  - bumped version


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Removed ipvsadm inclusion in piranha RPM
  - Changed version to exceed last experiemental release
  - Corrected web reference in spec file
  - Cleaned up 7.x installationin spec and makefile
  - Bumped version (multiple times)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed piranha-gui startup script and piranha spec file
  - Fixed gui error screen to report correct file permission & ownership


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected netmask logic so it does not ref gethost call and is only
    used when value is non-zero.
  - Added netmask error code and return string
  - Fixed pulse's use of netmasks in ifconfig and sendarp calls
  - Put missing "if debug" blocks around debug output
  - If using FOS, assume active if no backup node specified in lvs.cf
  - Correct inconsistent use of --test-start, --nofork, --nodaemon, and
    --norun between pulse, nanny, fos, and lvs. Updated man pages too.
  - Removed ipvsadm build from Makefile
  - piranha requires ipvsadm 1.17+
  - parser now handles trailing \r chars (customer problem)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Made fast changes to the hard coded /usr/sbin/ipvsadm
    to be /sbin/ipvsadm. This should be in a define in a header file
    however because of time pressure I'm doing it this way first and
    fix it up next week.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Directives from der Boss, we must be able to run rpm -V successfully
  - Collapsed piranha piranha-gui piranha-docs into a single rpm


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Humm, killed off the piranha.desktop file as the GUI is web based not X11
    and this makes no sense to try and start from a menu item. A bookmark maybe.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Various tidyups/rpm fiddling in an effort to allow for building standalone
    outside of the buildsystem.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed parse.php3 so that it wouldn't issue the persistance option
    twice in the lvs.cf configuration file


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Removed nasty httpd.conf modifications in the
    rpm spec file. (An artifact of the old install
    system)
  - Dropped in an example script for use with the
    send_program function. Probably need to spend a
    week cooking up a library of 'common' scripts
    for use.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Bundled in some very simple template scripts with the
    documentation. Dropped in an example_script with the
    main dist. Bumped the version number (0.6.0-10)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a switchover for fos (virt/real address swapover
    to prevent the fos call to nanny checking the real IP
    instead of the VIP


author: Philip Copeland <bryce@redhat.com>
changelog:
  - control.php3 has for ages been calling /usr/sbin/ipvsadm.
    Unfortunately that changed to /sbin and was not updated
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56497
  - In the pulse.c code, too few elements were allocated
    for the arguments causeing an occasional segv.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in a patch for nanny.c from Wensong <wensong@gnuchina.org>
    which cleans up the run() function by splitting out two new
    funcions, adjustWeight(), and checkState().
  - I thought I'd removed the portion in the Makefile that tweaks with
    /etc/httpd/conf/httpd.conf but it was still there when I looked.
    Removed it.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in Wensongs quiesce server patch for nanny
  - Updated the web interface to also know about the quiesce option


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a patch I got from pzb for to be a good deal more sensible
    about how we detect if we're using FOS mode or LVS mode other than looking
    for a start or stop script (shudder)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Finally someone spotted the reason why the children don't die
    much happiness spread by Sebastien <sebastien.bonnet@experian.fr>
  - Added in additional patch from Sebastien for bugzilla #57654
    which I think is also a solution for #15911


author: Philip Copeland <bryce@redhat.com>
changelog:
  - send_arp,c, changed the
    sock=socket(AF_INET,SOCK_RAW,htons(ETH_P_RARP));
    back to
    sock=socket(AF_INET,SOCK_PACKET,htons(ETH_P_RARP));
    as I got reports that this wasn't working.
    It will work fine, just there will be noise that it's
    an obsolete interface


author: Philip Copeland <bryce@redhat.com>
changelog:
  - pulled in Wensong's memory leak patchs
  - Dropped the shared scsi portion in the web interface
    Note: FOS will vanish in piranha 0.7.0's interface, in
    theory that functionality will be taken over by clumanager
    which is part of the advanced server offering.
    In the future clumanager/piranha will merge (so I'm told)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed up piranha-passwd (#60440)
  - Updated the LVS-HOWTO docs (#60204)
  - fixed the silly misname of a directory in the httpd.conf (#60529)


author: Lon Hohberger <lhh@redhat.com> 0.7.9-1
changelog:
  - Force sending of last heartbeat before shutdown of backup
  so that the master re-arps the VIPs (#134007)


author: Lon Hohberger <lhh@redhat.com> 0.8.0-1
changelog:
  - Build for RHCS-4
  - Lots of php warning cleanups
  - rename lvs to lvsd so as not to conflict with 'lvs' command


