# changelog

author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-4.1
changelog:
  - Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
  - 1109923 - Fix module loading/configuration for Apache 2.4.
  - Document the runtime dependency on pam_authenticate_with_login_password.
  - Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Rob Crittenden <rcritten@redhat.com> 1.0.6-2
changelog:
  - Patch to properly detect the Apache model and set up NSS appropriately
  - Patch to punt if a bad password is encountered
  - Patch to fix crash when password.conf is malformatted
  - Don't enable ECC support as NSS doesn't have it enabled (3.11.4-0.7)


author: Rob Crittenden <rcritten@redhat.com> 1.0.7-1
changelog:
  - Update to 1.0.7
  - Remove Requires for nss and nspr since those are handled automatically
    by versioned libraries
  - Updated URL and Source to reference directory.fedoraproject.org


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-4
changelog:
  - Apply patch so that mod_nss calls NSS_Init() after Apache forks a child
    and not before. This is in response to a change in the NSS softtokn code
    and should have always been done this way. (444348)
  - The location of libnssckbi moved from /usr/lib[64] to /lib[64]
  - The NSS database needs to be readable by apache since we need to use it
    after the root priviledges are dropped.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-6
changelog:
  - Update the patch for FIPS to include fixes for nss_pcache, enforce
    the security policy and properly initialize the FIPS token.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.7-7
changelog:
  - Don't inherit the MP cache in multi-threaded mode (454701)
  - Don't initialize NSS in each child if SSL isn't configured


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4
changelog:
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Add file Requires on libnssckbi.so so symlink can't fail
  - Use _sysconfdir macro instead of /etc
  - Set minimum level of NSS to 3.12.6


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-9
changelog:
  - Revert mod_nss-wouldblock patch
  - Reset NSPR error before calling PR_Read(). This should fix looping
    in #620856


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-18
changelog:
  - Actually apply the patch to use memmove in place of memcpy since the
    buffers can overlap (#669118)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bugzilla Bug #884115 - Package mod_nss-1.0.8-18.1.el7 failed RHEL7 RPMdiff
    testing
  - Bugzilla Bug #906082 - mod_nss requires manpages for gencert and nss_pcache
  - Bugzilla Bug #906089 - Fix dangling symlinks in mod_nss
  - Bugzilla Bug #906097 - Correct RPM Parse Warning in mod_nss.spec
  - Bugzilla Bug #948601 - Man page scan results for mod_nss


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21.1
changelog:
  - Add the following explanation to the 'Dangling symlinks' textbox in rpmdiff:
    Symlink 'etc/httpd/alias/libnssckbi.so' is deliberate.
    This test does not belong in rpmdiff. This test belongs in TPS.
    Since the symlink points to a file in another package, e.g. a
    dependency or a system file, rpmdiff cannot detect this. Remember,
    rpmdiff does not install or even know about package dependencies.
    That's TPS's job.
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/nss.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/10-nss.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule nss_module modules/libmodnss.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-24
changelog:
  - Add '--enable-ecc' option to %configure line under %build section of
    this spec file (mharmsen)
  - Bumped version build/runtime requirements for NSPR and NSS (mharmsen)
  - [mod_nss-PK11_ListCerts_2.patch]
  - Bugzilla Bug #1022295 - PK11_ListCerts called to retrieve all user
    certificates for every server (rcritten)
  - [mod_nss-array_overrun.patch]
  - Bugzilla Bug #1022298 - overrunning array when executing nss_pcache
    (rcritten)
  - [mod_nss-clientauth.patch]
  - Bugzilla Bug #1022921 - mod_nss: FakeBasicAuth authentication bypass
    [rhel-7.0] (rcritten)
  - [mod_nss-no_shutdown_if_not_init_2.patch]
  - Bugzilla Bug #1022303 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload (rrelyea)
  - [mod_nss-proxyvariables.patch]
  - Bugzilla Bug #1022309 - mod_nss insists on Required value NSSCipherSuite
    not set. (mharmsen)
  - [mod_nss-tlsv1_1.patch]
  - Bugzilla Bug #1022310 - current nss support TLS 1.1 so mod_nss should pick
    it up (mharmsen)
  - [mod_nss-sslmultiproxy_2.patch]
  - Fixes Bugzilla Bug #1021458 - [RFE] Support ability to share mod_proxy with
    other SSL providers (jorton, mharmsen, nkinder, & rcritten)


author: Joe Orton <jorton@redhat.com> - 1.0.8-26
changelog:
  - [mod_nss-SSLEngine-off.patch]
  - Bugzilla Bug #1029042 - Implicit SSLEngine for 443 port breaks mod_nss
    configuration (jorton)
  - [mod_nss-unused-filter_ctx.patch]
  - Bugzilla Bug #1029665 - Remove unused variable 'filter_ctx' (mharmsen)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-27
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1024536 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-7.0] (rcritten)
  - Bugzilla Bug #1030845 - mod_nss: do not use %configure in %changelog
    (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-28
changelog:
  - Resolves: rhbz #1030276
  - [mod_nss-usecases.patch]
  - Bugzilla Bug #1030276 - mod_nss not working in FIPS mode


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-30
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-31
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires
  - corrected typo on date


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-3
changelog:
  - Fix logical and support in cipher strings CVE-2015-3277
    (#1253570)
  - Add missing BuildRequires and small patch to use requests.urllib3
    to fix make check (#1253570)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-5
changelog:
  - Don't enable NULL ciphers in DEFAULT macro (#1253570)
  - Add OpenSSL cipher macro EECDH (#1160745)
  - Disable the live server testing in make check because it
    may run as root and fail horribly (#1160745)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-6
changelog:
  - Add the supported NSS SHA384 ciphers (#1253570)
  - Add kECDH, AECDH, ECDSA and aECDSA macros (#1253570)
  - Bump the NSS BR and Requires so the new ciphers are available
  - Bump the NSPR Requires to match NSS


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-1
changelog:
  - Rebase to 1.0.14 (#1299063)
  - Add support for Server Name Indication (SNI) (#1053327)
  - Use upstream method to not execute live tests as root (#1256887)
  - Always call SSL_ShutdownServerSessionIDCache() in ModuleKill
    (#1263301, #1296685)
  - Don't require NSSProxyNickname (#1280287)
  - Make link to libnssckbi.so an absolute link (#1288471)
  - Fail for colons in credentials with FakeBasicAuth (#1295970)
  - Don't ignore NSSProtocol when NSSFIPS is enabled (#1312491)
  - Check filesystem permissions on NSS database at startup (#1312583)
  - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 (#1323913)
  - Patch to match available ciphers so tests pass (#1299063)
  - Patch to fix tests in brew (#1299063)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
  - Check the NSS certificate database directory for read permissions
    by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
  - Fail start start when there are invalid Protocols defined (#1389114)
  - Handle group membership when testing NSS database filesystem
    permissions (#1395300)
  - Add OCSP cache tuning directives (#1392582) 
  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
  - Update nss_pcache.8 to drop directory and prefix options (#1382102)

  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
  - Correct URL and Source entries to point to pagure.io (#1502362)
  - Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Rob Crittenden <rcritten@redhat.com> 1.0.2-4
changelog:
  - The nss package changed the location of the NSS shared libraries to /lib from
    /usr/lib. Static libraries remained in /usr/lib. They then updated their
    devel package to put symlinks back from /lib to /usr. Respin to pick that up.
    BZ 434395.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #737556 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log -
    mharmsen
  - Add 'autoreconf -fvi' to build section - mharmsen
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378) - rcritten@redhat.com
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546) - rcritten@redhat.com
  - Actually apply the patch (#648546) - rcritten@redhat.com
  - Fix killing the web server if updatecritical is set (#648546) -
    rcritten@redhat.com


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-7
changelog:
  - Bugzilla Bug #716355 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #716361 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #716874 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-14
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-16
changelog:
  - Bugzilla Bug #948875 - Man page scan results for mod_revocator
  - Moved 'ldapget' from %bindir to %sbindir (provided compatibility link)
  - Moved 'crlhelper' from %bindir to %libexecdir (provided compatibility link)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-17
changelog:
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/revocator.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/11-revocator.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule rev_module modules/mod_rev.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-20
changelog:
  - Clean up semaphore in crlhelper on shutdown (#1326840)
  - Update URL to https://fedorahosted.org/mod_revocator/


author: Michael Fleming <mfleming+rpm@enlartenment.com> 1.8.7-4
changelog:
  - Add Requires: httpd-mmn to get the appropriate "module magic" version
    (thanks Ville Skytta)
  - Disabled an overly-agressive rule or two..


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.0-1
changelog:
  - New major release - 2.1.0
  - Fix CVE-2007-1359 with a local rule courtesy of Ivan Ristic
  - Addition of core ruleset
  - (Build)Requires libxml2 and pcre added.


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.0-3
changelog:
  - Automagically configure correct library path for libxml2 library.
  - Add LoadModule for mod_unique_id as the logging wants this at runtime


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.1.1-1
changelog:
  - New upstream release
  - Drop ASCIIZ rule (fixed upstream)
  - Re-enable protocol violation/anomalies rules now that REQUEST_FILENAME
    is fixed upstream.


author: Michael Fleming <mfleming+rpm@enlartenment.com> 2.5.6-1
changelog:
  - Update to upstream 2.5.6
  - Remove references to mlogc, it no longer ships in the main tarball.
  - Link correctly vs. libxml2 and lua (bz# 445839)
  - Remove bogus LoadFile directives as they're no longer needed.


author: Michael Fleming <mfleming+rpm@thatfleminggent.com> - 2.5.12-1
changelog:
  - Update to latest upstream release
  - SECURITY: Fix potential rules bypass and denial of service (bz#563576)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-1
changelog:
  - Update to 2.7.1
  - Remove libxml2 build patch (upstreamed)
  - Update spec since upstream moved to github


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
  - Add some missing directives RHBZ #569360
  - Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
    (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a8.4jpp.1
changelog:
  - Fixed %Release.
  - Fixed %License.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Defined _with_gcj_support and gcj_support.
  - Fixed instructions on how to generate the source drop.


author: Matt Wringe <mwringe@redhat.com> 0:1.0-0.1.a8.4jpp.2
changelog:
  - Change license to MIT to reflex the actual license specified in the
    source headers.
  - fix various rpmlint issues


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.4-3
changelog:
  - Fix pom filenames (remove poms of integration tests) Resolves rhbz#655818
  - Use jpackage_script macro to generate script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-5
changelog:
  - Add JPP depmap for maven-project to override versionless depmap
  - Add missing BR/R: maven-project
  - Remove unneeded BR: jpa_api


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
  - Build with xmvn
  - Use better description
  - Simplify build-requires
  - Update to current packaging guidelines


author: Peter Jones <pjones@redhat.com> - 0.2-3
changelog:
  - Also provide shim-fedora.efi, signed only by the fedora signer.
  - Fix the fedora signature on the result to actually be correct.
  - Update for shim-unsigned 0.2-3


author: Peter Jones <pjones@redhat.com> - 0.2-3.3
changelog:
  - Add obsoletes and provides for earlier shim-signed packages, to cover
    the package update cases where previous versions were installed.
    Related: rhbz#888026


author: Peter Jones <pjones@redhat.com> - 0.4-1
changelog:
  - Provide a fallback for uninitialized Boot#### and BootOrder
    Resolves: rhbz#963359
  - Move all signing from shim-unsigned to here
  - properly compare our generated hash from shim-unsigned with the hash of
    the signed binary (as opposed to doing it manually)


author: Peter Jones <pjones@redhat.com> - 0.7-7
changelog:
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-14
changelog:
  - Pull in aarch64 build so they can compose that tree.
    (-14 to match -unsigned)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 10-0.1
changelog:
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
  - mwm: do not see outline of window when moving (RHBZ#1080548)
    Clone of RHBZ#997241
  - Fixed rendering issues seen while scrolling window (RHBZ#1134365)
    (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1396514) (MotifZone bug #1564)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
  - Fix last commit that is actually MotifZone#1565 and removes that patch since
    it was causing more problems. Fixes MotifZone#1576.
    Resolves: rhbz#1448509


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Hm. 2.5.1pre hasn't been touched in two years. I guess that's 'stable'.
  - add a bugfix patch from debian.


author: Tim Waugh <twaugh@redhat.com> 2.5.2-2
changelog:
  - s/Copyright:/License:/.
  - Don't explicitly strip binaries (bug #62564).
  - Fix -H option (bug #57105).


author: Jitka Kudrnacova <jkudrnac@redhat.com> 2.5.4-6
changelog:
  - Fixed page scaling (bug #173276) and modified the manpage
    (the bug was mentioned in the manpage)


author: Matthias Saou <http://freshrpms.net/> 0.60-0.1.beta2
changelog:
  - Initial RPM release, now that mpg123 is maintained again and went GPL/LGPL.
  - Audio output type is not (yet?) plugin-based, so use libao (for ALSA).


author: Matthias Saou <http://freshrpms.net/> 0.60-1
changelog:
  - Update to 0.60 final.
  - Add support for all available compatible outputs, unfortunately it's a build
    time choice, so default to alsa.
  - Obsolete mpg321 up to the last know package version.


author: Matthias Saou <http://freshrpms.net/> 1.4.2-1
changelog:
  - Update to 1.4.2.
  - Obolete mpg321 up to last known version, as it's pretty much dead.
  - Add libtool-ltdl-devel build req, without a copy is installed.
  - Add scriplets for new library.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-1
changelog:
  - Update to 1.12.1
  - Put libmpg123 into its own package
  - Put some less often used output plugins into their own mpg123-plugins-extras
    package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-2
changelog:
  - Add arts-devel BuildRequire and add the arts output plug-in to the
    mpg123-plugins-extras package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-3
changelog:
  - Move mpg123 (and its manpage) to mpg123.bin and use alternatives, so as to
    peacefully co-exist with mpg321 (rf#1278)


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.13.7-1
changelog:
  - New upstream bugfix release 1.13.7
  - Properly build and install development documentation (rf#2257)


author: Richard Shaw <hobbes1069@gmail.com> - 1.14.3-1
changelog:
  - Update to latest upstream release.
  - Move README and README.remote to correct package. Fixes #1898.


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.15.1-1
changelog:
  - New upstream release 1.15.1 (rf#2716)
  - Drop obsolete esound and arts plugins from mpg123-plugins-extras


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.19.0-1
changelog:
  - Update to 1.19.0
  - Enable (optional) use of NEON on arm
  - Add missing %{?_isa} to libmpg123 Requires in -devel (rf#3194)


author: Igor Gnatenko <ignatenko@redhat.com> - 1.23.4-1
changelog:
  - Update to 1.23.4
  - Use weak and rich deps for plugins
  - rename libmpg123 to mpg123-libs
  - Drop usage of alternatives (nothing uses it actually)
  - Correct license


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-1
changelog:
  - Update to upstream version mpich-3.2 with patches from Fedora.
  - Keep 3.0.4 as 'mpich-3.0' for backwards compatibility.
  - Resolves: rhbz1091532
  - Resolves: rhbz1142117
  - Resolves: rhbz1148992


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-2
changelog:
  - Remove bad rpath in two binaries in mpich-3.2.
  - Restore trimming of shebang lines in config files in mpich-3.0-devel.
  - Related: rhbz1091532


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Jay Fenlason <fenlason@redhat.com> 3.2-3.el6
changelog:
  - Build using new mvapich, mvapich2, and openmpi.
    Add support for the -psm variants of the three mpi stacks.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 3.2-5.el6
changelog:
  - Rebuild against newer infinipath-psm, openmpi, mvapich, mvapich2
    This removes the openmpi-psm subpackage, as openmpi now switches between
     psm and non- at runtime.
  - Correct version numbers for IMB and OSU benchmarkes in the description.
  - Update spec file to fix pkgwrangler warnings.
    Resolves: rhbz557803
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    Resolves: rhbz1011910, rhbz1011915


author: Michal Schmidt <mschmidt@redhat.com> - 4.1-1
changelog:
  - Update IMB to 4.1.
  - Update OSUMB to 5.3.
  - Add subpackages for new mpich and mvapich2 versions and variants.
  - Resolves: rhbz961885
  - Resolves: rhbz1093466


author: Michal Schmidt <mschmidt@redhat.com> - 5.4-1
changelog:
  - Update IMB to 2018.0.
  - Update OMB to 5.4.
  - Add builds for openmpi 3 and mvapich 2.3.
  - Build IMB NBC and RMA tests.
  - Build OSUMB collective async tests.
  - Add precise Requires.
  - Resolves: rhbz1358437


author: Arne Coucheron <arneco@online.no>
changelog:
  [2.5.3-1]
  - using %{name} and %{version} macros
  - using %defattr macro in filelist
  - using install -d in various places instead of cp
  - added -q parameter to %setup
  - removed older changelogs


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.6.4]
  - removed mrtg-squid (specific OIDS)
  - cfgmaker and indexmaker now /usr/bin
  - libgd must be >= 1.3


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  [2.7.4-1]
  - changed Perl module installation to be version independent
  - changed libgd dependency to gd
  - changed URL
  - strip binaries
  - include contrib directory as documentation


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.4-2]
  - set perl path for contribs
  - set SNMP's perl to /usr/lib/perl5/site_perl (clean for RH5.x and RH6.0)


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.5]
  - removed gd-devel requires, RH5.x use libgd-devel and RH6 gd-devel.
  - removed CR from perl files in contrib.
  - added cfgmaker_ip in binaries.
  - rework modules install/de-install for RH5.x/6.0 compat


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.4]
  - mrtg could use now png instead of gif via gd1.6.1
    but since gd1.6.1 remove all gif reference it could
    break your dependencies, so we don't use it for now.