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.3-1
changelog:
  - Document send_program in lvs.cf manpage (bz190022)
  - Fix lvsd where it segfaults when nanny dies (bz176913)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-3
changelog:
  - Removed .htaccess file, as equal configuration 
     already in /etc/sysconfig/ha/conf/httpd.conf
  - Added logrotate conf file


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-4
changelog:
  - Removed /etc/sysconfig/ha/example_script, as equal example is
     already in /usr/share/doc/piranha/docs/script_templates/* 
  - Update apache's modules, use libphp5 (instead of libphp4)


author: Marek Grac <mgrac@redhat.com> 0.8.4-8
changelog:
  - Resolves: #243278 - Fixes wrong init scripts
  - Resolves: #249312 - VIP doesn't go down
  - Resolves: #245788 - send_arp & incorrectly-formed ARP
  - Resolves: #338101 - php errors in piranha-gui


author: Marek Grac <mgrac@redhata.com>
changelog:
  - Resolves: #446802 - segfault if syslog message is longer 
                        than 80 characters


author: Lon Hohberger <lhh@redhat.com> 0.8.4-11
changelog:
  - Resolves: #238498  - need fallback service
  - Resolves: #243908  - nanny blocks signals in child processes


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Marek Grac <mgrac@redhat.com> 0.8.5-6
changelog:
  - Resolves: #604741 - piranha does not work with SELinux
  - Resolves: #593730 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.5-8
changelog:
  - "service pulse reload" is resulting in lvsd segfaulting
    Resolves: rhbz#703146
  - a failure to start a single nanny kills off *all* running nannys
    Resolves: rhbz#593728


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-9
changelog:
  - Resolves: #628872 - init script searches cwd which can cause SELinux denials
  - Resolves: #706881 - killing nanny/lvsd process should cause pulse to exit
  - Resolves: #708036 - too many VIPs can causes HTTP 414 error
  - Resolves: #729828 - add CIDR /23 netmask to drop-down menus


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-13
changelog:
  - Resolves: #788541 - add option for sync daemon mcast interface
  - Resolves: #717556 - add option for sync daemon id


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - suppress /usr/lib64 (instead of /usr/lib) from LIBS by default on multilib
    arches where the default is to use lib64


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-3
changelog:
  - Resolves #676873 - Rebase pki-core again to pick the latest features and fixes
  -     Resolves #676048 - Installation within IPA hangs, r1846
  -     Resolves #679173 - uninitialized variable warnings from Perl, r1860
  -     Resolves #679174 - netstat loop fixes needed, r1862
  -     Resolves #679580 - Velocity fails to load all dependent classes, r1864


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-8
changelog:
  - Resolves 645097 
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-10
changelog:
  - Resolves #688251 - Dogtag installation under IPA takes too much
    time - SELinux policy compilation, r1908


author: Ade Lee <alee@redhat.com> 9.0.3-12
changelog:
  - Resolves #689909 - Dogtag installation under IPA takes too much
    time - remove the inefficient sleeps, r2097


author: Ade Lee <alee@redhat.com> 9.0.3-13
changelog:
  - Resolves #698796: Race conditions during IPA installation, r2103 (alee)
  - Resolves #708075 - Clone installation does not work over NAT, r2104 (alee)
  - Resolves #726785 - If replication fails while setting up a clone it 
    will wait forever, r2106 (alee)
  - Resolves #691076 - pkiremove removes the registry entry for all instances
    on a machine, r2112 (mharmsen)
  - Resolves #693835 - /var/log/tomcat6/catalina.out owned by pkiuser, r2118
    (mharmsen)
  - Resolves #729126 - Increase default validity from 6mo to 2yrs in IPA
    profile, r2125 (awnuk)
  - Resolves #728651 - CS8 64 bit pkicreate script uses wrong library name
    for, r2126 (mharmsen)
  - Resolves #700522 - pki tomcat6 instances currently running unconfined,
    r2128 (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-14
changelog:
  - Resolves #700522 - pki tomcat6 instances currently running unconfined, 
    allow server to come up when selinux disabled, r2149