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.8]
  - important release since rrd support is added
    It came from Rainer Bawidamann work. If you have rrdtool RPM
    installed, just add UseRRDTool: Yes in your config files.
  - added latest patch for mrtg-rrd.
  - to convert your mrtg logs to rrd format, use log2rrd.pl
    you can found on rrdtool package.


author: Henri Gomez <hgomez@slib.fr>
changelog:
  [2.9.2]
  - clean up spec file for 2.9 release
    (no .gif, cfgmaker_ip removed)
  - mrtg 2.9 look for .pm in /usr/lib/mrtg2, so no more need
    to relocate .pm at post time.
  - mrtg config (mrtg.cfg) goes now in /etc/mrtg/
  - added manual to rpm
  - spec file adapted to RH 7.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set LIBS=-lfreetype and LDFLAGS="-lgd -lpng -lfreetype -lm" to link the gd
    support with freetype, which it needs
  - remove Packager: tag (was Packager: Tim Verhoeven <dj@sin.khk.be>)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-1
changelog:
  - update to 2.9.17
  - use FHS macros
  - install the .gif files as well
  - copyright: distributable -> license: GPL


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-13
changelog:
  - move crontab data to /etc/cron.d
  - add trigger to remove crontab data from /etc/crontab on removal of
    older versions


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.28-4
changelog:
  - disable use of RPM's internal dependency generator so that we can filter out
    requirements of the contrib scripts included in the docs directory


author: Miloslav Trmac <mitr@redhat.com> - 2.10.15-1
changelog:
  - Update to 2.10.15
  - Use a more generic URL
  - Don't link rateup statically
  - Move threshold and log files to /var/lib/mrtg, lock files to /var/lock/mrtg


author: Jindrich Novy <jnovy@redhat.com> 2.10.15-2
changelog:
  - remove bogus characters from man pages to prevent
    man displaying the page is in wrong encoding (#139341)


author: Miloslav Trmac <mitr@redhat.com> - 2.11.0-1
changelog:
  - Update to mrtg-2.11.0
  - Don't install HTML documentation to /var/www/mrtg
  - Clean up %install a bit


author: Miloslav Trmac <mitr@redhat.com> - 2.12.1-1
changelog:
  - Update to mrtg-2.12.1
  - Remove unnecessary BuildRequires, Requires
  - Don't link rateup to libpng and libz


author: Miloslav Trmac <mitr@redhat.com> - 2.12.2-2
changelog:
  - Add LANG and LC_ALL definition to cron script for easier copying to command
    line (#167530)
  - Don't ship MANIFEST and a very obsolete version of 14all.cgi
  - Fix rewriting of perl paths to /usr/bin/perl in contrib scripts
  - Make contrib scripts unexecutable to avoid unnecessary rpm dependencies;
    remove unnecessary entries from filter-requires-mrtg.sh


author: Miloslav Trmac <mitr@redhat.com> - 2.15.0-1
changelog:
  - Update to mrtg-2.15.0
  - Don't use Prereq: for /sbin/service
  - Use (sed -i) instead of perl to make the regexps more readable


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.3-2
changelog:
  - Fix 'undefined subroutine &SNMP_Session::inet_ntop called at
    /usr/bin/../lib64/mrtg2/SNMP_Session.pm line 549.' error


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-7
changelog:
  - The upstream tarball as provided is broken.  Clean up the tarball so
    the package builds properly


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Matt Wringe <mwringe at redhat.com> - 0:1.2-0.1.20050722.3jpp.1.fc7
changelog:
  - Extract sources from a fresh CVS export of the given tag and add extra source
    required to build the package not present in the 20050722 tag anymore
  - Add a patch to remove compile time dependency on crimson
  - Add a patch to enable compression of jar files
  - Add jpackage-utils as a requires for the packages/subpackages


author: Andrew Overholt <overholt@redhat.com> 0:1.2-0.1.20050722.3jpp.1
changelog:
  - Remove postun Requires on jpackage-utils
  - Set gcj_support to 1
  - Fix groups to shut up rpmlint
  - Add versions to the Provides and Obsoletes
  - Add patch to take out Class-Path in MANIFEST.MF


author: Matt Wringe <mwringe@redhat.com> 0:1.2-0.1.20050722.3jpp.2
changelog:
  - Fix unowned directories
  - Change copyright files to utf-8 format
  - Change license field to BSD (from BSD-Style)


author: Matt Wringe <mwringe@redhat.com> 0:1,2-0.1.20050722.3jpp.3
changelog:
  - Make package build with new gcj. Remove .class files from demo package and
    remove demo exclude from aot-compile-rpm


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-1
changelog:
  - Update to latest tagged release.
  - Drop support for GCJ ahead of time compilation.
  - Fix RHBZ #627688, RHBZ #631076
  - This project now builds with maven instead of ant.
  - The new build in this release aggregates javadocs, so now we have one javadoc
    package that obsoletes the many javadoc packages we had before.
  - Use new jar names that upstream use, provide the old names.
  - Misc other changes for guideline compliance.


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-4
changelog:
  - Really require a version of xml-commons-resolver that provides the necessary
    maven pom and depmap.


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-3
changelog:
  - Do not build module with unclear licensing (relames)
  - Replace %add_to_maven_depmap with %add_maven_depmap


author: Andrea Borgia <borgia@cs.unibo.it>
changelog:
  - updated to version 0.5
  - removed the touch to force the build: no binaries are included!
  - added to the docs: README.stinit, stinit.def.examples
  - made buildroot capable


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch to make the texi sources compile
  - fix the spec file group and description
  - fixed floppy drive sizes


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - get rid of mtools.texi as a doc file (we have the info file)
  - fix config file so mtools work (#9264)
  - fix references to the config file to be /etc/mtools.conf


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply the author's current patches, fixes among other things
    ZIP drive support and doesn't crash when trying to access a BSD disk


author: Adam Tkac <atkac redhat com> 3.9.10-3
changelog:
  - Resolves: #223712
  - applied Ville Skytta's (ville.skytta "antispam" iki.fi) patch
    (install-info scriptlet failures)


author: Adam Tkac <atkac redhat com> 4.0.9-1
changelog:
  - updated to 4.0.9
  - merged mtools-3.9.7-bigdisk.patch to config patch
  - mtools400-rh480112.patch merged to upstream


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.30-1]
  - Build gtk version against gtk+-1.2.0
  - v0.30
  - Fixed a typo in the changelog (NEWS) entry for 0.27. :-)
  - added use of "MTR_OPTIONS" environment variable for defaults.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.31-1]
  - v0.31
  - Fixed a few documentation issues. -- Matt
  - Changed the autoconf stuff to find the resolver library on
    Solaris. -- REW
  - Cleaned up the autoconf.in file a bit. -- Matt.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.33-1]
  - v0.33
  - Fixed the Linux glibc resolver problems.
  - Fixed the off-by-one problem with -c option.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.34-1]
  - v0.34
  - Added Matt's nifty "use the icmp unreachables to do the timing" patch.
  - Added Steve Kann's pause/resume patch.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.35-1]
  - v0.35
  - Added Craig Milo Rogers pause/resume for GTK patch.
  - Added Craig Milo Rogers cleanup of "reset". (restart at the beginning)
  - Net_open used to send a first packet. After that the display-driver
    got a chance to distort the timing by taking its time to initialize.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.37-1]
  - v0.37
  - Added Bill Bogstad's "show the local host & time" patch.
  - Added R. Sparks' show-last-ping patch, submitted by Philip Kizer.

  - v0.36
  - Added Craigs change-the-interval-on-the-fly patch.
  - Added Moritz Barsnick's "do something sensible if host not found"
    patch.
  - Some cleanup of both Craigs and Moritz' patches.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  - renamed mtr-gtk to xmtr
  - added symlink from /usr/bin/mtr to /usr/sbin/mtr

    [mtr-0.40-1]
  - Fixed some problems with HPUX and SunOS.
  - Included Olav Kvittem's patch to do packetsize option.
  - Made the timekeeping in micro seconds.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.41-1]
  - Added afr's patch to allow disabeling of gtk without Robn's hack.
  - Made report mode report the newly added extra resolution.


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-9
changelog:
  - Remove absolute paths from the PAM configuration, ensuring that the modules
    for the right arch get used on multilib systems.
  - Remove Icon:.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added IPv6 patch from ftp://ftp.kame.net/pub/kame/misc/mtr-054-*
  - Enabled IPv6 in mtr.
  - Included fix from Robert Scheck to make GTK optional in configure.


author: Phil Knirsch <pknirsch@redhat.com> 0.54-7
changelog:
  - Fixed broken behaviour with resolver SERVFAIL results (#125392)
  - Added ncurses-devel libtermcap-devel as BuildPreReq (#124553)
  - Added gtk+ Requires for mtr-gtk package (#121705)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.54-9
changelog:
  - Add CVE patch for security reasons (#129386)
  - Add patch to fix broken --address option (#132628)
  - Add patch to fix broken reverse DNS lookups for ipv6 (#134532)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.69-4
changelog:
  - Made the output, especially for reports much more readable (#147865)
  - Fixed --address option (#162029)


author: Adam Tkac <atkac redhat com> 2:0.75-6
changelog:
  - install mtr as SUID binary (#518828)
  - use fprintf instead of perror when getaddrinfo fails (#516603)


author: Jan Görig <jgorig redhat com> 2:0.80-1
changelog:
  - update to 0.80
  - mtr now waits for last sent packet (#611739)
  - fixed crashes in XML format
  - XML format fixes


author: Adam Tkac <atkac redhat com> - 2:0.81-1
changelog:
  - update to 0.81
  - mtr-now-waits-for-last-response.patch is no longer needed
  - fixed wide report output (#703549)


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Kenneth Porter <shiva@well.com>
changelog:
  - 1.2.6
  - Fixed 'eepos' stuff to use | rather than || (whoops!)
  - Accept a 4-byte element descriptor for the robot arm for certain older
  - autochangers.


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-5
changelog:
  - dead code elimination
  - updated spec link to recent source
  - removed spec link to obsolete URL
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-8
changelog:
  - fix type confusion in SCSI_writet(), SCSI_readt(), slow_memcopy()
    and slow_bzero()
  - rebuilt with gcc4


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-8
changelog:
  - Removed ca-bundle.crt since it is outdated (rhbz#734379)
  - Build with gpgme support by default (rhbz#748337)
  - Fixed segmentation fault during messages removal in thread mode
    (rhbz#674271)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-12
changelog:
  - Fix segmentation fault while syncing mailbox
    (rhbz#691719)
  - Fix unhandled strchr output
    (rhbz#833044)


author: Matej Muzila <mmuzila@redhat.com> 5:1.5.21-27
changelog:
  - Resolves #1388511 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Adam Jackson <ajax@redhat.com> 3.4.1-3
changelog:
  - mutter-never-slice-shape-mask.patch, mutter-use-cogl-texrect-api.patch:
    Fix window texturing on hardware without ARB_texture_non_power_of_two
    (#813648)


author: Owen Taylor <otaylor@redhat.com> - 3.8.4-7
changelog:
  - Add an upstream patch that fixes a bug with left-over window
    shadows that show up when we add patches to Clutter to stop
    redrawing the entire screen on every window move.
    Resolves: rhbz#1063984


author: Owen Taylor <otaylor@redhat.com> 3.8.4-13
changelog:
  - Add patches for quadbuffer stereo suppport
    Fix a bad performance problem drawing window thumbnails
    Resolves: rhbz#861507


author: Rui Matos <rmatos@redhat.com> - 3.14.4-17
changelog:
  - Fix a crash when plugging monitors
    Resolves: #1275215
  - Avoid a critical message when unplugging monitors
    Resolves: #1275220
  - Fix monitors remaining undetected on resume from suspend
    Resolves: #1219476


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-20
changelog:
  - Rebase and add back stereo support patch that was dropped in
    update to 3.14.
  - Retain the last active window for seamless restarts.
    Resolves: #1305076


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-26
changelog:
  - Turn on newly added "threaded swap wait" functionality in Cogl
    so that on NVIDIA cards, frame completion is handled in a proper
    non-blocking fashion, fixing bugs with idles not running when
    they should.
    Resolves: #1305076


author: Rui Matos <rmatos@redhat.com> - 3.14.4-29
changelog:
  - Allow clutter to fallback to the classic gl driver since mesa's
    software driver doesn't support gl3
    Related: #1361251


author: Florian Müllner <fmuellner@redhat.com> - 3.24.3-11
changelog:
  - Prevent crash when removing workspace with on-all-workspaces windows
    present (like desktop icons)
  - Resolves: #1453065


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-7
changelog:
  - Fix crash during session saving
    Resolves: #1535080
  - Fix XWayland prevented from starting
    Resolves: #1540986


author: Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-10
changelog:
  - Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
    Resolves: #1499788
  - Fix tablet pressure curve configuration not being applied
    Resolves: #1543693


author: Doug Ledford <dledford@redhat.com> - 1.0.3-2
changelog:
  - Make scriptlets match mvapich
  - Include a Requires(post) and Requires(preun) so installs work properly
  - Resolves: bz465448


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add Group: to -devel
  - Split into subpackages as required by packaging guidelines
  - cleanup BuildRequires
  - attempt to build on ppc
  - cleanup spec file
  - cleanup mvapich2.pc, still not correct, but closer
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-2.el6
changelog:
  - Add BuildRequires: python
  - Add BuildRequires: java
  - Remove the pkgconfig file entirely
    Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Fix an issue with usage of _cc_name_suffix that caused a broken define in
    our module file
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-4.el6
changelog:
  - Move -devel requires to the -devel subpackage.
    Resolves: bz568450
  - Add defattr as required by packaging guidelines
    Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.6-1.el6
changelog:
  - New upstream release, with different build process, and without
    man pages, because we don't have the sowing package, and its
    licensing status is unclear (no licence description of any kind in
    the tarball).
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-2.el6
changelog:
  - Fix the psm RPM macros so that we can build a -psm variant of
    mpitests
  - remove the osu-micro-benchmarks, which are being installed with a
    bogus rpath, and which are included in mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-3.el6
changelog:
  - Change the requires on mvapich2-psm-devel to mvapich2-psm from mvapich2
    so that mpitests will build
  - clean up the build to not use .{non-}psm directories.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.8-1
changelog:
  - New upstream version, with man pages again.
    This fixes the following bugs:
    Related: rhbz739138
    Resolves: rhbz613696
    Resolves: rhbz625620
    Resolves: rhbz735954
    Resolves: rhbz782263


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    Resolves: rhbz1001718


author: Kyle McMartin <kmcmarti@redhat.com> - 2.0a-3
changelog:
  - aarch64: add get_cycles implementation since <asm/timex.h> is not
    an exported header.
  - Resolves: #1100046


author: Michal Schmidt <mschmidt@redhat.com> - 2.2-0.1.rc1
changelog:
  - Update to 2.2rc1
  - Includes -psm2 variant for Intel OPA.
  - Still build the previous version for compatibility, as 2.0 subpackages.
  - Resolves: #948504
  - Resolves: #1093453
  - Resolves: #1173318


author: Henri Gomez <hgomez@users.sourceforge.net>
changelog:
  - Initial release mm.mysql 2.0.3
  - detect jdbc-2.0 extension jar (javax.sql) and if present
    also build MysqlDataSource and MysqlDataSourceFactory
  - build with IBM JDK 1.3.0 (cx130-20001114) and jikes 1.12
  - build CLASSPATH=/usr/share/java/jdbc2_0-stdext.jar


author: Henri Gomez <hgomez@users.sourceforge.net>
changelog:
  - mm.mysql 2.0.8
  - seriously patch build.xml to make it compile on Linux boxes
    with both JDK 1.2/1.3 and 1.1
  - added javadoc generation to build.xml
  - changed manual to javadoc package


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:3.1.1-1jpp
changelog:
  - 3.1.1, supports stored procedures and SAVEPOINTs among other things.
  - Tidy .spec file: nicer description and don't own %{_javadir}


author: Jason Corley <jason.corley@gmail.com> 1:3.1.12-1jpp
changelog:
  - 3.1.12
  - add some more docs from the tarball
  - correct url
  - remove vendor and distribution, should be defined in ~/.rpmmacros instead


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_1fc
changelog:
  - Natively compile
  - Add mysql-connector-java-noSunAppletSecurity.patch to take out references
  to sun classes
  - Change BuildRoot to what Extras expects


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_3fc
changelog:
  - Remove duplicate readme files.
  - Remove binary jars from distributed tarball, since they have no source
    attached to them, and are in violation of the LGPL.
  - Change jta BR to 1.0 from 1.0.1 since geronimo-specs-compat is 1.0.
  - Remove unneccessary 0 epoch from BRs.


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_4fc
changelog:
  - Fix indentation of preamble.
  - Fix version and epoch of jta Requires.
  - Fix Group from Development/Libraries to System Environment/Libraries.


author: Milos Jakubicek <xjakub@fi.muni.cz> - 1:5.1.8-1
changelog:
  - Update to 5.1.8 (resolves BZ#480154) with jboss integration disabled.
  - Added BR: java-1.6.0-openjdk-devel, java-1.5.0-gcj-devel, jakarta-commons-logging
  - Minor spec file updates: %global instead of %define, tabs instead of spaces
  - Dropped unnecessary patch-build.xml and mysql-connector-java-noSunAppletSecurity.patch


author: Tom Lane <tgl@redhat.com> 1:5.1.17-5
changelog:
  - Switch to noarch (non-GCJ) build
  Resolves: #688937, #819139
  - Fix mysql-connector-java-jdbc-4.1.patch to cover both driver classes
  Related: #816696


author: Tom Lane <tgl@redhat.com> 3.51.14r248-1
changelog:
  - Update to mysql-connector-odbc 3.51.14r248
  Resolves: #236473
  - Fix build problem on multilib machines


author: Tom Lane <tgl@redhat.com> 5.1.5r1144-1
changelog:
  - Update to mysql-connector-odbc 5.1.5r1144, to go with MySQL 5.1.x.
    Note the library name has changed from libmyodbc3 to libmyodbc5.


author: Tom Lane <tgl@redhat.com> 5.1.8-1
changelog:
  - Update to 5.1.8
  - Deal with mysql packaging changes that prevent us from using mysys
    utility functions directly


author: Tom Lane <tgl@redhat.com> 5.1.9-1
changelog:
  - Update to 5.1.9
  - Add --with-unixODBC-libs to configure command for safer multilib behavior
  Related: #757088


author: Honza Horak <hhorak@redhat.com> - 5.2.5-1
changelog:
  - Update to 5.2.5
  - Enlarge buffer size for query string when getting info about tables
    Related: #948619


author: Marcin Juszkiewicz <mjuszkiewicz redhat com> - 5.2.5-4
changelog:
  - Build failed because whether to use lib64 or not is done by checking
    list of known 64-bit architectures. So added AArch64 to that list.
    Resolves: #1041348


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.2-2
changelog:
  - added comment explaining how the source is obtained (as it is modified from upstream)
  - temporary fix for RHBZ#490830 while not fixed upstream


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.0.6-3
changelog:
  - Pass rnano.1 through iconv to silence the final rpmlint complaint
    and finish up the merge review.


author: Kamil Dudka <kdudka@redhat.com> - 2.0.9-1
changelog:
  - new upstream release
  - dropped patch no longer needed (possible change in behavior though negligible)
  - fixed broken HTML doc in FR locales (#523951)


author: Kamil Dudka <kdudka@redhat.com> - 2.0.9-4
changelog:
  - ship a system-wide configuration file along with the nano package
  - disable line wrapping by default (#528359)


author: Kamil Dudka <kdudka@redhat.com> - 2.2.6-1
changelog:
  - new upstream release (#655978)
  - increase code robustness (patches related to CVE-2010-1160, CVE-2010-1161)


author: Kamil Dudka <kdudka@redhat.com> - 2.3.0-1
changelog:
  - new upstream release (#680736)
  - use hunspell as default spell-checker (#681000)
  - fix for http://thread.gmane.org/gmane.editors.nano.devel/2911


author: Trond Eivind Glomsrød <teg@redhat.com> 0.98.32-1
changelog:
  - 0.98.32
  - Various doc files have changed names/been removed/added
  - New download location (after the license change, it's at sourceforge)
  - The new version is LGPL
  - Only build on x86 (#65255)


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Petr Machata <pmachata@redhat.com> - 0.98.39-5
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names
  - port bogus elf patch to new nasm version and turn it on again


author: Gregory Leblanc <gleblanc@grego1.cu-portland.edu>
changelog:
  - Added BuildRequires lines
  - Changed Source to point to ftp.gnome.org instead of just the tarball name
  - Moved %description sections closer to their %package sections
  - Moved %changelog to the end, where so that it's not in the way
  - Changed configure and make install options to allow moving of
    libraries, includes, binaries more easily
  - Removed hard-coded paths (don't define %prefix or %docdir)
  - replace %{prefix}/bin with %{_bindir}
  - replace %{prefix}/share with %{_datadir}
  - replace %{prefix}/lib with %{_libdir}
  - replace %{prefix}/include with %{_includedir}


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move to a CVS snapshot of nautilus for now
    (Darin is my hero for having distcheck work out of CVS)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.0.4, removes eazel services icon and wizard page
  - Eazel logo is still in startup wizard for now, needs fixing


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Change default background and rubberband color.
  - Use the sidebar tabs from the default theme
  - BuildDepend on fam-devel, depend on fam
  - Disable the eazel update pages in the first-time druid.
  - Remove the eazel logo from the first-time druid


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Make the fam dependency a real runtime dependency
  - by linking to libfam (nautilus-1.0.4-fam-lib.patch)
  - Cleaned up specfile.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update to my latest 'cvs diff -u' (adds default 
    Start Here link, displays .directory name in sidebar)
  - include /etc/X11/* links (starthere, sysconfig, serverconfig)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move first time druid patch into my "CVS outstanding" patch
  - try to really remove Help/Feedback
  - try to really fix Help/Community Support
  - try again to get Start Here in the Go menu
  - try again to get Start Here on the desktop
  - don't show file sizes for .desktop files


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add BuildRequires (#49539, 49537)
  - Fix %post, %postun (#49720)
  - Background efficiency improvements and hacks


author: Havoc Pennington <hp@redhat.com>
changelog:
  - sync new tarball from our CVS branch, 
    fixes some drag-and-drop, changes URI scheme names,
    etc.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Fix crash-on-startup showstopper
  - Fix can't-find-images bug (this one was only showing up
    when built with debug symbols, since it was an uninitialized memory
    read)


author: Alexander Larsson <alexl@redhat.com> 1.0.4-21
changelog:
  - Remove the "don't run as root" warning.
  - Remove eazel from bookmarks
  - langified (again? did someone change it?)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Sync our CVS version; fixes some MUSTFIX
    (the one about drawing background on startup, 
     properly translate desktop files, etc.)