author: Ade Lee <alee@redhat.com> 9.0.3-21
changelog:
  - Resolves #771790 - sslget does not work after FEDORA-2011-17400 update,
    breaking FreeIPA install (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-23
changelog:
  - Resolves #769388 - pki-silent does not properly escape command-line arguments
    (fixed in Git repo)


author: Ade Lee <alee@redhat.com> 9.0.3-26
changelog:
  - Resolves #844459 - Increase audit cert renewal range to 2 years (mharmsen)
  - Resolves #841663 - serial number incorrectly cast from BigInt to integer in
    installation wizard (mharmsen)
  - Resolves #858864 - create/ identify a mechanism for clients to determine that
    the pki subsystem is up (alee)


author: Ade Lee <alee@redhat.com> 9.0.3-27
changelog:
  - Resolves #867640 - ipa-replica-install Configuration of CA failed
    by REVERTING #819111 - Non-existent container breaks replication


author: Ade Lee <alee@redhat.com> 9.0.3-31
changelog:
  - Resolves #887305 - /var/run/pki/ca has wrong selinux context
  - Resolves #895702 - pki-cad restart avc denial


author: Ade Lee <alee@redhat.com> 9.0.3-32
changelog:
  - Resolves #999055 - AVC denials during ipa server and replica installs
  - Resolves #998715 - Package Sanity Test Failures


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-33
changelog:
  - Resolves #1051382 - IPA Replica installation fails when using an external CA
  - Test patch to filter out invalid XML and provide additional debugging
    information
  - Resolves #1083170 - Prevent LDAP Attributes from being affected by Locale
  - Resolves #1096142 - IPA replica setup fails during CA setup with
                        "unable to parse xml"
  - Resolves #1061442 - RFE - ipa-server should keep backup of CS.cfg
  - Resolves #1055080 - Giant /var/log/pki-ca/debug


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-40
changelog:
  - Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE
    (based upon upstream changes provided by cfu and alee)


author: Jack Magne <jmagne@redhat.com> 9.0.3-42
changelog:
  - Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-43
changelog:
  - Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-52
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-53
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"
    (contains the additional changes required to work with the latest HTTPD)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 5.4.6-5
changelog:
  - Added patch1 for a few multilib Makefile/configure fixes.
  - Use %makeinstall and set libdir in install section.


author: Mary Ellen Foster <mefoster at gmail.com> - 5.6.50-1
changelog:
  - Update to 5.6.50
  - Enable JPL (as a sub-package) -- NB: it only builds with icedtea for now,
    so we disable that sub-package on ppc64 and ppc for the moment


author: Mary Ellen Foster <mefoster at gmail.com> - 5.6.52-1
changelog:
  - Switch jpl requirement from IcedTea to OpenJDK and enable it everywhere
  - Upgrade to 5.6.52
  - Patch jpl configure script to find Java libraries on ppc{64}
  - NB: Still broken on ppc64, still trying to figure out why


author: Mary Ellen Foster <mefoster at gmail.com> - 5.6.52-2
changelog:
  - Put JPL stuff where the new Java packaging guidelines say it should be
    and make all of the necessary adjustments in other files
  - Split out "-devel" and "-static" packages per guidelines


author: Mary Ellen Foster <mefoster at gmail.com> - 5.6.55-1
changelog:
  - Update to 5.6.55 (wow, fast updates!)
  - Un-split xpce for now
  - Conditionally build jpl (on Fedora 9 with openjdk, and on 
    Fedora 8 non-ppc with icedtea)


author: Mary Ellen Foster <mefoster at gmail.com> - 5.7.11-1
changelog:
  - Move binaries into /usr/bin directly to fix multilib issues
  - Update to latest upstream release
  - Use officially-distributed PDF documentation instead of HTML
  - Unify Java patches
  - Remove strndup package; they fixed it upstream
  - Fix compilation of "maildrop" packages
  - Give the xpce documentation directory a clearer name
  - Removed the FILES section of the man page because it also caused
    multilib conflicts (and was inaccurate anyway)


author: Petr Pisar <ppisar@redhar.com> - 5.7.11-6
changelog:
  - Inhibit XPCE by macro to silent rpmlint (Resolves: #607476)
  - Define implicit attributes for jpl files (Resolves: #607476)
  - Expand tabs to spaces to silent rpmlint (Resolves: #607476)
  - Remove executable bit from jpl documentation files (Resolves: #607476)
  - Fix spelling in package descriptions (Resolves: #607476)
  - Strip debuginfo from libpl.so by setting executable bit (Resolves: #607476)
  - Change license to reflect reality (yes, Artistic1) (Resolves: #607476)
  - Disable java part on non-x86 architectures (bug #606846)


author: Dan Williams <dcbw@redhat.com> 0.12-1
changelog:
  - Update to 0.12
  - Sync specfile with Imendio specfile
  - Add BuildRequires: scrollkeeper (RH #124184)
  - Add obsoletes: libmrproject-devel


author: Dan Williams <dcbw@redhat.com> 0.12-5
changelog:
  - Add BuildReq scrollkeeper again (#124184, #111145)
  - Add Requires shared-mime-info for update-mime-database
  - Fix up planner's .desktop file (#132566)


author: Caolan McNamara <caolanm@redhat.com> - 0.13-5
changelog:
  - courtesy Stuart Clark <sclark@tpg.com.au> bug fix for: 
    Gantt bar height doesn't match treeview row height
    from bugzilla http://bugzilla.gnome.org/show_bug.cgi?id=128983
  - rh#191808# Extra BuildRequires, and fix eds enabling patch


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.1-3
changelog:
  - Update BuildRequires for evolution-devel.
  - Update BuildRequires for evolution-data-server-devel.
  - Update planner-0.13-enableeds.patch for Evolution 2.10.
  - Update some files to _libdir/evolution/2.10.
  - Rebuild against evolution-data-server-1.9.1.


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-3
changelog:
  - Resolves: rhbz#524662 Implement new Gnome XDG Config Folders for planner
      + gnome#596171 change recently used to use new recently used backend
      + gnome#XXXXXX split config/data setting into xdg dirs


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-4
changelog:
  - Resolves: rhbz#526295 automatically go to edit mode on insert task
  - Resolves: rhbz#537854 fix zoom to fit


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.3
changelog:
  - Fix crasher in text plugin after password prompt (bug 526652)
  - Actually apply the patch mentioned in 2009.29.09.2


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.5
changelog:
  - Prevent firstboot's X from crashing on radeon hardware. This should
    only affect multihead users, but for some reason it's getting some
    single head users as well.


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.7
changelog:
  - Fix emergency shell horkage (bug 526597)
  - Fix problem with details splash not showing up (bug 527426, bug 527254)


author: Ray Strode <rstrode@redhat.com> 0.8.0-0.2009.29.09.19
changelog:
  - Force raw mode on every text draw.  This works around a bug where
    some program at startup is kicking the terminal out of raw mode.


author: Ray Strode <rstrode@redhat.com> 0.8.3-2
changelog:
  - Fix lock tty patch from 0.8.2-2 to properly unlock tty
    Resolves: #590774
  - Fix up pkgwrangler niggles
    Resolves: 592305


author: Ray Strode <rstrode@redhat.com> 0.8.3-8
changelog:
  - Use monospace font in plymouth log viewer
    Resolves: #596332
  - Add window icon in plymouth log viewer
    Resolves: #605626


author: Ray Strode <rstrode@redhat.com> 0.8.3-13
changelog:
  - Built details plugin into binary, so there's always
    some splash available (fixes crash for users with
    separate /usr hitting escape early in boot up)
    Resolves: #612569


author: Ray Strode <rstrode@redhat.com> 0.8.3-14
changelog:
  - Use dark gray instead of black background in rings theme
    to prevent monitor sync issues on some hardware.
    Resolves: #620414


author: Ray Strode <rstrode@redhat.com> 0.8.3-16
changelog:
  - Fix up problem introduced in previous patch when kernel
    command line has no consoles
    Related: #615912