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Changed starthere .desktop files to be links instead
  - of spawning a new nautilus. This makes start-here:
  - much faster.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with missing desktop starthere.desktop file
  - New snapshot from our branch, fixes:
    - On upgrade, icons migrated from GNOME desktop are not properly lined up
      (#51436)
    - icons dropped on the desktop don't end up where dropped. (#51441)
    - Nautilus shouldn't have fam monitor read-only windows. This
      keeps CDROMS from being unmounted until you close all

      nautilus windows pointing to them. (#51442)
    - Warnings about 'cannot statfs...' when moving items to trash.
  - Use separate start-here.desktop for panel, since the one used
    for the root window only works from Nautilus.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make start here icon work again
  - kill some warning spew, #51661
  - cache getpwnam() results to speed things up a bit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make Programs icon into a link, to match the other .desktop files
  - own various directories #51164
  - web page titles in Japanese, #51709
  - tree defaults to only directories #51850


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix bug causing 32000 stats or so in large directories, 
    should speed things up somewhat
  - fix #52104 via gruesome kdesktop-detection hack and setting
    window type hint on our desktop window
  - fix so Start Here icon displays in sidebar
  - don't load non-local .desktop files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - I screwed up the build yesterday, so it didn't actually contain the
    fixes mentioned. This build should contain them.


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - require Mozilla 0.9.7
  - Add patch that puts mozilla profile startup before embedding is initialized


author: Havoc Pennington <hp@redhat.com>
changelog:
  - drop Milan-specific features, including png10 and ac25 patches
  - copy in 1.0.5 help component to avoid large risky patch
  - remove .la files
  - drop mozilla from ia64 again
  - remove oaf file from nautilus-mozilla that was also in the base 
    package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Relibtoolize to fix relink problems for solib components
  - Add LANG=en_US to %makeinstall as well
  - Back out previous change, force locale to en_US to prevent UTF-8 problems
  - Add workaround for intltool-merge bug on ia64


author: Havoc Pennington <hp@redhat.com>
changelog:
  - ignore the "add_to_session" preference as it only broke stuff
  - pad the left margin a bit to cope with poor word wrapping


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a simple patch so that redhat-config-packages can disable 
    the new window behavior for mounted CDs behavior.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require newer redhat-artwork, -menus, eel2, gnome-vfs2 to avoid
    bogus bug reports
  - add hack for HTML mime type handling in a web browser, not 
    nautilus


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put button press mask in triple-click patch, maybe it will work
  - remove html-hack patch as it does nothing useful


author: Alexander Larsson <alexl@redhat.com> 2.1.5-2
changelog:
  - Add cdburn patch.
  - Remove nautilus-1.1.19-starthere-hang-hackaround.patch
  - Require nautilus-cd-burner


author: Havoc Pennington <hp@redhat.com>
changelog:
  - perl-munge the icon names in a couple desktop files
    to find redhat-network-server.png and redhat-file-manager.png.
    Upstream icon names here were weird and seem broken.


author: Alexander Larsson <alexl@redhat.com> 2.2.0.2-1
changelog:
  - Update to 2.2.0.2, fixes bg crasher
  - parallelize build
  - Added patch from cvs that fixes password hang w/ smb


author: Alexander Larsson <alexl@redhat.com> 2.2.1-2
changelog:
  - Add a patch to fix the forkbomb-under-kde bug (#81520)
  - Add a patch to fix thumbnail memory leak
  - require libXft.so.2 instead of Xft, since that changed in the XFree86 package


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Update to the latest bugfixes from cvs.
  - Fixes #84291 for nautilus, context menu duplication and some other small bugs.


author: Alexander Larsson <alexl@redhat.com> 2.3.9-1
changelog:
  - update
  - Add patch to ignore kde desktop links
  - Re-enable kdesktop detection hack.
    kde doesn't seem to support the manager selection yet


author: Mike A. Harrisn <mharris@redhat.com> 2.5.91-2
changelog:
  - Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
  - Fixed BuildRoot to use _tmppath instead of /var/tmp


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-2
changelog:
  - Fix open with menu on mime mismatch
  - Create desktop links ending with .desktop (#125104)
  - Remove old cruft from specfile


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-3
changelog:
  - Slightly less bad error dialog when there is no handler for a file.
    Not ideal, but this change doesn't change any strings.


author: David Zeuthen <davidz@redhat.com> 2.10.0-3
changelog:
  - Include patches for desktop background memory saving (GNOME bug #169347)
  - Obsoletes: nautilus-media (#153223)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-6
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Alexander Larsson <alexl@redhat.com> - 2.16.2-7
changelog:
  - Look for beagle before tracker, because tracker autostarts
    This lets us support having both installed at the same time.
  - Remove buildreqs for beagle, as they are not necessary with
    the dynamic work.


author: - Bastien Nocera <bnocera@redhat.com> - 2.20.0-6
changelog:
  - Fix audio preview command-line to use decodebin so playbin doesn't
    pop up a window for videos detected as audio


author: Tomas Bzatek <tbzatek@redhat.com> - 2.21.92-2
changelog:
  - Change libbeagle .so name for libbeagle-0.3.0 in nautilus-2.21.1-dynamic-search-r2.patch (#434722)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.22.0-2
changelog:
  - Don't create application/x-ext-<extension> types for known mimetypes (patch from head)
  - Fix a crash in the Properties dialog while changing owner (patch from head)


author: David Zeuthen <davidz@redhat.com> - 2.22.2-3
changelog:
  - Revert Fedora livecd mount (fix is in latest gvfs packages) and
    add a patch to avoid trying to autorun mounts that are mounted
    from outside Nautilus (#442189)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.1-3
changelog:
  - Mask file moving to nautilus-cd-burner window as copy operation (#443944)
  - Don't allow recursive move/copy into itself (gnomebz #530720)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.2-3
changelog:
  - Add DnD support to drop files onto archive files with help 
    of file-roller (gnomebz #377157)
  - Add fix preventing crash on bad GFileInfos (gnomebz #519743)


author: Alexander Larsson <alexl@redhat.com> - 2.24.1-2
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.25.1-4
changelog:
  - Properly open new windows after long mount operation
  - Fix callback connection to the GtkMountOperation dialog


author: Matthias Clasen <mclasen@redhat.com> - 2.25.2-1
changelog:
  - Update to 2.25.2
  - Clean up Requires
  - Obsolete eel2
  - Drop hard dependency on gvfs backends. 
    These are pulled in by comps, anyway


author: Colin Walters <walters@verbum.org> - 2.91.93-2
changelog:
  - Drop --vendor from nautilus.desktop
    Vendor prefixes are pointless, and in this case breaks upstream
    components trying to reference each other via .desktop file, such
    as GNOME Shell having nautilus.desktop in its default favorite
    list.


author: Ray Strode <rstrode@redhat.com> 3.14.3-2
changelog:
  - Add backward compatible nautilus.desktop for user defined mime associations
    Related: #1174562 1235413


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-8
changelog:
  - Backport fix for jp2 images crashing nautilus
  - Apply downstream translations
    Resolves: #1271297 #1272881


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-9
changelog:
  - Apply downstream translations
  - Restrict icons on desktop to the primary monitor
    Resolves: #1207646 #1046876 #1272881


author: Paul W. Frields <stickster@gmail.com> - 0.4-3
changelog:
  - Rearrange Requires and BuildRequires for subpackages
  - Include default Evolution plugin in main package


author: Alexander Larsson <alexl@redhat.com> - 0.4-5
changelog:
  - Build in Core
  - Move gaim plugin into main package
  - Fix up some build requirements
  - No bluetooth on s390*


author: Matthew Barnes <mbarnes@redhat.com> - 0.8-2
changelog:
  - Update BuildRequires for evolution-data-server-devel.
  - Rebuild against evolution-data-server-1.9.1.


author: Bastien Nocera <bnocera@redhat.com> 1.1.5-2
changelog:
  - Disable the evolution plugin, it will be in Evo itself in 2.27.x
    See http://bugzilla.gnome.org/show_bug.cgi?id=579099


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - change category to Applications/File, to match
    gzip and bzip2 
  - rename the spec file to ncompress.spec
  - add ppc to the bigendian arch list


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - Make it support large files (structs, stats, opens and of course:
    _don't use signed longs for file size before and after compression_.)
    This should fix #39470


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - new patch to get xterm-color and nxterm terminfo entries
  - aliased them to rxvt, as that seems to satisfy everybody


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added terminfo entry for the poor guys using lat1 and/or lat-2 on their
    consoles... Enjoy linux-lat ! Thanks, Erik !


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - don't build the C++ demo code
  - update patch set to the current as of today (redid all the individual
    patches in a single one)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.0
  - some spec cleanups to make updating easier
  - add links *.so.5 to *.so.4 - they are fully binary compatible.
    (Why did they change the invocation number???)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix a typo in spec
  - Add the 19991006 patch, fixing some C++ STL compatibility problems.
  - get rid of profiling and debugging versions - we need to save space...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - revert to the old major number - because the ABI is not changed (and we
    should be handling the changes via symbol versioning anyway)


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Add xterm patch from Hans de Goede <hans@highrise.nl>
  - Patch 20000108, this fixes a problem with a header file.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.2
  - Fix typo in man page (Bug #20205)
  - update the "screen" terminfo entries to the version supplied with
    screen 3.9.8


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17
changelog:
  - Patchlevel 20020209
  - Fix zero-substitution of cf_cv_type_of_bool (#59450)
  - Fix rebuilding of configure script with autoconf 2.5x


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26
changelog:
  - Remove duplicated files (#62752)
  - Don't strip libraries (#60398)
  - Remove cbt capability from xterm description (#61077)


author: Adrian Havill <havill@redhat.com> 5.3-1
changelog:
  - upgrade to 5.3 for sake of utf-8, wide chars (#77585 ...)
  - spec file summary/desc grammar (#73583)
  - add Requires: for c++ devel subpkg (#74002)
  - terminfo.src patches no longer needed
  - adjust autoconf patch


author: Adrian Havill <havill@redhat.com> 5.3-3
changelog:
  - remunged xterm changes from 5.2 patch for 5.3
  - updated screen entry (#82951)
  - fixed ka3, kb2 and kf0 entries (#77506)


author: Adrian Havill <havill@redhat.com> 5.3-5
changelog:
  - added latest rollup patch with widec/UTF8 centric weekly (20030517)
  - added --enable-widec to configure (#86311)
    original work done by Mr. Sam <sam@email-scan.com>
  - require sharutils (#86605)
  - add gpm, xmc support
  - add debug syms back into package
  - updated autoconf/configure patch


author: Adrian Havill <havill@redhat.com> 5.3-7
changelog:
  - fixed the safe sprintf code that was enabled in the previous release
    by the configure parameter. (#101486)


author: Adrian Havill <havill@redhat.com> 5.3-9
changelog:
  - remove not-so safe-sprintf configure option because the code does
    not appear to be stable enough for some apps. (#103790)


author: Adrian Havill <havill@redhat.com> 5.4-3
changelog:
  - link "xterm" to "xterm-color" as temp fix for escape problem (#115448)
  - remove old zcat for PATCH1


author: Adrian Havill <havill@redhat.com> 5.4-5
changelog:
  - remove --with-gpm from configure, as it adds a pkg
    dependency (#122336) and causes too many problems vs its benefits


author: Adrian Havill <havill@redhat.com> 5.4-9
changelog:
  - remove terminfo try-to-please-all xterm hackery; it's now ptty
    and profile's job to point to the correct terminal. (#122815)


author: Adrian Havill <havill@redhat.com> 5.4-11
changelog:
  - add latest rollup patches and weekly patches
  - remove home/end patch, which is now included in latest
    terminfo.src and termcap.src
  - add term.sh to /etc/profile.d, reference in /etc/bashrc
  - modify term.sh to support rxvt (#122815 comment 93)


author: Petr Rockai <prockai@redhat.com> - 5.4-17
changelog:
  - apply patch from Hans de Goede, fixing BR142659 [The
    terminfo data for kbs changed from \177 to ^H]


author: 5.4-19 <praszyk@redhat.com> 5.4-19
changelog:
  - Clear window after: filter()+initscr()+endwin()+refresh()
    See bug #2966, patch ncurses-5.4-filter.patch


author: Petr Raszyk <praszyk@redhat.com> 5.4-21
changelog:
  - Clear window after: filter()+'terminal-resizing'+endwin()
    doupdate()+endwin()
    See bug #174498, patch ncurses-5.4-endwinfilter.patch


author: Petr Raszyk <praszyk@redhat.com> 5.5-11
changelog:
  - According Henrik Nordstrom (hno@squid-cache.org)
    Diff between the two versions of curses.h on x86_64
    Patch ncurses-5.5-chtypeaslong2.patch
    See #178824


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-25.20060715
changelog:
  - move libncurses and some terminfo entries out of /usr
  - drop console symlink and sparc terminfo entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-27.20061209
changelog:
  - update to patch 20061209
  - strip large tables from shared libraries, reduce number of relocations
  - package utils linked with libncurses instead of libncursesw
  - package only wide-character headers


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-2.20070120
changelog:
  - update to patch 20070120
  - don't depend on bash, drop resetall script
  - include rxvt-unicode description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-4.20070210
changelog:
  - update to patch 20070210
  - generate separate terminfo library
  - move static libraries to -static subpackage
  - avoid unnecessary linking with libdl


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-6.20070303
changelog:
  - update to patch 20070303
  - use one libtinfo for both libncurses and libncursesw
  - shorten -devel description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-10.20070812
changelog:
  - fix comp_hash string output
  - avoid comparing padding in cchar_t structure
  - remove gawk from buildrequires


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-13.20080112
changelog:
  - update to patch 20080112
  - make -libs, -base, -term subpackages
  - obsolete termcap and libtermcap
  - update urxvt entry


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.7-5.20100116
changelog:
  - fix narrow/wide libtinfo compatibility
  - fix wattrset macro to not produce warning with current gcc (#556645)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Jeff Johnson <jbj@redhat.com> 0.23.9-2
changelog:
  - force expat, include neon-config, for subversion build.
  - do "make check" (but ignore failure for now)


author: Joe Orton <jorton@redhat.com> 0.24.4-3
changelog:
  - use BuildRequires not BuildPrereq, drop autoconf, libtool;
    -devel requires {openssl,zlib}-devel (#116744)


author: Joe Orton <jorton@redhat.com> 0.25.5-6
changelog:
  - remove trailing dot in -devel Summary
  - use standard BuildRoot
  - change Group to System Environment/Libraries
  - drop Prefix


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 4.8.90-2
  - move libkdeinit_* to base pkg (no need for multilib) 
  - .spec cleanup
  - add shared-desktop-ontologies, soprano runtime deps


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 4.9.0-3.20120810git
  - sync 4.9-branch patches
  - %check: do autotests
  - Requires: +soprano-backend-virtuoso +virtuoso-opensource


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-5
changelog:
  - Fixed snmpd in FIPS mode (#874440)
  - Removed APSL licensed code (#830796)
  - Synchronized with RHEL-6.4


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - Removed unused patch
  - Added net-snmp-agent-libs dependency where appropriate
  - Added full relro
  - Make net-snmp-create-v3-user multilib safe


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-8
changelog:
  - Removed APSL patch (#830796)
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)
  - Python: fixed IPADDRESS size on 64-bit systems (#895357)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-9
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#978384)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#978398)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919240)
  - fixed kernel threads in hrSWRunTable (#979329)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#969061)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks if
    'includeAllDisks' is specified in snmpd.conf (#982644)
  - fixed crash in extTable on empty command line (#955609)
  - lowered severity of few debugging messages in dot3statsTable (#915302)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-11
changelog:
  - fixed parsing of integer variable sizes (#953926, #983116)
  - added support of simfs and vzfs to hrStorageTable (#861152, #989498)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-14
changelog:
  - move tmpfiles.d config file to /usr/lib (#881218)
  - fixed dashes in net-snmp-config.h (#1038642)
  - fixed snmpd crashing on monitor trigger evaluation (#1050971)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-17
changelog:
  - fixed various error codes in Python module (#1064338)
  - fixed net-snmp-config.h header file (#1064437)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-19
changelog:
  - Fixed not-increasing OIDs in IP-FORWARD-MIB::ipCidrRouteTable (#1172013)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070076)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086606)
  - Added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#1086925)
  - fixed proxying of out-of-tree GETNEXT requests (#1087801)
  - use python/README to net-snmp-python subpackage (#1158391)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-27
changelog:
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
  - snmpd: Speed up ipAddressTable loading. (#1327240)
  - Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
  - Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.50.
  - added slattach/plipconfig/ipmaddr/iptunnel commands.
  - enabled translated man pages.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.57.
  - MTU (and other) option(s) not parsed correctly (#9215).
  - allow more granularity iwth --numeric (#9129).