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-28
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1120904


author: Jeremy Katz <katzj@redhat.com> - 0.09-1
changelog:
  - Remove button module on suspend
  - Set default kernel in grub to current one when hibernating 
    so that resume works


author: Phil Knirsch <pknirsch@redhat.com> - 0.10-1
changelog:
  - Added missing pciutils-devel BuildRequires (#182566) 
  - Fixed missing vbestata save/restore calls for video suspend/resume (#182167, 
    - Renamed hook scripts to allow local pre and post inserts (#179421)
  - Added support for blinking led lights on Thinkpad Laptops during suspend
    (#179420)
  - Added pm-powersave script for powersaving via HAL (#169054)
  - Added symlinks for pm-shutdown and pm-restart (#165953)


author: Jeremy Katz <katzj@redhat.com> - 0.11-1
changelog:
  - fix display on resume with nvidia graphics
  - add infrastructure to tell what pm-util is running; don't resume 
    video on return from hibernate as the BIOS has already re-initialized it


author: Phil Knirsch <pknirsch@redhat.com> - 0.13-1
changelog:
  - Revert last changes for ATI graphics chips as they seem to cause more
    problems than they solved.


author: Peter Jones <pjones@redhat.com> - 0.16-1
changelog:
  - rework the difference between hibernate and suspend; get rid of PM_MODE
  - add 00clear script
  - move default_resume_kernel from "functions" to 01grub's hibernate section


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - add more helper functions
  - rework things that were forking an extra subshell
  - fix the suspend lock
  - work around bluetooth/usb suspend wackiness


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - update from CVS
  - move pam and consolehelper stuff here.
  - move video hooks here since HAL isn't ready


author: Jeremy Katz <katzj@redhat.com> - 0.19-3
changelog:
  - doing the vbestate save/restore on intel video with the modesetting 
    intel xorg driver is broken.  so don't do it.


author: Peter Jones <pjones@redhat.com> - 0.19.1-1
changelog:
  - Hopefully fix Centrino ThinkPad suspend+resume
  - Hopefully fix Intel Mac Mini/MacBook suspend+resume


author: Peter Jones <pjones@redhat.com> - 0.19.1-3
changelog:
  - Disable bluetooth suspend/reusme hook by default; the kernel modules seem
    to support this correctly these days.


author: Phil Knirsch <pknirsch@redhat.com> - 0.19.1-4
changelog:
  - Start/stop correct services in 10NetworkManager hook (#215253)
  - Fixed check for /sys/power/disk and /sys/power/state (#214407)
  - Added proper error messages in case /sys/power/disk or /sys/power/state are
    missing (#215386)
  - Removed service calls and module load/unload for bluetooth hook (#213387)
  - Added hook file to restore the sysfont after resume (#215391)
  - Added the possibility to disable hibernate and suspend completely via the
    config file (#216459)
  - Symlinked the config file to /etc/sysconfig/power-management (#216459)
  - Fixed pm-powersave permission check bug (#222819)
  - Small specfile cleanups


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6
changelog:
  - Fixed missing builds for vbetool and radeontool for some archs (#241469)
  - Fixed typo in functions where wrong variable was used (#241633)


author: Adam Jackson <ajax@redhat.com> 0.99.3-11
changelog:
  - Install (not just build) vbetool and radeontool on x86_64 too
  - Explicitly list files under %_sbindir, so they don't drop away again
  - Light spec cleanups


author: Till Maas <opensource till name> - 0.99.3-12
changelog:
  - Adjust %files to own /etc/pm/ and /usr/lib/pm-utils/ (#233906)
  - remove (C|CXX|F)FLAGS definitions, they are already in %configure
  - remove Core in Summary tag
  - add URL for pm-utils
  - add %{?arm} to ExclusiveArch (#245463)
  - remove vbetool and require it (it is a separate package now)
  - remove radeontool and require it (it is a separate package now)
  - Update License Tag
  - cleanup buildrequires
  - clear %setup