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix nstrcmp() to be correct in the case where there are many devices 
    of the same type, eg, "eth10" > "eth1"  (#61436)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed incorrect address display for ipx (#46434).
  - Fixed wrongly installed manpage dirs (#50664).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added inet6-lookup patch from John van Krieken (#84108).
  - Fixed outdated link in ifconfig manpage (#91287).


author: Phil Knirsch <pknirsch@redhat.com> 1.60-19
changelog:
  - Fixed trailing blank bug in hostname output (#101263).
  - Remove -O2 fir alpha (#78955).
  - Updated netstat statistic output, was still broken.


author: Phil Knirsch <pknirsch@redhat.com> 1.60-27
changelog:
  - Fixed compiler warning/error in netplug.
  - Updated to netplug-1.2.6 for security update and fixes.


author: Radek Vokal <rvokal@redhat.com> 1.60-38
changelog:
  - fixed fail to assign the specified netmask before adress is assigned
  - patch by Malita, Florin <florin.malita@glenayre.com>


author: Radek Vokal <rvokal@redhat.com> 1.60-39
changelog:
  - IBM patch for netstat -s returning negative values on 64bit arch (#144064)
  - broadcast calulated if only netmask provided (#60509)


author: Radek Vokal <rvokal@redhat.com> 1.60-40
changelog:
  - mii-tool(8) fixed, labeled as obsolete, added info (#138687)
  - netstat crashing on i64 fixed (#138804) Patch by <Andreas.Hirstius@cern.ch>


author: Radek Vokal <rvokal@redhat.com> 1.60-43
changelog:
  - don't report statistics for virtual devices (#143981) <kzak@redhat.com>
  - fixing translation headers - content type format
  - kill bitkeeper warning messages


author: Radek Vokal <rvokal@redhat.com> 1.60-44
changelog:
  - net-plug-1.2.9 - no changes, upstream included Red Hat patches
  - ether-wake-1.08 - few changes in implementation (#145718)


author: Radek Vokal <rvokal@redhat.com> 1.60-48
changelog:
  - behaviour of netstat -i option changed (#115987)
  - netstat -i shows all interface, -I<Iface> only one


author: Radek Vokal <rvokal@redhat.com> 1.60-50
changelog:
  - added mii-diag tool
  - added newer ether-wake
  - remove useless -i option from ifconfig
  - stop trimming interface names (#152457)


author: Radek Vokal <rvokal@redhat.com> 1.60-52
changelog:
  - don't show "duplicate line" warning (#143933)
  - netstat has new statistcs (#133032)
  - /etc/neplug is owned by net-tools (#130621)


author: Radek Vokal <rvokal@redhat.com> 1.60-57
changelog:
  - add note to hostname man page about gethostbyname() (#166581)
  - don't ship any rarp man page (#170537)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.60-89
changelog:
  - fixed man pages for arp (#446195)
  - fixed netstat --interfaces option (#446187)
  - fixed clearing flags in ifconfig (#450252)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-93
changelog:
  - scanf format length fix (non exploitable?) from Fabian Hugelshofer <hugelshofer2006@gmx.ch>
  - URL tag changed to http://net-tools.berlios.de/


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-95
changelog:
  - netstat - avoid name resolution for listening or established sockets (-l) by return fast. 
  - netstat - --continuous should flush stdout
  - added missing man pages (iptunnel, ipmaddr, netplug, netplug.d, netplugd.conf)
  - added note about obsolete commands to existing man pages 
  - let the user know that ifconfig can correctly show only first 8 bytes of Infiniband hw address


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-96
changelog:
  - netplug moved to separate package
  - #319981 and #322901 - minor man pages changes
  - applied changes from berlios cvs, which fix: Berlios #16232, Gentoo #283759 and polish Makefile and slattach


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-97
changelog:
  - Make "hostname -s" display host name cut at the first dot (no
    matter if the host name resolves or not) (bug #531702)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-99
changelog:
  - return defining of BuildRoot even it's no longer necessary
    (https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRoot_tag)
    to silent rpmlint false warning


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-101
changelog:
  - fixed overflow patch (#551625)
  - ifconfig interface:0 del <IP> will remove the Aliased IP on IA64 (#473211)
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts -- no functional changes since these only have an 8bit range anyways
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255) (Debian #433543)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #579854, Debian #561161)
  - fixed typo in statistics.c (Bug #579855)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-116
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since Fedora 15 network devices can have arbitrary names (#682367)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-118
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-120
changelog:
  - Do not mention /proc/net/socket in ifconfig(8) (#661905)
  - Merge all 'man page only fix' patches into net-tools-1.60-man.patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-121
changelog:
  - Added arp-ethers.service systemd unit file to run 'arp -f /etc/ethers'
    on startup of system. Don't ship default /etc/ethers (#713759)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-129.20111206git
changelog:
  - upstream git snapshot
  - reduced number of patches from 95 to 32
  - netstat -T/--notrim option is now -W/--wide


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-131.20120105git
changelog:
  - next 11 patches merged upstream
  - removed bcast.patch (seems to be fixed upstream)
  - removed netstat-p-basename.patch (upstream is not happy with it)
  - netstat-leak.patch merged into duplicate-tcp.patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-132.20120111git
changelog:
  - 3 patches merged upstream
  - removed 2digit.patch (#718610)
  - removed fgets.patch (probably not needed anymore)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-133.20120119git
changelog:
  - SELinux patch merged upstream
  - several page fixes merged upstream
  - mark localized man pages with %lang


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-134.20120127git
changelog:
  - Do not show interface metric in 'ifconfig', 'ifconfig -s' and 'netstat -i'.
    Spare place is used for interface name so trim_iface.patch is no longer needed.
  - No need to convert man pages to utf-8 as upstream ship them in utf-8 now.


author: Jaromír Končický <jkoncick@redhat.com> - 2.0-0.10.20130607git
changelog:
  - use all interfaces instead of default (#1003875)
  - reverted all changes on ether-wake.c and put original file


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.13.20131004git
changelog:
  - latest snapshot (#1013530)
  - remove %ifarch alpha condition from %prep
  - improve sctp-statistics.patch (#982638#c10)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Laine Stump <laine@redhat.com> - 0.1.6-1
changelog:
  - New version
  - Remove patch n0001-src-dutil.c-add-missing-includes-for-stat.patch,
    included upstream


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - Rebase to netcf-0.1.8
  - new transactional change APIs: ncf_change_(begin|commit|rollback)
  - add stdout/stderr to error text when an external program fails
  - make error reporting of failed execs more exact/correct
  - Remove unnecessary "Requires" of libxml2 and augeas from pkgconfig file
    to pulling in extra packages when building an application that uses netcf.


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - Rebase to netcf-0.1.9
  - always add <bridge> element to bridge, even if there is no physdev present
  - don't log error if interface isn't found in kernel during status report
  - allow building with C++
  - update gnulib


author: Laine Stump <laine@redhat.com> - 0.2.1-1
changelog:
  - Rebase to netcf-0.2.1
  - update gnulib to fix broken build on systems with nwer glibc (which no
    longer provides gets()).
  - add ncftool manpage
  - interfaces are only "active" if both UP and RUNNING.
  - add "bundled(gnulib)" to specfile to indicate that we use a local
    copy of gnulib sources (used by Fedora/RHEL when determining the scope
    of security bugs).
  - Fix ipcalc_netmask, which was trimming off the last digit in
    character representations of full-length netmasks (all 4 octets
    having 3 chars each)
  - other minor bugfixes


author: Laine Stump <laine@redhat.com> - 0.2.2-1
changelog:
  - Rebase to netcf-0.2.2
  - specfile: require libnl3-devel for rpm builds on Fedora 18+ and
    RHEL7+. Likewise, force libnl1 for F17- and RHEL6.x-, even if
    libnl3-devel is installed.


author: Laine Stump <laine@redhat.com> - 0.2.3-1
changelog:
  - Rebase to netcf-0.2.3
  - eliminate calls to nl_cache_mngt_provide(), to avoid
    non-threadsafe code in libnl (and because it isn't needed
    anyway) (This non-threadsafe code could lead to a segfault)
  - portability fixes for FreeBSD
  - fix bug when a config file has two config parameters with
    identical names
  - add HACKING document
  - always bail immediately if get_augeas fails (doing otherwise
    could lead to a segfault)


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
  - resolves rhbz#961184
  - wait for IFF_UP and IFF_RUNNING after calling ifup
  - resolves rhbz#1020204
  - remove extraneous quotes from BONDING_OPTS
  - resolves rhbz#1044681
  - eliminate use of uninitialized data when getting mac
  - resolves rhbz#1046594
  - support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: Paul Moore <paul.moore@hp.com> 0.14-1
changelog:
  - Bumped version number.
  - Changes related to including the version number in the path name.
  - Changed the netlabelctl perms from 0750 to 0755.
  - Removed the patch. (included in the base with edits)
  - Updated the description.


author: Steve Conklin <sconklin@redhat.com> - 0.17-6
changelog:
  - Various fixes to follow upstream
  - Resolves bz#431765 The example configuration file is invalid
  - Resolves bz#431766 The netlabelctl command fails to run due to newer libnl package
  - Resolves bz#431767 The url listed in the netlabel_tools package is wrong


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-7
changelog:
  - make initscript LSB compliant (#522818)
  - show version of netlabelctl and libnetlabel in help (#602577)


author: Paul Moore <pmoore@redhat.com> - 0.20-0
changelog:
  - Version bump to match latest upstream
  - Cleanups in the specfile due to changes in the upstream package


author: Paul Moore <pmoore@redhat.com> - 0.20-3
changelog:
  - Fix a problem when adding a CIPSO DOI with a large number of translations
  - Remove old patches
    Resolves: #1053687


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.35-8
changelog:
  - remove bogus man pages (#220112, #220113)
  - overflow2() no more conflicts with libgd.so (#216116)
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 10.35.32-1
changelog:
  - remove .svn directories from tarball to reduce its size
  - update fixes rhbz#337181 and likely others


author: Jindrich Novy <jnovy@redhat.com> 10.35.48-1
changelog:
  - update to 10.35.48
  - fixes buffer overrun in pamperspective and pngtopnm output format
  - update .security2 patch so that it applies with fuzz==0


author: Jindrich Novy <jnovy@rehdat.com> 10.35.49-1
changelog:
  - update to 10.35.49
  - fixes crash in pamcut when cutting a region entirely to the
    left or right of the input image, with -pad


author: Jindrich Novy <jnovy@redhat.com> 10.35.51-1
changelog:
  - update to netpbm-10.35.51
  - make it actually compilable by removing duplicated function
    in pamcomp.c


author: Jindrich Novy <jnovy@rehdat.com> 10.35.54-1
changelog:
  - update to 10.35.54
  - adds better randomization for ppmforge, pgmnoise, pgmcrater
  - fixes array bounds violation in pnm_createBlackTuple() with PBM, PGM
  - fixes crash in pnmtoddif with any PGM input


author: Jindrich Novy <jnovy@redhat.com> 10.35.57-3
changelog:
  - unbreak ppmshadow and ppmrainbow (#476989)
  - pnmmontage won't crash because of uninitialized memory usage


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-1
changelog:
  - update to 10.35.38
  - fixes crashes in picttoppm, pbmtomrf, mrftopbm
  - fixes bugs in leaftoppm, ilbmtoppm


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-3
changelog:
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-4
changelog:
  - fix segfault in ximtoppm (#482891), the utility lacked the
    command line parsing initialization code


author: Jindrich Novy <jnovy@redhat.com> 10.35.59-1
changelog:
  - update to 10.35.59
  - fixes array bound violation in ilbmtoppm
  - fixes garbage output when input in fitstopnm is little endian
    floating point FITS


author: Jindrich Novy <jnovy@redhat.com> 10.35.60-1
changelog:
  - update to 10.35.60
  - update .security patch, minor cleanup
  - fixes xwdtopnm for at least some direct color 24/32 images
  - fixes memory leak and out of memory crash in libpammap


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-1
changelog:
  - update to 10.35.61
  - upstream fixes array bound violation in pbmtog3
  - drop .pbmtog3segfault patch, we fixed this some time ago already
    and it is in upstream now
  - use saner exit status in ppmfade


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-2
changelog:
  - remove two hunks from security patch breaking pbmclean and pbmlife (#493015)
  - fix ppmdfont and svgtopnm, thanks to Jiri Moskovcak


author: Jindrich Novy <jnovy@redhat.com> 10.35.62-1
changelog:
  - update to 10.35.62
  - upstream fixes pamstereogram
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise
    so that they match their man pages (#483011, #483070, #483243, #483245)
  - avoid clashes with getline() from glibc


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.47.06-1
changelog:
  - update to 10.47.06 - fixes the dumb pamtosvg mistake in 10.47.05
  - pnmmargin won't create leftovers in /tmp (#547888)


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-1
changelog:
  - update to 10.47.09, fixes occassional crash in pamtosvg
  - fix documentation
  - fix ppmfade exit status


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-3
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - link against -lz (#564649)


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-2
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-3
changelog:
  - package docs in separate netpbm-doc package (#492437)
  - don't package patch backups in documentation
  - netpbm-progs package requires ghostscript


author: Jindrich Novy <jnovy@redhat.com> 10.47.12-3
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)
  - fix documentation for pamperspective and pbmtoepson


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-1
changelog:
  - Initial netsniff-ng spec file for RHEL, import of 0.5.8-rc1. Note that
    RHEL packaging differs significantly from Fedora as we only do a partial
    build and have a small fraction of dependencies that are available on
    RHEL.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-4
changelog:
  - GeoIP was added to RHEL7, so we can make use of that to enable
    astraceroute and features in netsniff-ng.
  - For this we also need zlib in order to make the updater work.


author: Eric Garver - 0.5.8-7
changelog:
  - netsniff-ng: add packet fanout support
  - doc: authors: add Michal as contributor
  - man: netsniff-ng: document fanout options
  - netsniff-ng: add example for fanout into man page


author: Ian Weller <ianweller@gmail.com> 1.15-2
changelog:
  - Removed redundant requires
  - Removed redundant documentation between packages
  - Fixed license tag
  - Fixed -devel description
  - Added the static library back to -devel
  - Added make clean


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = %{version} instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.4-1
changelog:
  - fix entry corruption when reading multibyte characters
    and double width character handling
  - avoid overflow/crash in scale
  - patches from debian
    - fix crash of snack in EntryWindow when prompts is list of tuples
    - put cursor at beginning of text for better accessibility
      in button, scale and textbox
    - add topleft option to whiptail


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.5-1
changelog:
  - provide option to change text of buttons (#126768)
  - don't add escape key to hot keys by default (#216157)
  - fix cursor position in checkboxtree, radio button and checkbox
  - don't force monochrome terminals to output colors
  - highlight active compact button on monochrome terminals
  - update translations from debian


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-1
changelog:
  - add newtSetColor() to allow changing individual colors
  - add newtPopWindowNoRefresh() (patch by Forest Bond)
  - move static library to -static subpackage, spec cleanup (#226195)
    (patch by Jason Tibbitts)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-3
changelog:
  - fix cursor positioning when setting entry or checkbox flags
  - fix counting of items in checkboxtree
  - fix some memory leaks


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-1
changelog:
  - add support to snack for multiple selection and border in listbox
    and cursorAtEnd in entry (patch by Shawn Starr)
  - fix scrollbar positioning in listbox
  - cope with backward system time jumps (#240691)
  - free helplines and windows in newtFinished, check for overflow (#239992)
  - add release to -devel and -static requires (#238784)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-2
changelog:
  - add back support for list of Entries in EntryWindow prompts in snack
    (#248878)
  - update license tag
  - split python module to -python subpackage (patch by Yanko Kaneti)
  - fix summary


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Hans de Goede <hdegoede@redhat.com> - 0.52.11-2
changelog:
  - Change python_sitearch macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.12-1
changelog:
  - fix whiptail --gauge and its description in man page (#620083)
  - remove space after \n in whiptail texts (#620083)
  - remove NLS code from snack (#599608)
  - expose more keys to python as shortcuts in dialogs (Jakob Kemi)
  - release python global-thread-lock during dialog displays (Jakob Kemi)
  - fix warnings in whiptcl.c and include Tcl_PkgProvide() call (Mikhail T.)
  - don't NULL deref when an invalid array is specified in checkboxtree
    (Arnaldo Carvalho de Melo)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: Steve Dickson <steved@redhat.com> 1.0.10-2
changelog:
  - Fixed -o remount (bz 210346)
  - fix memory leak in rpc.idmapd (bz 212547)
  - fix use after free bug in dirscancb (bz 212547)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.10-4
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 212471)


author: Steve Dickson <steved@redhat.com> 1.0.12-2
changelog:
  - Added condstop to all the initscripts (bz 196934)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.12-5
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Updated mountd and showmount reverse lookup flags (bz 220772)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887) 
  - Added missing unlock_mtab() call in moutnd
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)


author: Steve Dickson <steved@redhat.com> 1.0.10-6
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240225)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Disabled the FSCache patch, for now...


author: Steve Dickson <steved@redhat.com> 1.1.0-4
changelog:
  - Make sure the open() system calling in exportfs uses
    mode bits when creating the etab file (bz 252440).


author: Steve Dickson <steved@redhat.com> 1.1.0-5
changelog:
  - Changed the default paths in sm-notify to 
    /var/lib/nfs/statd (bz 258461)
  - Updated exportfs manpage (bz 262861)


author: Steve Dickson <steved@redhat.com> 1.1.1-1
changelog:
  - Updated to latest upstream release, nfs-utils-1.1.1
  - Added the removal of sm-notify.pid to nfslock init script.
  - Changed spec file to use condrestart instead of condstop
    when calling init scripts.
  - Fixed typo in rpc.mountd man page 
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Added -S/--since to the nfsstat(1) manpage
  - The wording in the exportfs man page can be a bit confusing, implying
    that "exportfs -u :/foo" will unexport /foo from all hosts, which it won't
  - Removed nfsprog option since the kernel no longer supports it.
  - Removed mountprog option since the kernel no longer supports it.
  - Stop segfaults on amd64 during warnings messages.
  - Fix bug when both crossmnt and fsid are set.


author: Steve Dickson <steved@redhat.com> 1.1.1-3
changelog:
  - Added in relatime mount option so mount.nfs stays
    compatible with the mount command in util-linux-ng (bz 274301)


author: Steve Dickson <steved@redhat.com> 1.1.1-5
changelog:
  - Stopped mountd from incorrectly logging an error
    (commit 9dd9b68c4c44f0d9102eb85ee2fa36a8b7f638e3)
  - Stop gssd from ignoring the machine credential caches
    (commit 46d439b17f22216ce8f9257a982c6ade5d1c5931)
  - Fixed typo in the nfsstat command line arugments.
    (commit acf95d32a44fd8357c24e8a04ec53fc6900bfc58)
  - Added test to stop buffer overflow in idmapd
    (commit bcd0fcaf0966c546da5043be700587f73174ae25)


author: Steve Dickson <steved@redhat.com> 1.1.2-3
changelog:
  - Documented how to turn off/on protocol support for
    rpc.nfsd in /etc/sysconfig/nfs (bz443625)
  - Corrected the nfslock initscript 'status' return code (bz 441605)
  - Removed obsolete code from the nfslock initscript (bz 441604)


author: Steve Dickson <steved@redhat.com> 1.1.2-7
changelog:
  - Added -D_FILE_OFFSET_BITS=64 to CFLAGS
  - make nfsstat read and print stats as unsigned integers
  - Added (but not installed) the mountstats and nfs-iostat
    python scripts.


author: Steve Dickson <steved@redhat.com> 1.1.2-12
changelog:
  - Changed the default directories for sm-notify (bz 435480)
  - Added 'condstop' to init scripts so service are not
    started when nfs-utils is removed.


author: Steve Dickson <steved@redhat.com> 1.1.3-5
changelog:
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 462508)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - gssd: unblock DNOTIFY_SIGNAL in case it was blocked
  - Ensure statd gets started if required when non-root
    user mounts an NFS filesystem


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-15
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
    - Stop ignoring the -o v4 option (bz 529407)
    - Allow network protocol roll backs when proto is set
      in the config file (bz 529864)
  - v4 mounts will roll back to v3 mounts when the mount
    fails with ENOENT.


author: Steve Dickson <steved@redhat.com> 1.2.1-10
changelog:
  - Updated to the latest pseudo root release (rel10) which
    containts the upstream pseudo root release


author: Steve Dickson <steved@redhat.com> 1.2.1-11
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-12
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-13
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6


author: Steve Dickson <steved@redhat.com> 1.2.3-2
changelog:
  - Initscripts do not conform to LSB specification (bz 621562)
  - sm-notify needs to call res_init() before each try (bz 625531)
  - exports(5) man page duplicated paragraphs (bz 590921)


author: Steve Dickson <steved@redhat.com> 1.2.3-4
changelog:
  - The nfs service is not stopped on reboot or halt (bz 652786)
  - Removed obsolete configuration values (bz 653765)


author: Steve Dickson <steved@redhat.com> 1.2.3-7
changelog:
  - Updated to latest upstream release: nfs-utils-1-2-4-rc5
  - Add initscripts changes needed for rpcbind to be running when nfs is started
  - Initscripts changes needed to support NFS over RDMA
  - Allow the setting of the NFSv4 grace period (bz 665387)


author: J. Bruce Fields <bfields@redhat.com> 1.2.4-1
changelog:
  - Rely on crypto module autoloading in init scripts
  - initscripts: just try to mount rpc_pipefs always


author: Steve Dickson <steved@redhat.com> 1.2.4-4
changelog:
  - Converted init scrips to systemd services. (bz 699040)
  - Made nfsnobody's uid/gid to always be a 16-bit value of -2
  - mount: fix for libmount from util-linux >= 2.20


author: Steve Dickson <steved@redhat.com> 1.2.4-7
changelog:
  - Added StandardError=syslog+console to all the service files
    so startup errors will be logged. 
  - Changed exportfs to only log errors on existing /etc/export.d 
    directory, which eliminates a needless syslog entry.
  - Automount /proc/fs/nfsd for rpc.nfsd


author: Steve Dickson <steved@redhat.com> 1.2.4-9
changelog:
  - Both the nfs.lock and nfs.idmap services should always
    enabled on both installs and upgrades (bz 699040)
  - Fixed the paths to the server scriptlets (bz 733531)


author: Steve Dickson <steved@redhat.com> 1.2.5-1
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc1
  - Added named.service to After list in nfs-server.service (bz 742746)


author: Steve Dickson <steved@redhat.com> 1.2.5-2
changelog:
  - Removed SUID bits on mount commands (bz 528498)
  - Fixed a few typos in a couple man pages (bz 668124, 673818, 664330)
  - Fixed a I/0 problem in rpc.idmapd (bz 684308)


author: Steve Dickson <steved@redhat.com> 1.2.5-5
changelog:
  - Ensured nfs-idmap service is started after the network up (bz 748275)
  - Update to upstream RC release: nfs-utils-1.2.6-rc3 (bz 746497)


author: Steve Dickson <steved@redhat.com> 1.2.5-6
changelog:
  - Remove RQUOTAD_PORT and RQUOTAD from /etc/sysconfig/nfs (bz 754496)
  - Ensured nfs-idmap service is started after the named is up (bz 748275)


author: Steve Dickson <steved@redhat.com> 1.2.5-7
changelog:
  - Enabled new idmaping by installing the id_resolver.conf file.
  - Update to upstream RC release: nfs-utils-1.2.6-rc4


author: Steve Dickson <steved@redhat.com> 1.2.5-11
changelog:
  - Update to upstream RC release: nfs-utils-1.2.6-rc6
  - Reworked how the nfsd service requires the rpcbind service (bz 768550)


author: Steve Dickson <steved@redhat.com> 1.2.5-13
changelog:
  - Make sure statd is start before NFS mounts (bz 786050)
  - rpc.idmap: Hide global symbols from libidmap plugins (bz 797332)
  - nfsd: Bump up the default to 8 nprocs (bz 757452)


author: Steve Dickson <steved@redhat.com> 1.2.5-14
changelog:
  - gssd: Look for user creds in user defined directory (bz 786993)
  - gssd: Don't link with libgssapi_krb5 (bz 784908)


author: Steve Dickson <steved@redhat.com> 1.2.6-0
changelog:
  - Update to the latest upstream release: nfs-utils-1.2.6 (bz 821673)
  - Split out NFS server daemons into individual service files (bz 769879) 
  - Removed Wants= from nfs-lock.service (bz 817895)
  - Only enable services if they are enabled on upgrades (bz 807020)


author: Steve Dickson <steved@redhat.com> 1.2.6-1
changelog:
  - Correctly search for the existence of nfsnobody (bz 816149)
  - Correctly change the default group id for nfsnobody (bz 816149)


author: Steve Dickson <steved@redhat.com> 1.2.6-12
changelog:
  - Added FedFS support by added a BuildRequires for fedfs-utils-devel
  - Introduce new systemd-rpm macros (bz 850227)
  - Updated to latest upstream RC release: nfs-utils.1.2.7-rc5 (bz 833024)


author: Steve Dickson <steved@redhat.com> 1.2.6-14
changelog:
  - Allow the service to start when RPCNFSDCOUNT is comment out. (bz 870143)
  - Removed some old cruft from the spec file (bz 226198)


author: Steve Dickson <steved@redhat.com> 1.2.7-3
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc3
  - Took ownership of /usr/lib/nfs-utils (bz 894535)


author: Steve Dickson <steved@redhat.com> 1.2.7-5
changelog:
  - Updated to latest upstream RC release: nfs-utils.1.2.8-rc4
  - Added nfs-lock.service to After line in nfs-server.service (bz 914792)


author: Steve Dickson <steved@redhat.com> 1.2.8-2.0
changelog:
  - Update to latest upstream RC release: nfs-utils.1.2.9-rc1
  - Added GSS_USE_PROXY variable to nfs.sysconfig (bz 967112)


author: Steve Dickson <steved@redhat.com> 1.2.9-0.5
changelog:
  - Reverted patch for bz1029573. The kernel can now detect 
    when rpc.gssd is or is not running (bz1031197)
  - gssd: always reply to rpc-pipe requests from kernel. (bz1031197)


author: Steve Dickson <steved@redhat.com> 1.2.9-2.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc2
    - mount.nfs: Eliminated long delays during mount (bz 1031643)
    - exportfs: Corrected erroneously error messages (bz 1049589)


author: Steve Dickson <steved@redhat.com> 1.2.9-3.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc3
    - exportfs: Exit with correct value when an error occurs (bz 1053933)
    - mount.nfs: Removed supported flag from usage string (bz 1000989)
    - gssd: Improve first attempt at acquiring GSS credentials (bz 1053877)
    - rpc.idmapd: Remove no longer supported flags from man page (bz 1003513)
    - rpc.statd: Allow usage messages to be displayed when statd is running. (bz 1037044)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.0
changelog:
  - Updated to latest upstream release: nfs-utils-1-3-0
    - mount.nfs: Fix fallback from tcp to udp (bz 984901)
    - nfsidmap: Keys need to be invalidated instead of revoked (bz 1080505)
  - Removed RDMA_PORT stub from /etc/sysconfig/nfs (bz 1078792)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.1
changelog:
  - Added configurable timeout to rpc.gssd (bz 1009528)
  - Added callback to sm_notify (bz 1108105)
  - mountd: Fixed path in start-statd (bz 1116794)
  - rpc.gssd: Fixed silent error message (bz 1117384)
  - rpc.gssd: add the acceptor name to the info passed in downcall (bz 1088011)
  - nfs-utils.spec: fixed runtime configuration files (bz 1118177)
  - exportfs: fix test of NULL pointer in host_pton() (bz 1083018)
  - gssd: Fixed errno typo in get_servername() (bz 1082480)
  - nfsiostat: documented the output better (bz 1109864)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.2
changelog:
  - Upgrade to latest upstream systemd scripts  (bz 1144440)
  - Taught start-statd to use systemd  (bz 1144440)
  - Repaced rpc.svcgssd with gssproxy (bz 1082746)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.6
changelog:
  - Corrected argument names in the systemd scripts (bz 1170364)
  - Added RELRO check (bz 1092543)
  - Properly parse IPv6 literal strings with null termination (bz 1161490)
  - Added the 'nordirplus' export flag to disable v3 readdirplus (bz 1161458)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.8
changelog:
  - Stop sm-notify from running in HA environments (bz 1182692)
  - Set the GSS_USE_PROXY variable in nfs-utils_env.sh (bz 1183821)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.10
changelog:
  - Updated mountstats to latest upstream version (bz 1215808)
  - Enable all auth flavors on pseudofs exports (bz 1187223)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.11
changelog:
  - Added the rpcuser group before adding the rpcuser uid (bz 1190874)
  - Added back variables to help get through firewalls (bz 1208488)
  - Made the postuns conditional (bz 1200713)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.12
changelog:
  - Fixed nfs-idmap start race (bz 1164064)
  - Updated nfsdcltrack v2 schema (bz 1234598)
  - Added missing arguments in rpc.mountd man page (bz 1003558)
  - Added nfsconfig.conf to nfs.man and mount.nfs.man (bz 1196646)
  - nfs-server now Requires rpcbind.service (bz 1171603)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.18
changelog:
  - Stop gssd from silenty reaps cache (bz 1256469)
  - Remove errant echo call from spec file (bz 1257144)
  - Add more symlinks to make systemd scripts backwards compatible (bz 1159183)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21
changelog:
  - Stop gssd from flooding the KDC with TGT fetches (bz 1264999)
  - Decouple the start/stop of rpcbind with nfs-server and rpc-statd (bz 1266993)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.22
changelog:
  - nfsidmap: Correct a failure to set key timeout values (bz 1161222)
  - exportfs: Restore the EAI_NONAME check in host_pton() (bz 1276099)
  - gssd: Don't assume the machine account will be in uppercase (bz 1268040)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.23
changelog:
  - Update to nfsdcltrack v2 schema (bz 1285097)
  - mountd: print an error message when no versions are specified (bz 1003539)
  - mountd: added missing arugment to usage string (bz 1003716)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.24
changelog:
  - rpcgssd: added upstream debugging support (bz 1273163)
  - start-statd: start rpc.statd only once (bz 1300007)
  - exportfs: Don't stop the server from coming up when exportfs fails (bz 1287468)
  - Changed install permissions on /var/lib/nfs/rpc_pipefs (bz 1291514)
  - nfs.sysconfig: added note about the default keytab needing to exist (bz 1292607)
  - mount.nfs: skip server address resolution on remount (bz 1313550)
  - nfs_connect_nb: handle EINTR during connection establishment (bz 1299003)
  - statd: Update existing record if we rece SM_MON with new cookie (bz 1284576)
  - nfsidmap: updated to add in two new features (bz 1290488)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.25
changelog:
  - mountstats.man:  Remove a few bogus .R macros (bz 1266013)
  - systemd: ensure nfs-config service is re-run as needed (bz 1331460)
  - exportfs: Deal with path's trailing "/"  (bz 1276534)
  - exportfs: replace one xlog(D_GENERAL) in host_canonname() (bz 1331801)
  - exportfs: Fix buf size in test_export() dump() (bz 1243234)
  - blkmapd: Added a usage routine (bz 1001431)
  - rpc.idmapd: Added a usage routine (bz 1001438)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.26
changelog:
  - gssd: use pthreads to handle upcalls (bz 1331540)
  - gssd: Fix inner-loop variable reuse (bz 1334848)
  - mount: run START_STATD fully as root (bz 1275082)
  - lockd: added lockd.conf to set module parameters (bz 1264387)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.27
changelog:
  - nfsd: use correct byte order on rdma port (bz 1310691)
  - blkmapd: Add the -h flag on the man page (bz 1001431)
  - nfsd: Remove some warnings nfsd.c (bz 1336419)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037924)
  - mountd: cleaned up usage message (bz 1003716)
  - mountstats.man: fixed typo in man page (bz 1263966)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.29
changelog:
  - mountd: fix netgroup lookup for resolvable IP addresses (bz 1341908)
  - umount: fixed typo in usage message (bz 1246329)
  - mount.nfs: added usage output when no arguemnts are given (bz 1001443)
  - nfsidmap: added the -h option (bz 1339877)
  - exportfs: Do not fail on empty exports file (bz 1340788)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.30
changelog:
  - statd: suppress a benign log message in nsm_delete_host() (bz 1347030)
  - start-statd: Use flock to serialize the running of this script (bz 1300007)
  - spec: update requires version of libtirpc-devel (bz 1346711)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.34
changelog:
  - mount.nfs: Start the mount negation with v4.2 (bz 1375259)
  - gssd: Make TCP the default protocol for GSSD connections (bz 1386759)
  - mountstats: add pNFS READs and WRITEs (bz 1377740)
  - nfsdcltrack: Fixed typo in usage string (bz 1001494)
  - mydaemon.c: Removed a warning (bz 1377914)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.35
changelog:
  - Fixed -o v4 from falling back to v3 (bz 1404617)
  - systemd: Set var-lib-nfs-rpc_pipefs.mount After= tmpfiles (bz 1406164)
  - mountd: talk to kernel using file descriptors instead of FILE (bz 1409903)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.36
changelog:
  - exportfs: remove redundant exports options output (bz 1396402)
  - Add /etc/nfs.conf support (bz 1418041)
  - gssd: Convert 'rdma' to 'tcp' protocol (bz 1386759)
  - gssd: replace non-thread-safe strtok with strsep (bz 1419280)
  - mount: fix mount fail that caused by uninitialized struct (bz 1415024)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.37
changelog:
  - exportfs: support "security_label" export option (bz 1435899)
  - svcgssd: Don't install code that is not suppported (bz 1431218)
  - mount.nfs: start protocol negation with v4.1 instead of v4.2 (bz 1435901)
  - nfs.conf: update nfs-conf.patch to include nfs.systemd.man (bz 1418041)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.39
changelog:
  - nfsstats: fix some exit codes (bz 1400658)
  - Added server-generator to improve ordering (bz 1437190)
  - nfsman: document minorversion (bz 1389827)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.40
changelog:
  - gssd: ensure that preferred_realm is non-NULL (bz 1432643)
  - mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
  - sm-notify: ending the grace period early should be configurable (bz 1424599)
  - Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
  - Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.41
changelog:
  - nfsdcltrack: silence some expected errors (bz 1443176)
  - Conditionally restart gssproxy now that config file is installed (bz 1440887)
  - systemd: NFS server services should use network-online (bz 1409012)
  - Cleaned up some fuzzy patches (bz 1409012)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.43
changelog:
  - mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
  - spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.48
changelog:
  - exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
  - Correctly set the minor version when set in nfsmount.conf (1458504)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Steve Dickson <steved@redhat.com> - 0.3.0-1
changelog:
  - Updated to latest upstream version 0.3.0
  - Fixed minor issues in spec file from the package review


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.3.0-1.1
changelog:
  - lose the BR for autotools
  - Patch in support for destdir
  - use %configure macro, make DESTDIR= install
  - add sparc to -fPIE (trivial, but correct)
  - destdir revealed missing/poorly created symlink, patch fixes it, add nfs4_editfacl to files
  - LDFLAGS passed to configure/exported were being blindly overwritten, patch fixes


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added the RELRO check (bz 1092556)


author: Phil Sutter <psutter@redhat.com> [0.6-3.el7]
changelog:
  - nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
  - evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
  - netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
  - src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]


author: Phil Sutter <psutter@redhat.com> [0.6-4.el7]
changelog:
  - evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
  - src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
  - include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
  - datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
  - meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
  - src: meta priority support using tc classid (Phil Sutter) [1380326]
  - src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
  - src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
  - payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
  - evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
  - netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
  - src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Daiki Ueno <dueno@redhat.com> - 3.020-1
changelog:
  - new upstream release
  - update the priority
    nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
  	http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
  	read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
  	prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
  	CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
  	many files/dirs
  - added desktop entry for gnome


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to NSPR_4_10_2_RTM
  - Avoid unsigned integer wrapping in PL_ArenaAllocate
  - Resolves: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792) 
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer 
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Update to NSS_3_15_1_RTM
  - Apply various fixes to the man pages and add new ones
  - Enable the iquote.patch to access newly introduced types
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Add missing option descriptions for {cert|cms|crl}util
  - Resolves: rhbz#948495 - Man page scan results for nss
  - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Install symlink to nss-sysinit.sh without the .sh suffix
  - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-3.15.2
  - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Add description of the certutil's --email option to it's manpage
  - Resolves: rhbz#Bug 948495 - Man page scan results for nss


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-4
changelog:
  - Enable fips when system is in fips mode
  - Resolves: rhbz#852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-6
changelog:
  - Fix errors in ssl disabling patches for both library and tests
  - Add s390x to the multilib_arches definition used for alt_ckbi
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-7
changelog:
  - Fix bash syntax error in patch for disabling ssl2 tests
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-8
changelog:
  - Fix patch for disabling ssl2 in ssl to correctly set error code
  - Fix syntax error reported in the build.log even tough it succeeds
  - Add patch top ignore setpolicy result 
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
  - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-9
changelog:
  - Fix certutil man page options names to be consistent with help
  - Resolves: rhbz#948495 - man page scan results for nss
  - Remove incorrect count argument in status description in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-10
changelog:
  - Fix path to script and remove -- from some options in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Improve pluggable ECC support for ECDSA
  - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Fix a coverity scan compile time warning for the pem module
  - Resolves: Bug 1002271 - NSS pem module should not require unique base file names


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Move several nss-sysinit manpages tar archives to the %files
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Fix the spec file to apply the nss ecc list patch for bug 752980
  - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
  - Remove no longer needed patches for manpages that were applied upstream
  - Remove no longer needed patch to disable ocsp stapling tests
  - Update iquote.patch on account of upstream changes
  - Update and rename patch to pem/rsawrapr.c on account of upstream changes
  - Use the pristine upstream sources for nss without repackaging
  - Avoid unneeded manual step which may introduce errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Remove spurious man5 wildcard entry as all manpages are listed by name
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-4
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem module fixes verified on RHEL and applied upstream
  - Remove no loger needed pem patches on acccount on this update
  - Add comments documenting the iquote.patch 
  - Resolves: Bug 1054457 - CVE-2013-1740


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Fix libssl and test patches that disable ssl2 support
  - Resolves: Bug 1123435
  - Replace expired PayPal test certificate with current one


author: Elio Maldonado <pbrobinson@redhat.com> 3.16.2-3
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-10
changelog:
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Fix race condition
  - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
  - under the replication replay failure condition


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Reverse the sense of a test in patch to fix pk12util segfault
  - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-4
changelog:
  - Add support for sha384 tls cipher suites
  - Add support for server-side hde key exchange
  - Add support for DSS+SHA256 ciphersuites


author: Kai Engert <kaie@redhat.com> - 3.19.1-5
changelog:
  - Incremental patches to fix SSL/TLS test suite execution,
    fix the earlier SHA384 patch, and inform clients to use SHA384 with
    certificate_verify if required by NSS.