author: Peter Jones <pjones@redhat.com> - 0.99.4-1
changelog:
  - Merge new upstream
  - remove pm/power.d/laptop-tools
  - add --quirk-reset-brightness (needed for the Fujitsu Lifebook S7110)


author: Till Maas <opensource till name> - 0.99.4-3
changelog:
  - remove unused patch (vidhooks)
  - add patch to keep logfile (RH #237840 (f7), #238068 (devel)), 
    to keep selinux context
  - simplify spec
  - restore selinux context of logfile in %post 
  - use rpmmacros more often


author: Till Maas <opensource till name> - 0.99.4-10
changelog:
  - enhance hd-apm-restore and add a config file
  - fix source-definition for hd-apm-restore
  - add hook suffix for hook script


author: Till Maas <opensource till name> - 0.99.4-12
changelog:
  - remove ExclusiveArch, because it contains all supported archs
    (in case an arch schould be excluded, please use ExcludeArch)
  - improve readability of usermode setup
  - remove pm-restart pm-shutdown from usermode setup, because
    there are no such binaries
  - list more files in %files explicit to make it obvious when
    there are changes in the distributed package
  - add .conf suffix to oldconfig files


author: Till Maas <opensource till name> - 0.99.4-14
changelog:
  - add pm-utils-bugreport-info.sh script to collect information for bugreports
  - require Hal (RH #428452)


author: Till Maas <opensource till name> - 1.1.0-5
changelog:
  - remove double %dir %{_libdir}/pm-utils
  - update pm-utils-99hd-apm-restore to work with current pm-utils release
    Red Hat Bugzilla: #442294
  - move config file for hd apm restore away from config.d, which is only used
    for pm-utils internal config anymore
  - own /var/run/pm-utils/ and create storage/locks subdirs (may be
    needed for selinux)
  - make sure an empty logfile is created after install (touch -a ...)
  - sort %files
  - make Source0: an URL
  - remove Conflicts: bluez utils, all supported Fedora releases ship
    already a newer version
  - remove unused BR: hal-devel, dbus-devel, pkgconfig, docbook-utils


author: Richard Hughes <rhughes@redhat.com> - 1.1.0-8
changelog:
  - Rip out all the consolehelper and PAM stuff - users are not meant to be
    running these tools directly and it's a massive change from upstream.


author: Till Maas <opensource@till.name> - 1.1.2.2-2
changelog:
  - %pre and %post scriptlets should not be needed anymore, old
    config files should be already moved in every supported release
    and the selinux context for the logfile should be restored by
    rpm
  - remove pcitulils BR, it was needed for vbetool, which is in a
    separate package now
  - substitute %{__rm} macros for uniform macro usage


author: Richard Hughes <rhughes@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - The core hook-running machinery will now abort running hooks of one fails,
    and the front-end scripts will return a failure error code if hook-running
    was aborted.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2.1-1
changelog:
  - Update to 1.2.2.1
  - Supports automatically pulling quirks from HAL and has the ability to save
    the last working set of quirks to an .fdi file.


author: Richard Hughes <rhughes@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fixes a glitch in module unloading
  - Numerous small usability and debugging improvements


author: Richard Hughes <rhughes@redhat.com> - 1.2.5-1
changelog:
  - New upstream version
  - If running on a system that is using KMS, we will refuse to handle any video
    quirks passed to us by HAL, and we will not chvt to an empty console.
  - Fix a longstanding bug in tuning scheduler powersaving knobs on SMT systems.


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Upgrade to 1.04, editied the pbm2ppa patch to add <string.h>
  - to pbmtpg.c, which uses strmp, edited the redhat patch to
  - apply cleanly.


author: Tim Waugh <twaugh@redhat.com> - 1:1.04-19
changelog:
  - Consistent use of macros.
  - Removed ancient obsoletes tag.
  - Clean buildroot in install section not prep section.
  - Make setup quiet.
  - Use noreplace for config files.


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