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
  - Fix libssl ssl2/export disabling patch to handle NULL cipher cases
  - Enable additional cipher suites by default


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-12
changelog:
  - Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
  - Enable ECDSA cipher suites by default, a subset of the ones requested


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-13
changelog:
  - Reorder the cipher suites and enable two more by default
  - Fix some of the ssauth sni and ocsp stapling tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-14
changelog:
  - Update the required_softokn_build_version to -14
  - Add references to bugs filed upstream for new patches
  - Merge ocsp stapling and sslauth sni tests patches into one


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-16
changelog:
  - Fix check for public key size of DSA certificates
  - Use size of prime P not the size of dsa.publicValue


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-17
changelog:
  - Change the required_softokn_build_version back to -13
  - Ensure we use nss-softokn-3.16.2.3-13.el7_1


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-19
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Fix a mockbuild reported bad %if condition when using the __isa_bits macro instead of list of 64-bit architectures
  - Change the test to %if 0%{__isa_bits} == 64 as required for building the srpm which is noarch
  - Resolves: Bug 1289884


author: Kai Engert <kaie@redhat.com> - 3.21.0-5
changelog:
  - Merge fixes from the rhel-7.2 branch
  - Fix the SigAlgs sent in certificate_request
  - Ensure all ssl.sh tests are executed
  - Update sslauth test patch to run additional tests


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-13
changelog:
  - Fix reuse of session cache entry
  - Resolves: Bug 1241172 - Certificate verification fails with multiple https urls


author: Kai Engert <kaie@redhat.com> - 3.21.0-14
changelog:
  - Support TLS 1.2 certificate_verify hashes other than PRF,
    backported fix from NSS 3.25 (upstream bug 1179338).


author: Kai Engert <kaie@redhat.com> - 3.21.0-16
changelog:
  - enable ssl_gtests (without extended master secret tests), Bug 1298692
  - call SECMOD_RestartModules in nss_Init, Bug 1317691


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.0
changelog:
  - Rebase to NSS 3.28.2
  - Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
    is no-op now
  - Enable gtests when requested
  - Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
    not necessary
  - Remove sslauth-no-v2.patch and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
    already disabled in upstream
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove local patches for SHA384 cipher suites (now supported in
    upstream): dhe-sha384-dss-support.patch,
    client_auth_for_sha384_prf_support.patch,
    nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
    nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
    fix-allowed-sig-alg.patch, tests-extra.patch
  - Remove upstreamed patches: rh1238290.patch,
    fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
    call-restartmodules-in-nssinit.patch


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-3
changelog:
  - Remove %nss_cycles setting, which was also mistakenly added
  - Re-enable BUILD_OPT, mistakenly disabled in the previous build
  - Prevent ABI incompatibilty of SECKEYECPublicKey
  - Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
  - Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
    patch in the previous release
  - Fix crash with tstclnt -W
  - Always enable gtests for supported features
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Build with support for SSLKEYLOGFILE
  - Disable the use of RSA-PSS with SSL/TLS


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-3
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka
  - Enable new algorithms supported by the new nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-4
changelog:
  - Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
  - Backport changes adding SSL alert callbacks from upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel7.config


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - Switch default hash algorithm used by tools from SHA-1 to SHA-256
  - Avoid race condition in nssSlot_IsTokenPresent()
  - Enable SHA-2 and AES in pk12util
  - Disable RSA-PSS for now


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-3
changelog:
  - Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-11
changelog:
  - Backport patch to simplify transcript calculation for CertificateVerify
  - Enable TLS 1.3 and RSA-PSS
  - Disable some upstream tests failing due to downstream ciphersuites changes


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Nalin Dahyabhai <nalin@redhat.com> 0.6.8-1
changelog:
  - bump release number to 1 (part of #491767)
  - fix which group we check for during %pre (part of #491767)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mitchell Berger's patch to clean up the init script, use %{_initddir},
    and correct the %post so that it only thinks about turning on nslcd when
    we're first being installed (#522947)
  - tell status() where the pidfile is when the init script is called for that


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available on
    systems that are using nss-pam-ldapd; otherwise it's usually optional


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592411)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-2
changelog:
  - make inclusion of the .so symlink conditional on being on a sufficiently-
    new Fedora where pam_ldap isn't part of the nss_ldap package, so having
    this package conflict with nss_ldap doesn't require that pam_ldap be
    removed (#596691)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-3
changelog:
  - don't accidentally set multiple 'gid' settings in nslcd.conf, and try to
    clean up after older versions of this package that did (#608314)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.9-2
changelog:
  - when creating /var/run/nslcd in the buildroot, specify that 0755 is a
    permissions value and not another directory name (#636880)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-3
changelog:
  - add a tmpfiles configuration to ensure that /var/run/nslcd is created when
    /var/run is completely empty at boot (#656643)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-7
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822)
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870), then
    modify the default again to also allow shorter and shorter names to pass
    muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.13-8
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the same conditional test for deciding when to create the .so symlink as
    we do later on for deciding when to include it in the package (#757004)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.16-2
changelog:
  - backport upstream revision r1659 related to broken pipe when
    requesting a large group
  - use grep -E instead of egrep to avoid rpmlint warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-1
changelog:
  - update to 0.8.12 (#846793)
  - make building pam_ldap conditional on the targeted release
  - add "After=named.service dirsrv.target slapd.service" to nslcd.service,
    to make sure that nslcd is started after them if they're to be started
    on the local system (#832706)
  - alter the versioned Obsoletes: on pam_ldap to include the F18 package
  - use %{_unitdir} when deciding where to put systemd configuration, based
    on patch from Václav Pavlín (#850232)
  - use new systemd macros for scriptlet hooks, when available, based on
    patch from Václav Pavlín (#850232)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - in %post, attempt to rewrite any instances of "map group uniqueMember ..."
    to be "map group member ..." in nslcd.conf, as the attribute name changed
    in 0.8.4 (via freeipa ticket #3589)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.13-4
changelog:
  - compile nslcd/log.c with -fPIC instead of the current hardened-build default
    of -fPIE, which doesn't seem to avoid relocations for its thread-local
    variables on s390x (#1002834)


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-6
changelog:
  - Change the error messages the tests expect to those printed on RH based
    systems
  - Resolves: rhbz#1044482


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-8
changelog:
  - Fix a potential use-after-free in nsswitch module
  - Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-9
changelog:
  - Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                             status even though the service is stopped with
                             'systemctl stop nslcd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-10
changelog:
  - Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                             nslcd + pam_ldap where user has different in
                             nis/passwd and ldap.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-11
changelog:
  - Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                             controllers and locks user out


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-12
changelog:
  - Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                             using nss-pam-ldapd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Elio Maldonado@<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - Determine NSSUTIL_INCLUDE_DIR and NSSUTIL_LIB_DIR with a pkg-config query on nss-util
  - Remove the release 17 hack


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symblic links to shared libraries from devel, rhbz#521155
  - Apply the nss-nolocalsql patch
  - No rpath-link in nss-softokn-config


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea rhbz#504949


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-19
changelog:
  - Consider the system as not fips enabled when /proc/sys/crypto/fips_enabled isn't present (rhbz#590199)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-20
changelog:
  - Add %{?_isa} to the requires in the devel packages (#596840)
  - Fix typo in the package description (#598295)
  - Update nspr version to 4.8.4


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove nss-nolocalsql patch
  - Fix rpmlint warnings about macros in comments and changelog


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Adhere to static library packaging guidelines (#609613)
  - Fix nss-util-devel version dependency line
  - Shorten freebl and freebl subpackages descriptions


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Add blapit.h to headers provided by nss-softokn-freebl-devel (#675196)
  - Expand the freebl-devel package description


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-2
changelog:
  - Fix intel optimized aes code to deal with case where input and ouput are in the same buffer (#709517)


author: Elio Maldonado <emaldona@redhat.com> - 3.13-0.1.rc0.3
changelog:
  - Update to NSS_3_13_RC0 post bootstrapping
  - Don't incude util in sources for the lookaside cache
  - Reenable building the fipstest tool
  - Restore full cli argument parsing in the sectool library


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-11
changelog:
  - Downgrading to 3.12.9 for a merge into new RHEL git repo
  - This build is for the buildroot for a limited time only
  - Do not not push it to update-testing


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-13
changelog:
  - Bug 757005 Build nss-softokn for rhel 7
  - Make it almost like nss-softokn-3.12.9 in rhel 6.2
  - Added a patch to build with Linux 3 and higher
  - Meant to work with nss and nss-utul 3.1.3.1
  - Download only the 3.12.9 sources from the lookaside cache


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-14
changelog:
  - Restore the update to 3.13.1
  - Update the patch for freebl to deal with prelinked shared libraries
  - Add additional dbrg power-up self-tests as required by fips
  - Reactivate the tests


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-15
changelog:
  - Bug 770999 - Fix segmentation violation when turning on fips mode
  - Reintroduce the iquote patch but don't apply it unless needed


author: Tom Callaway <spot@fedoraproject.org> 3.13.1-19.1
changelog:
  - fix issue with gcc 4.7 in secmodt.h and C++11 user-defined literals
  - temporarily revert /usrmove changes. they will be restored in -20 for the f17-usrmove tag.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Remove unneeded fix for gcc 4.7 c++ issue in secmodt.h which undoes the upstream fix
  - Fix Libs: line on nss-softokn.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - Remove patches rendered obsolete by this update and update others
  - Temporarily modifiy the spec file while bootstrapping the buildroot a follows:
  - Remove unwanted headers that we lo loger ship
  - Modified the post install scriplet to ensure the in-tree freebl library is loaded


author: Elio Maldonado <emaldona@redhat.com> - 3.14-4
changelog:
  - Apply the bug 829088 patch in question
  - Adjust the patch to account for code changes in nss-3.14
  - Resolves: rhbz#829088 - Fix failure in sha244 self-test


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Truly apply the bug 829088 patch this time
  - Resolves: rhbz#829088 - Fix failure in sha244 self-test


author: Elio Maldonado <emaldona@redhat.com> - 3.14.2-2
changelog:
  - Update to NSS_3_14_2_RTM
  - Restore comments on how to transition when signing algorithm changes
  - Remove unused patches


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scrips on account of a shallwer source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta.2
changelog:
  - Add lowhashtest and pk11gcmtest as unsupported tools
  - Modify nss-softoken-split script to include them in the split


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Add export NSS_ENABLE_ECC=1 rto the %build and %check sections
  - Resolves: rhbz#752980 - [7.0 FEAT] Support ECDSA algorithm in the nss packag


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-softoken from nss-3.15.2
  - Resolves: rhbz#1012679 - pick up NSS-SOFTOKN 3.15.2 (required for bug 1012656)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Fix to allow level 1 fips mode if the db has no password
  - Resolves: Bug 852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740
  - Update softokn splitting script to oparate on the upstream pristine source
  - Using the .gz archives directly, not repackaging as .bz2 ones
  - Avoid unneeded manual steps that could introduce errors
  - Update the iquote and build softoken only patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Update to nss-3.16.2
  - Resolves: Bug 1103925 - Rebase RHEL 7.1 to at least NSS-SOFTOKN 3.16.1 (FF 31)


author: Elio Maldonado <emaldona@redhat.com> 3.16.2-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125620 - nss-softokn fails to build on arch: ppc64le (build failure)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-5-
changelog:
  - Fix incorrect path in the %check section
  - Add way to skip test suite execution during development work
  - Resolves: Bug 1145434 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-6
changelog:
  - Add lowhash to the softoken tests to run as done on rhel-6.6
  - Adapt suboptimal shell code in nss.spec fix from bug 108750
  - Resolves: Bug 1145434 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-7
changelog:
  - Change RSA_PrivateKeyCheck to not require p > q
  - Resolves: Bug 1150645 - Importing an RSA private key fails if p < q


author: Robert Relyea <rrelyea@redhat.com> 3.16.2-12
changelog:
  - Add support for encrypt_derive.
  - Allow us to init database at level1 while already in FIPS mode.
  - Allow UserDBOpen'ed FIPS tokens to do all the mechanisms as well as
    the main fips token.
  - Silence SIGCHLD when prelink is used.


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Remove temporary workaround for brew build problems now resolved
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Robert Relyea <rrelyea@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1153602 - libfreebl3.so runs prelink during the initialization phase
  - Decouple libfreebl3.so from the actual library.
  - Blacklist the freebl libraries
  - Turn off calling prelink to unprelink the binary


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Skip the fips checks if the action is newslot or delslot.
  - Resolves: Bug 1156406 - NSS fails to access sql:/etc/pki/nssdb in system FIPS mode


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-6
changelog:
  - Update fix for flaws reported by coverity scan  
  - Resolves: Bug 1154764 - Defects found in nss-softokn


author: Robert Relyea <rrelyea@redhat.com> - 3.16.2.3-7
changelog:
  - Use RHEL-7 dracut semantics rather than RHEL-6
  - fix dependencies so nss-softokn pulls in nss-softokn-freebl
  - keep dummy libfreebl3.chk for dracut kernel.


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-8
changelog:
  - fix permissions on dracut install file.
  - Resolves: Bug 1169957 - curl unable to download url when url is https and environment is dracut


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-14
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-2
changelog:
  - Update to NSS 3.28.3
  - Remove upstreamed patches for the previous FIPS validation
  - Package lowkeyi.h and lowkeyti.h in freebl-devel
  - Pick up a patch in the Fedora package to fix build issue


author: Bob Relyea <rrelyea@redhat.com> - 3.28.3-4
changelog:
  - include new PKCS12 NSS specific mechanisms.
  - alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
  - add RSA PSS oid to decrypting PKCS #5 key blobs.
  - move ec public key check from softokn to freebl so apps like Java can benefit.


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - fix login handling for FIPS slots, patch from rhbz#1390154
  - backport upstream fix for CVE-2017-5462 (DRBG leak)


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Update to NSS 3.33.0
  - Remove upstreamed patches: nss-softokn-basicutil-dependency.patch,
    nss-softokn-pss-modulus-bits.patch, nss-softokn-pkcs12-sha2.patch,
    nss-softokn-pkcs12-rsa-pss.patch,
    nss-softokn-ec-derive-pubkey-check.patch, and nss-softokn-fix-drbg.patch


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-0.1.beta.1
changelog:
  - Update to NSS_3_13_4_BETA1
  - Improve steps to splitting off util from the nss
  - Add executable attribute to the splitting script


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805716 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.15.beta1-0.1.beta.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scripts on account of a shallower source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.2
changelog:
  - Don't include prtypes.h from hasht.t
  - Resolves: rhbz#953277 - rawhide build of glibc fails due to fatal error from nss3/hasht.h


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Add the nss-util portion of a fix for a bug in nss and nss-util
  - Resolves: Bug 752980 - Support ECDSA via pluggable ECC in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Update to nss-3.15.4
  - Modified the nss-split-util script to use the nss upstream pristine sources
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue [rhel-7.0]


author: Peter Robinson <pbrobinson@redhat.com> 3.16.2-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126244 - Ensure nss-util is built for 64 bit on ppc64le
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Bump the release number to be higher than the one for rhel-7.0
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297940 - Rebase RHEL 7.3 to NSS-util 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Manual merge from the rhel-7.2 branch
  - Fix one alias for naming compatibility with prior release
  - Remove an unused patch


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Rob Crittenden <rcritten@redhat.com> 0.9.1-2
changelog:
  - rename LICENSE to COPYING
  - don't ship the .la in -devel
  - fixup devel requirement to be exactly the parent package, not >=


author: Rob Crittenden <rcritten@redhat.com> 0.9.2-1
changelog:
  - update to 0.9.2
  - Enable loading the NSS PKCS#11 pem module
  - Add a URL
  - Specify the license as LGPLv2+ instead of just LGPL


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-0.1.rc5
changelog:
  - update to 4.2.6p1-RC5
  - support NTPSERVERARGS variable in dhclient script (#558110)
  - don't use deprecated egrep (#548182)
  - don't verify ntp.conf (#481151)
  - compile with PPS API support
  - include new sntp


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p1-2
changelog:
  - update ntpstat to use current system variable names (#588067)
  - print synchronization distance instead of dispersion in ntpstat
  - clarify ntpd -q description


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-2
changelog:
  - add support for systemd (#617328)
  - retry few times in ntpdate init script before giving up (#445229)
  - add fourth pool server to default ntp.conf and use iburst


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p2-5
changelog:
  - remove systemctl dependency for now
  - suppress chkconfig output in %post (#629285)
  - generate ntp_decode(5) man page (#632300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-0.1.rc10
changelog:
  - update to 4.2.6p3-RC10
  - fix system peer unmarking when unreachable
  - fix broadcastdelay option
  - fix automatic broadcast delay calibration
  - fix ntp-keygen -V crash
  - avoid unnecessary timeout in ntpdate
  - drop nano patch
  - convert ChangeLog to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p3-3
changelog:
  - pull in time-sync.target from ntpdate.service (Lennart Poettering)
  - link with -Wl,-z,relro,-z,now options
  - fix typo in ntpq man page (#664525)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - update service file for systemd-timedated-ntp target (#816495)
  - allow service to set realtime scheduler (#810801)
  - drop comment enabling local driver in default config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-4
changelog:
  - start ntpdate service after nss-lookup.target (#837486)
  - update systemd-timedated integration (#846077)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - fix crash in FIPS mode (#839280)
  - use systemd macros if available (#850235)
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-6
changelog:
  - bind broadcast client to new interfaces (#722690)
  - decode hex encoded passwords in ntpq/ntpdc
  - remove sample MD5 keys from default keys config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - allow selection of cipher for private key files
  - set identity modulus size in ntp-keygen
  - create sntp subpackage
  - add sntp service
  - use system libopts
  - add Wants=ntp-wait.service to ntpd service
  - don't fail when /etc/sysconfig/ntpd is missing
  - modify mlock and multiopts patches to use autogen
  - make perl subpackage noarch


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - avoid rereading /etc/services (#768804)
  - remove ntp-wait dependency from ntpd service (#906753)
  - add missing and remove unrecognized options in documentation
  - update comments in some config files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - workaround failing autogen
  - move files from /lib
  - don't own ntp-units.d directory
  - drop old systemd scriptlets
  - fix dates in changelog


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-13
changelog:
  - ignore duplicate servers from dhclient
  - don't use -Wstrict-overflow with -fno-strict-overflow
  - buildrequire systemd-units
  - remove pie test


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-16
changelog:
  - refresh peers on routing updates (#1048132)
  - fix calculation of root dispersion (#1045377)
  - remove unnecessary IPv6 restrict line from default ntp.conf (#1048255)
  - remove kod from default restrict in ntp.conf (#1048255)
  - update logconfig documentation for patched default (#1048252)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-26
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-2
changelog:
  - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-3
changelog:
  - Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349


author: Jarod Wilson <jwilson@redhat.com> 1.0.2-2
changelog:
  - Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).


author: Jon Ciesla <limb@jcomserv.net> 1.2.0-1
changelog:
  - New upstream release, added python-nose BR. BZ 465999.
  - Using atlas blas, not blas-devel. BZ 461472.


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.6.0-0.1.b1
changelog:
  - Update to 1.6.0b1
  - Build python3  module with python3
  - Add patch from upstream to fix build time import error


author: David Malcolm <dmalcolm@redhat.com> - 1:1.6.2-5
changelog:
  - rework patches for 3.3 to more directly reflect upstream's commits
  - re-enable test suite on python 3
  - forcibly regenerate Cython .c source to avoid import issues on Python 3.3


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.7.0-0.1.b1
changelog:
  - Update to 1.7.0b1
  - Rebase python 3.3 patchs to current git master
  - Drop patches applied upstream


author: Orion Poplawski <orion@nwra.com> - 1:1.7.0-0.3.b1
changelog:
  - Add patch from github pull 371 to fix python 3.3 pickle issue
  - Remove cython .c source regeneration - fails now


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Tania Bento <tbento@redhat.com> 0:1.3.2-1jpp.1
changelog:
  - Changed %BuildRoot tag.
  - Bootstrap Buildling.
  - Should not touch buildroot in %prep.
  - Removed %Vendor tag.
  - Removed %Distribution tag.
  - Fixed %Release tag.
  - Fixed %Sourcei0 tag.
  - Added %doc to %files section.
  - Edited %doc in %files javadoc section.


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: gil cattaneo <puntogil@libero.it> 0:4.0-1
changelog:
  - Upgrade to 4.0
  - Rename objectweb-asm4
  - Adapt to current guidelines
  - Fixed poms groupId org.ow2.asm
  - Fixed Group field


author: Toshio Kuratomi <toshio-tiki-lounge.com> - 3.08.3-4
changelog:
  - Fix for gcc4 and the 32 bit assembly in otherlibs/num.
  - Fix to allow compilation with RPM_OPT_FLAG defined -O level.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-5
changelog:
  - Don't include the release number in fedora-ocaml-release file, so
    that packages built against this won't depend on the Fedora release.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-6
changelog:
  - ocaml-runtime provides ocaml(runtime) = 3.10.0, and
    ocaml-find-requires.sh modified so that it adds this requires
    to other packages.  Now can upgrade base ocaml packages without
    needing to rebuild everything else.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-7
changelog:
  - Run chrpath to delete rpaths used on some of the stublibs.
  - Ignore Parsetree module in dependency calculation.
  - Fixed ocaml-find-{requires,provides}.sh regexp calculation so it doesn't
    over-match module names.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.2-3
changelog:
  - ocaml-ocamldoc provides ocamldoc (bz #449931).
  - REMOVED provides of labltk, camlp4.  Those are libraries and all
    packages should now depend on ocaml-labltk / ocaml-camlp4 / -devel
    as appropriate.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-1
changelog:
  - OCaml 3.11.1 (this is virtually the same as the release candidate
    that we were using for Fedora 12).


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-2
changelog:
  - ocaml-find-requires.sh: Calculate runtime version using ocamlrun
    -version instead of fedora-ocaml-release file.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-1
changelog:
  - New upstream version 3.12.0.
    http://fedoraproject.org/wiki/Features/OCaml3.12
  - Remove ppc64 support patch.
  - Rebase rpath removal patch.
  - ocamlobjinfo is now an official tool, so no need to compile it by hand.
    Add objinfo_helper.
  - Disable ocamlplugininfo.
  - Remove addlabels, scrapelabels.
  - Remove ocaml/stublibs/dlltkanim.so.


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-2
changelog:
  - Try depending on OCaml BR to fix:
    /usr/lib/rpm/ocaml-find-provides.sh: /builddir/build/BUILDROOT/ocaml-3.12.0-1.fc15.i386/usr/bin/ocamlobjinfo: /usr/bin/ocamlrun: bad interpreter: No such file or directory


author: Richard W.M. Jones <rjones@redhat.com> - 3.12.0-7
changelog:
  - Allow this package to be compiled on platforms without native
    support and/or natdynlink, specifically ppc64.  This updates (and
    hopefully does not break) DJ's previous *.cmxs change for arm.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-2
changelog:
  - add back ocaml-ppc64.patch for ppc secondary arch, drop .cmxs files
    from file list on ppc (cherry picked from F16 - this should have
    gone into Rawhide originally then been cherry picked back to F16)


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-3
changelog:
  - New ARM backend by Benedikt Meurer, backported to OCaml 3.12.1.
    This has several advantages, including enabling natdynlink on ARM.
  - Provide updated config.guess and config.sub (from OCaml upstream tree).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-6
changelog:
  - Move patches to external git repo:
    http://git.fedorahosted.org/git/?p=fedora-ocaml.git
    There should be no change introduced here.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-8
changelog:
  - Modify the ppc64 patch to reduce the delta between power64 and
    upstream power backends.
  - Clean up the spec file and bring it up to modern standards.
    * Remove patch fuzz directive.
    * Remove buildroot directive.
    * Rearrange source unpacking.
    * Remove chmod of GNU config.* files, since git does it.
    * Don't need to remove buildroot in install section.
    * Remove clean section.
    * git am </dev/null to avoid hang (thanks Adam Jackson).
  - Note there is no functional change in the above.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-9
changelog:
  - Include svn rev 12548 to fix invalid generation of Thumb-2 branch
    instruction TBH (upstream PR#5623, RHBZ#821153).


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-10
changelog:
  - Include patch to link dllthreads.so with -lpthread explicitly, to
    fix problem with 'pthread_atfork' symbol missing (statically linked)
    on ppc64.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-11
changelog:
  - ppc64: Fix position of stack arguments to external C functions
    when there are more than 8 parameters.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-12
changelog:
  - ppc64: Include fix for minor heap corruption because of unaligned
    minor heap register (RHBZ#826649).
  - Unset MAKEFLAGS before running build.


author: Richard W.M. Jones <rjones@redhat.com> 4.00.0-0.3.beta2
changelog:
  - Upgrade to OCaml 4.00.0 beta 2.
  - The language is now officially called OCaml (not Objective Caml, O'Caml etc)
  - Rebase patches on top:
    . New ARM backend patch no longer required, since upstream.
    . Replacement config.guess, config.sub no longer required, since upstream
      versions are newer.
  - PPC64 backend rebased and fixed.
    . Increase the default size of the stack when compiling.
  - New tool: ocamloptp (ocamlopt profiler).
  - New VERSION file in ocaml-runtime package.
  - New ocaml-compiler-libs subpackage.
  - Rearrange ExclusiveArch alphanumerically.
  - alpha, ia64 native backends have been removed upstream, so they are
    no longer supported as native compiler targets.
  - Remove defattr.
  - Make OCaml dependency generator self-contained so it doesn't need
    previous version of OCaml around.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-1
changelog:
  - Update to new major version OCaml 4.01.0.
  - Rebase patches.
  - Remove bogus Requires 'ncurses-devel'.  The base ocaml package already
    pulls in the library implicitly.
  - Remove bogus Requires 'gdbm-devel'.  Nothing in the source mentions gdbm.
  - Use mkstemp instead of mktemp in ocamlyacc.
  - Add LICENSE as doc to some subpackages to keep rpmlint happy.
  - Remove .ignore file from some packages.
  - Remove period from end of Summary.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-4
changelog:
  - Add bundled(md5-plumb) (thanks: Tomas Mraz).
  - Add NON-upstream (but being sent upstream) patch to allow --flag=arg
    as an alternative to --flag arg (RHBZ#1028650).


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-8
changelog:
  - Don't use ifarch around Patch lines, as it means the patch files
    don't get included in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-14
changelog:
  - Remove ExclusiveArch.
  - Add ocaml-srpm-macros subpackage containing arch macros.
  - See: RHBZ#1087794


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22
changelog:
  - Update to last 4.01 version from OCaml git.
  - Fix bug in argument parsing
    resolves: rhbz#1139803


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22.2
changelog:
  - Use -fno-strict-aliasing when building the compiler
  - ppc, ppc64, ppc64le: Mark stack as non-executable.
    resolves: rhbz#990521
  - Provides ocaml(runtime) 4.01.1.
    related: rhbz#1098459


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Rebase to 4.05.0 (same as Fedora Rawhide).
  - Adds support for POWER, z/VM.
  - Improves support for aarch64.
    resolves: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 1.10-6
changelog:
  - ExcludeArch ppc64
  - Clarify license is LGPLv2
  - Add LGPL, COPYING, calendarFAQ-2.6.txt and doc/ subdirectory to docs.
  - BR +ocaml-ocamldoc


author: Richard W.M. Jones <rjones@redhat.com> - 2.0.4-1
changelog:
  - New upstream version 2.0.4 (rhbz #454789).
  - Fix non-UTF-8 characters in TODO.
  - *.cmx file moved to -devel subpackage as per packaging guidelines.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 2.01.1-5
changelog:
  - Replace %define with %global.
  - Use upstream RPM 4.8 OCaml dependency generator.
  - Suppress bogus requires as well as provides.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-2
changelog:
  - New upstream version 1.2.3.
  - New upstream location.
  - Clean up the spec file.
  - Remove patches since they are no longer relevant.
  - New setup appears to require ocamldoc.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-7
changelog:
  - Rebuild for OCaml 4.05.0
  - Add missing/implicit dependency on ocamlbuild.
    resolves: rhbz#1447992


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.3-1
changelog:
  - New upstream version 1.5.3.
  - Remove patch, now upstream.
  - Clean up the spec file.
  - Rebuild for OCaml 4.00.1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.0-3
changelog:
  - Fixed grammar in the description section.
  - License is LGPLv2 with exceptions
  - Include license file with both RPMs.
  - Include other documentation only in the -devel RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.0-2
changelog:
  - New upstream version 0.4.0.
  - Upstream build system has been rationalized, so remove all the
    hacks we were using.
  - Upstream now contains tests, run them.
  - Needs ounit in order to carry out the tests.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-2
changelog:
  - New upstream version 0.4.4.
  - Clean up the spec file.
  - Fix homepage and download URLs.
  - Don't use configure macro.  Upstream are using some sort of non-autoconf
    brokenness.
  - Rename text files as *.txt.  There is no 'api' directory any more.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-8
changelog:
  - Rebuild for OCaml 4.05.0
  - Remove bogus dependency on camlp4.
  - Add missing/implicit dependency on ocamlbuild.
    resolves: rhbz#1447989


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.2pl1-10
changelog:
  - BR added ocaml-ocamldoc so that ocamlfind ocamldoc works.
  - Fix path of camlp4 parsers in Makefile.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-1
changelog:
  - New upstream version 1.3.1.
  - This is required for programs using findlib and OCaml 4.00.0.
  - Add small patch to fix build of topfind.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Remove patch for OCaml 4 which has been obsoleted by upstream changes.


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.3-6
changelog:
  - Remove BRs on ocaml-camlp4 and ocaml-labltk.
  - Enable stripping and debuginfo on s390x.
  - Use ocaml_native_compiler macro instead of opt test.
    related: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-2rwmj20080321
changelog:
  - Build camomile subpackages because the camomile dependency is
    rather large.  However we can't build camomile on ppc64 yet so
    don't build those subpackages there.


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-3.20080321patch
changelog:
  - Change the naming scheme to conform with "Snapshot packages" guideline.
  - Don't duplicate all the docs in camomile-devel.
  - Disable documentation.  Wants 'fop', but 'fop' throws a giant Java
    exception when present.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.0-1
changelog:
  - New upstream version 0.3.0.
  - Big patch no longer required (integrated with upstream).
  - findlib < 1.2.1-3 known not to work with this.
  - build/ -> _build/
  - Re-enable documentation.
  - Prevent *.o files from being distributed.
  - Distribute *.cmx and *.mli files.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-1
changelog:
  - New upstream release 0.3.3 (mainly small bugfixes).
  - This requires ocaml-fileutils 0.4.0 and is incompatible with
    any earlier version.
  - Fixed a number of rpmlint warnings with *.ml files in the
    non-devel package.


author: Karsten Hopp <karsten@redhat.com> 0.3.3-7
changelog:
  - build with 'make all', not 'make' as that defaults to 'make test' and fails on ppc64
    due to the missing gettext-camomile


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.
  - Rebuild for OCaml 4.05.0
  - ExcludeArch s390, but build for s390x.
    resolves: rhbz#1447987


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.2.5-1
changelog:
  - New upstream version 0.3.2.5.
  - Keep TODO out of the main package, but add (renamed) TODO.libvirt and
    TODO.virt-top to the devel and virt-top packages respectively.
  - Add BR gawk.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3.0-1
changelog:
  - New upstream release 0.3.3.0.
  - Added support for virt-df, but disabled it by default.
  - +BR ocaml-calendar.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.1.0-1
changelog:
  - New upstream release 0.4.1.0.
  - Upstream now requires ocaml-dbus >= 0.06, ocaml-lablgtk >= 2.10.0,
    ocaml-dbus-devel.
  - Enable virt-df.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.2.2-1
changelog:
  - New upstream version.
  - Removed virt-ctrl, virt-df, virt-top subpackages, since these are
    now separate Fedora packages.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4.2-1
changelog:
  - New upstream version.
  - In upstream, 'make install' became 'make install-byte' or 'make install-opt'


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.1-1
changelog:
  - New upstream version 0.6.1.1.
  - Remove mlvirsh subpackage, no longer upstream.
  - Replace custom configure with RPM macro configure.
  - Use RPM global instead of define.
  - Use built-in RPM OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.2-5
changelog:
  - Modernise the spec file.
  - Add upstream patch to remove unnecessary get_cpu_stats second parameter
    (thanks Hu Tao).


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Richard W.M. Jones <rjones@redhat.com> - 2.3-0.1.svn234
changelog:
  - Update to latest version (subversion release 234).
  - Includes fix for CVE-2012-3514 - moderate impact hash table collisions
    (resolves: rhbz#787890).
  - Clean up the spec file and bring up to modern standards.
  - Add tests.


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
  - break shared libraries and modules for PAM and python into a subpackage
    for better behavior on multilib boxes
  - if we're not building a sample subpackage, include the sample files in
    the right locations as %doc files


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-3
changelog:
  - prefer BuildRequires: to BuildPrereq (#176452)
  - require /sbin/service at uninstall-time, because we use it (#176452)
  - be more specific about when we require /sbin/chkconfig (#176452)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - fix some path mismatches in the sample configuration files
  - don't try to set a reconnect timeout until after we've connected


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - fix compilation against older versions of D-BUS if the
    GetConnectionSELinuxSecurityContext method turns out to be available


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24, fixing some build errors against D-BUS 0.30-0.33
  - require xmlto, because the generated HTML differs depending on whether
    or not we know how to enforce ACLs which include SELinux context info
  - build with DocBook 4.3


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25:
    - add introspection for parents of objects specified in the configuration
    - oddjobd can reload its configuration now
    - add -u (umask) and -s (skeldir) flags to the mkhomedir helper (#246681)


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26-1:
    - don't get confused when ACL entries for introspection show up in the
      configuration before we add the handlers for them
    - export $ODDJOB_CALLING_USER to helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - split off python subpackage, make -devel depend on -libs, let autodeps
    provide the main package's dependency on -libs (#228377)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - split off mkhomedir bits into a subpackage (#236820)
  - take a pass at new-init-ifying the init script (#247005)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29.1-1
changelog:
  - when we install the mkhomedir subpackage, if there's a running oddjobd, ask
    it to reload its configuration
  - fix missing bits from the namespace changes in configuration files
  - restart the service in %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/%{name} to
    %{_libexecdir}/%{name} to make the multilib configuration files agree
    (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30.2-1
changelog:
  - don't try to "close" our shared connection to the bus when the bus
    hangs up on us -- at some point libdbus started abort()ing when we try
    that (#634356)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30.2-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (same as #636876)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when the mkhomedir helper has to create intermediate directories, don't
    apply a umask that might have been supplied on its command line (#666418)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31-1
changelog:
  - require dbus-x11 so that the tests can use dbus-launch
  - try to read the default umask from /etc/login.defs (more of #666418)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.1-1
changelog:
  - also tell the system message bus to reload its configuration when we install
    a subpackage with a new service in it


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-1
changelog:
  - refer to $local_fs instead of $localfs in the init script (#802719)
  - install a systemd unit file instead of an init script on still-in-development
    releases (#820137,818963)
  - build binaries position-independent and marked for earliest-possible symbol
    resolution (#852800)
  - don't worry about moving things from /usr to / when they're the same (#852800)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
  - correctly check the error returned from getpwnam_r(), so that we don't
    miss an ERANGE error (#1098616, part of #1108398)
  - add a note to pam_oddjob_mkhomedir's manual pointing to where the
    configuration would actually go (part of #1108398)
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
    proprocessor-input file as a reference, since we're patching it now


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-436
changelog:
  - Update to new upstream snapshot with unbundled 3rd party software.
  - Follow upstream spec file changes.
  - Related: bz1173309


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-438
changelog:
  - Initial packaging for RHEL, based on upstream spec file.
  - Cleaned up spec.
  - Moved /opt/opafm -> /usr/lib/opa-fm.
  - Fix scriptlets.


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-440
changelog:
  - Respect optflags.
  - Avoid overflowing prog path due to /opt -> /usr/lib substitution.
  - Resolves: bz1257087
  - Resolves: bz1257093


author: Honggang Li <honli@redhat.com> - 10.0.0.0-443
changelog:
  - Apply one missed patch to fix various /tmp races
  - Revert the script for building (S)RPMs
  - Resolves: bz1262327


author: Honggang Li <honli@redhat.com> - 10.3.1.0-8
changelog:
  - Rebase to upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1257452, bz1382792


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-2
changelog:
  - Modified SPEC to follow the conventions and guidelines.
  - Addressed review comments from Mohamed El Morabity.
  - Added systemd script.
  - Verified and built the RPMS for Fedora 18.
  - Fixed rpmlint warnings.
  - Split the UX components in a separate package for desktops.
  - Split the help files in a separate package for help.
  - Split the guestlib headers in a separate devel package.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-3
changelog:
  - Applied review fixes patch from Simone Caronni.
  - Added missing *.a and *.so files for devel package.
  - Removed unnecessary *.la plugin files from base package.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-4
changelog:
  - Applied part of review fixes patch from Simone Caronni for systemd setup.
  - Replaced tabs with spaces all over.


author: Simone Caronni <negativo17@gmail.com> - 9.2.2-5
changelog:
  - Added RHEL 5/6 init script.
  - Renamed SysV init script / systemd service file to vmtoolsd.
  - Fixed ownership of files from review.
  - Moved api documentation in devel subpackage.
  - Removed static libraries.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-6
changelog:
  - Replaced vmtoolsd with a variable.
  - Changed summary for subpackages to be more specific.
  - Removed drivers.txt file as we don't really need it.
  - Fixed vmGuestLib ownership for devel package.
  - Removed systemd-sysv from Requires for Fedora 18+ and RHEL 7+.
  - Made all "if" conditions consistent.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-7
changelog:
  - Applied patch from Simone for removal of --docdir option from configure.
  - Removed unnecessary --enable-docs option from configure.
  - Removed doxygen dependency.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-8
changelog:
  - Removed FreeSans.ttf font file from packaging.
  - Added 'rm' command to remove font file in %check section because
    'make check' adds it back.
  - Added doxygen dependency back.


author: Simone Caronni <negativo17@gmail.com> - 9.2.2-9
changelog:
  - Removed rm command in %check section.
  - Remove blank character at the beginning of each changelog line.


author: Ravindra Kumar <ravindrakumar at vmware.com> - 9.2.2-10
changelog:
  - Addressed formal review comments from Simone Caronni.
  - Removed %check section because 'make check' brings font file back.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-12
changelog:
  - Removed %defattr and BuildRoot.
  - Added ExclusiveArch.
  - Replaced /usr/sbin/ldconfig with /sbin/ldconfig.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-1
changelog:
  - Package new upstream version open-vm-tools-9.2.3-1031360.
  - Removed configure options CUSTOM_PROCPS_NAME (for libproc) and
    -Wno-deprecated-declarations as these have been addressed in
    open-vm-tools-9.2.3-1031360.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-5
changelog:
  - Renamed source file open-vm-tools.service -> vmtoolsd.service
    to match it with the service name.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-10
changelog:
  - Added options for hardening build (bug 990549). 
  - Excluded unwanted file mount.vmhgfs from packaging (bug 990547).
  - Removed deprecated key "Encoding" from "Desktop Entry" (bug 990552).


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-1
changelog:
  - Package new upstream version open-vm-tools-9.4.0-1280544.
  - Added CUSTOM_PROCPS_NAME=procps and -Wno-deprecated-declarations
    for version 9.4.0.


author: Richard W.M. Jones <rjones@redhat.com> - 9.4.0-4
changelog:
  - Removed unnecessary package dependency on 'dbus'
  - Moved 'vm-support' script to /usr/bin
  - Added a call to 'tools.set.version' RPC to inform VMware
    platform when open-vm-tools has been uninstalled
  - Add missing package dependency on 'which' (BZ#1045709)
  - Add missing package dependencies (BZ#1045709, BZ#1077320)


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.2-1
changelog:
  - Package new upstream version open-vm-tools-9.10.2-2822639
  - Removed the patches that are no longer needed
    resolves: rhbz#1172833


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-2
changelog:
  - Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
    resolves: rhbz#1268537
  - Remove PAM calls to pam_unix2.so module
    resolves: rhbz#1313071


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-4
changelog:
  - Fix failure to quiesce filesystem when Docker containers are running
    resolves: rhbz#1406483
  - Fix for deadlock when taking a snapshot
    resolves: rhbz#1398802


author: Richard W.M. Jones <rjones@redhat.com> - 10.1.5-1
changelog:
  - Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
    resolves: rhbz#1406901
  - Enable vgauthd.
    resolves: rhbz#1269243
  - Add runtime dependency on pciutils (1388766).


author: Brad Hards <bradh@frogmouth.net> - 0:0.8-0.2.svnr674.fc10
changelog:
  - Bump version
  - Install documentation / man pages correctly
  - Remove epoch (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Remove %post and %postun (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Remove talloc dependency (per https://bugzilla.redhat.com/show_bug.cgi?id=453395)
  - Take out libmapiproxy, because we aren't up to server side yet.


author: Simo Sorce <ssorce@redhat.com> - 0.10.9-2
changelog:
  - New snapshot that avoid bison issues.
  - Also add patch that fix build (previously erroneously preapplied in the
    snapshot tarball)
  - Fix timestamps in tarball
  - Fix specfile's install and files section to cope with newer version changes


author: Matthew Barnes <mbarnes@redhat.com> - 0.10.9-3
changelog:
  - Move libmapiproxy.so, libmapistore.so and mapistore backend libraries
    to the main package so the client subpackage is installable.


author: Matthew Barnes <mbarnes@redhat.com> - 0.10.9-4
changelog:
  - OpenChange relies on a private Samba 4 library (libsamba-util-common).
    Add extra linker flags to libmapi.pc to compensate.


author: Milan Crha <mcrha@redhat.com> - 0.11-1
changelog:
  - Update to OpenChange 0.11 Transporter upstream release
  - Remove unnecessary build modification patches.
  - Add patch to not use mapi_ctx->session as a TALLOC_CTX (OpenChange issue #366)
  - Add patch to read/write PidNameKeywords (OpenChange issue #367)


author: Milan Crha <mcrha@redhat.com> - 1.0-1
changelog:
  - Update to 1.0
  - Enable packages for server part and python bindings
  - Skip man3 pages, which are generated incomplete (use devhelp instead)


author: Milan Crha <mcrha@redhat.com> - 1.0-7
changelog:
  - Add patch to use system's popt.h
  - Add patch to compile only certain parts of the package
  - Disable openchange-server for rawhide too (due to samba4 changes)


author: Milan Crha <mcrha@redhat.com> - 1.0-8
changelog:
  - Add patch for OpenChange bug #397 (crash under MAPIUninitialize)
  - Disable build of python and mapiproxy


author: Michal Schmidt <mschmidt@redhat.com> - 2.2.8-4
changelog:
  - Return support for crypto hw on s390.
  - Renamed to opencryptoki.
  - Simplified multilib by putting libs in subpackage as suggested by Dan Horák.


author: Dan Horák <dan[at]danny.cz> - 2.4.1-1
changelog:
  - new upstream release 2.4.1
  - convert from initscript to systemd unit
  - import fixes from RHEL-6 about root's group membership (#732756, #730903)


author: Dan Horák <dan[at]danny.cz> - 2.4.2-3
changelog:
  - add virtual opencryptoki(token) Provides to token modules and as Requires
    to main package (#904986)


author: Dan Horák <dan[at]danny.cz> - 3.0-8
changelog:
  - include token specific directories (#1013017, #1045775, #1054442)
  - fix pkcsconf crash for non-root users (#1054661)
  - the libs subpackage must care of creating the pkcs11 group, it's the first to be installed
  - fix build with -Werror=format-security (#1037228)
  - Resolves: #1054442, #1054661


author: Petr Lautrbach <plautrba@redhat.com> 3.2-3
changelog:
  - Correctly declare OAEP parameter in RSA Wrap tests to prevent a possible
    scope issue (#1088512)
  - several fixes for pkcsep11_migrate


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-1
changelog:
  - New upstream release (#1185421)
  - Fix translating ICSF return code (#1306654)
  - Fix getObjectsize call for opencryptoki ICSF token (#1303839)
  - Fix for openCryptoki ICSF token failure (#1300194)


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-3
changelog:
  - Few more issues reported by Coverity
  - Fix Segfault when trace in enabled in api_interface.c
  - Fix the misleading indentation
  - Fix memory leak by closing the lock file descriptor in C_Final


author: Jakub Jelen <jjelen@redhat.com> - 3.5-2
changelog:
  - icsf token does not validate data length for verify operation for ECDSA (#1344383)
  - Create lock and log directories from opencryptoki (#1343671)
  - Create log directory with appropriate permissions (#1185421)
  - Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
  - Fix for session handle not set in session issue (#1348804)
  - Fix memory leak in icsf specific code


author: Sinny Kumari <skumari@redhat.com> - 3.5-6
changelog:
  - RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
  - RHBZ#1372188: fix illegal instruction on pkcscca tool


author: Sinny Kumari <skumari@redhat.com> - 3.6.2-1
changelog:
  - Rebase opencryptoki to 3.6.2
  - Remove patches from spec file applied during 3.5 release
  - Resolves: #1391559, #1380784, #1417905


author: Simon Perreault <nomis80@nomis80.org> - 0.9.7-3
changelog:
  - Removed useless sample compilation makefiles/project files and replaced them
    with one that works on Fedora Core.
  - Removed shellbang from Python modules.


author: Ralf Corsépius <rc040203@freenet.de> - 1.0.0-3
changelog:
  - Fix %{_datadir}/opencv/samples ownership.
  - Adjust timestamp of cvconfig.h.in to avoid re-running autoheader.


author: kwizart < kwizart at gmail.com > - 1.0.0-14
changelog:
  - Fix for gcc44
  - Enable BR jasper-devel
  - Disable ldconfig run on python modules (uneeded)
  - Prevent timestamp change on install


author: kwizart < kwizart at gmail.com > - 1.1.0-0.1.pre1
changelog:
  - Update to 1.1pre1
  - Disable CXXFLAGS hardcoded optimization
  - Add BR: python-imaging, numpy
  - Disable make check failure for now


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-8
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Nicolas Chauvet <kwizart@gmail.com> - 2.3.1-1
changelog:
  - Update to 2.3.1
  - Add BR openni-devel python-sphinx
  - Remove deprecated cmake options
  - Add --with cuda conditional (wip)
  - Disable make test (unavailable)


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.1-1
changelog:
  - Update to 2.4.1
  - Rework dependencies - rhbz#828087
    Re-enable using --with tbb,opennpi,eigen2,eigen3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.3-2
changelog:
  - Disable SSE3 and allow --with sse3 build conditional.
  - Disable gpu module as we don't build cuda
  - Update to 2.4.3


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.4-0.1.beta
changelog:
  - Update to 2.4.4 beta
  - Drop python-imaging also from requires
  - Drop merged patch for additionals codecs
  - Disable the java binding for now (untested)


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-2
changelog:
  - Changed conf.xml to reference softhsm at /usr/lib64/pkcs11/libsofthsm2.so
  - Updated Requires: to softhsm >= 2.0.0b1-2


author: Phil Knirsch <pknirsch@redhat.com> 1.9.1-1
changelog:
  - Added proper BuildRequires
  - Drop ia64 for first build, something fishy with the compiler and warning.


author: Phil Knirsch <pknirsch@redhat.com> 1.9.2-2
changelog:
  - Fixed overflow in plugins/sysfs/sysfs2hpi.c
  - Fixed rebuild problem with latest net-snmp
  - Removed is_simulator patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-1
changelog:
  - Moved the pkgconfig files to the devel package (#152507)
  - Update to openhpi-2.0.3
  - Had to manually disable ipmi support for now until openhpi builds correctly
    against it again
  - Dropped net-snmp-config patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-4
changelog:
  - Added the openhpi config file
  - Added missing /var/lib/openhpi dir with proper rights
  - Added a few missing BuildPreReqs


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Dan Horák <dhorak@redhat.com> - 3.7.0-1
changelog:
  - rebased to 3.7.0 (#1507619)
  - fix test-suite run under root (#1267928)
  - Resolves: #1507619, #1267928


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with stylesheets (new-trials location changes).
  - /usr/lib/sgml -> /usr/share/sgml/%{name}-%{version}.
  - Remove %post and %postun.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - apply patch from Fritz Elfert <felfert@to.com>
  	- removed explicit stripping
  	- Added autoconf macro for correctly recognizing if size_t
  	  is unsigned int


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't conflict with stylesheets; require sgml-common >= 0.5 instead.
  - Revert autoconf change, as it's still broken.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Apply original autoconf patch to s390 s390x only. This patch can
    be deleted once s390* uses a current compiler.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Avoid creating bogus TeX output for section headings containing
    special characters (#bug 31525).


author: Tim Waugh <twaugh@redhat.com> 1.3-21
changelog:
  - Enable HTTP support.  Now a DocBook XML document can be processed by
    either xsltproc or openjade.


author: Tim Waugh <twaugh@redhat.com> 1.3.1-1
changelog:
  - 1.3.1.
  - Patches no longer needed: decl, strdup, foo, size_t, 31525, indev,
    ligature, twosidestartonright.
  - Updated lt patch.


author: Terje Bless <link@pobox.com> 1.3.2-17
changelog:
  - Split opensp out into its own package.
  - BuildRequire OpenSP-devel, Require OpenSP.
  - Drop openjade-1.3.1-manpage.patch (it patches opensp, not openjade, and is
    obsolete with external opensp).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.2-18
changelog:
  - Really BuildRequire opensp-devel.
  - Clean up unneeded build dependencies and configure options.
  - Drop dependency on docbook-dtds.
  - Fix %post(un) syntax and catalog installation.


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Tim Waugh <twaugh@redhat.com> 1.3.2-28
changelog:
  - Don't ship .so or .la files (bug #203635).
  - Added dist tag to release.
  - Fixed summary.
  - Fixed build root.
  - Removed prefix tag.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Adam Goode <adam@spicenitz.org> - 1.3-8
changelog:
  - Fix typo in description
  - Fix charset of ChangeLog (rpmlint)
  - Fix file permissions (rpmlint)
  - Make summary more clear (rpmlint)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-9
changelog:
  - include test samples, enable tests
  - tighten subpkg deps
  - explicitly set/use -DBUILD_SHARED_LIBS:BOOL=ON
  - move %doc files to -libs


author: Tomas Hoger <thoger@fedoraproject.org> - 1.3-10
changelog:
  - Use calloc in opj_image_create0 (SVN r501, rhbz#579548)
  - Avoid NULL pointer deref in jp2_decode (SVN r505, rhbz#609385)


author: Rex Dieter <rdieter@fedoraproject.org> 1.5.1-3
changelog:
  - int main() in t1_generate_luts.c breaks mplayer (issue#152)
  - jp2_read_boxhdr() can trigger random pointer memory access (issue#155)
  - missing range check in j2k_read_coc et al (issue#166)
  - division by zero in j2k_read_siz (issue#169)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-4
changelog:
  - support TLS 1.1 and later (#1160468)
  - fix: /etc/openldap/certs directory is empty after installation (#1064251)
  - fix: Typo in script to generate /usr/libexec/openldap/generate-server-cert.sh (#1087490)
  - fix: remove correct tmp file when generating server cert (#1103101)
  - fix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-5
changelog:
  - add documentation reference to service file (#1087288)
  - fix: tls_reqcert try has bad behavior (#1027613)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-1
changelog:
  - new upstream release (#1147982)
  - fix: PIE and RELRO check (#1092562)
  - fix: slaptest doesn't convert perlModuleConfig lines (#1184585)
  - fix: OpenLDAP crash in NSS shutdown handling (#1158005)
  - fix: slapd.service may fail to start if binding to NIC ip (#1198781)
  - fix: deadlock during SSL_ForceHandshake when getting connection to replica (#1125152)
  - improve check_password (#1174723, #1196243)
  - provide an unversioned symlink to check_password.so.1.1 (#1174634)
  - add findutils to requires (#1209229)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-5
changelog:
  - enhancement: support TLS 1.1 and later (#1231522,#1160467)
  - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522)
  - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Radek Novacek <rnovacek@redhat.com> - 0.0.10-1
changelog:
  - Package rename to openlmi-providers (instead of cura-providers)
  - helper scripts moved from usr/share to proper location
  - Version 0.0.10


author: Radek Novacek <rnovacek@redhat.com> 0.0.18-2
changelog:
  - Add upstream patch with improvements of OpenLMIMacros.cmake
  - Add requirement for cim-server also to pre, preun and post


author: Radek Novacek <rnovacek@redhat.com> 0.0.19-1
changelog:
  - Version 0.0.19
  - Add LogicalFile provider
  - Require konkretcmpi >= 0.9.0-2
  - Install openlmi-doc-class2* scripts


author: Michal Minar <miminar@redhat.com> 0.0.20-1
changelog:
  - Version 0.0.20
  - Added shared LMI_Jobs.mof file.
  - This file is registered upon installation of openlmi-providers.


author: Radek Novacek <rnovacek@redhat.com> 0.0.21-1
changelog:
  - Version 0.0.21
  - Added openlmi-realmd subpackage
  - Add numeral prefix for the mof files
  - Add FindOpenLMI.cmake and openlmi.pc to the -devel subpackage


author: Radek Novacek <rnovacek@redhat.com> 0.1.0-1
changelog:
  - Version 0.1.0
  - Add profile registration
  - New provider: openlmi-pcp
  - Split openlmi-python to openlmi-python-base and openlmi-python-providers


author: <jsafrane@redhat.com> 0.1.0-2
changelog:
  - Correctly obsolete openlmi-python package
  - Remove dependency between openlmi-python-base and openlmi-providers


author: Michal Minar <miminar@redhat.com> 0.2.0-1
changelog:
  - Version 0.2.0
  - Enhancement in software api.
  - Added openlmi-account-doc package with admin guide.
  - Fixed installation of python packages.


author: Roman Rakus <rrakus@redhat.com> - 0.3.0-1
changelog:
  - Version 0.3.0
  - Enhancement in account api.
  - per provider configuration files as well as global configuration files
  - Define crypto algorithms for passwords in Account providers
    Resolves: #1004296, #1007251, #999410, #999487, #1001636, #1002531, #1004221,


author: Tomas Smetana <tsmetana@redhat.com> 0.4.1-9
changelog:
  - Fix the reregister feature of the registration script
  - Make openlmi-providers own the registration database and directories
  - Resolves: rhbz#1030972, rhbz#1029008


author: Radek Novacek <rnovacek@redhat.com> 0.4.1-10
changelog:
  - Fix missing format strings
  - Add format string hardening
  - realmd: remove potentially unsecure octetstring_parse function
  - Resolves: rbhz#1031644, rhbz#1031655, rhbz#1031658


author: Michal Minar <miminar@redhat.com> 0.4.1-12
changelog:
  - Added Software fixes.
  - Resolves: rhbz#1005803 rhbz#1028519 rhbz#1027681 rhbz#1030999 rhbz#1028535
  - Resolves: rhbz#1031132 rhbz#1032502 rhbz#1032480 rhbz#1030831 rhbz#1032590
  - Resolves: rhbz#1034615 rhbz#1034698 rhbz#1035328 rhbz#1036291


author: Jan Synáček <jsynacek@redhat.com> - 0.4.1-14
changelog:
  - Correctly fill FSCreationClassName and FSName
  - Rewrite description of PowerStatesSupported property (power provider)
  - Always init provider when starting (power provider)
  - Resolves: rhbz#1042843, rhbz#1042718, rhbz#1041310


author: Jan Safranek <jsafrane@redhat.com> - 0.4.1-16
changelog:
  - Fixed openlmi-mof-register not to crash when CIMOM is down
  - Added another bunch of software bugfixes.
  - Resolves: rhbz#1039018 rhbz#1032590 rhbz#1043243
  - Resolves: rhbz#1045058 rhbz#1043161 rhbz#1049389


author: Jan Synáček <jsynacek@redhat.com> - 0.4.2-3
changelog:
  - Correctly fill FSCreationClassName and FSName
  - Replace thread-unsafe functions
  - Resolves: rhbz#1042843 rhbz#1050841


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.4.2-4
changelog:
  - Fix service methods report success before the action is actually finished
  - Add description to service methods
  - Fan provider made thread-safe
  - Resolves: rhbz#1049819 rhbz#1049816 rhbz#1031650


author: Radek Novacek <rnovacek@redhat.com> 0.0.3-1
changelog:
  - Update to 0.0.3
  - BR: cura-providers
  - Don't install files that are common with cura-providers
  - Prefix changed to LMI_


author: Radek Novacek <rnovacek@redhat.com> 0.2.0-1
changelog:
  - Version 0.2.0
  - Add -doc subpackage
  - Remove dependency on sblim-cmpi-base
  - Resolves: rhbz#1012549, rhbz#1011903


author: Radek Novacek <rnovacek@redhat.com> 0.2.1-3
changelog:
  - Use proper classname of slave SettingData in CreateSlaveSetting
  - bridging: Don't forget master setting when modifying slave setting
  - fix the tests
  - Fix potential crash when setting master connection that not exists
  - Resolves: rhbz#1035674, rhbz#1035676


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
  - Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
  - Support connections that has interface-name option specified
  - Fix that bond slave names are not going above 2
  - allow virtual device name change for bonds
  - Resolves: #1064215, #1064324, #1064280, #1064334


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-4
changelog:
  - Fix IPv6Type property of LMI_IPAssignmentSettingData class for DHCPv6
  - React to IP configuration change
  - Resolves: #1066853, #1069169


author: Jan Safranek <jsafrane@redhat.com> - 0.3
changelog:
  - Update to 0.2.1
  - Add post/preun RPM scriptlets to register MOFs and providers
    with Pegasus and/or SFCB


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-1
changelog:
  - Added adjustments for separate SELinux policy for the provider.
  - Renamed root/PG_interop to root/interop.
  - New upstream release.


author: Jan Safranek <jsafrane@redhat.com> - 0.6.0-1
changelog:
  - New upstrem version.
    - Added documentation to openlmi-storage-doc subpackage.
    - Reworked logging.


author: Jan Synáček <jsynacek@redhat.com> - 0.7.0-2
changelog:
  - Fixed mounting associations (#1035354).
  - Fixed LMI_LVStorageCapabilities.GetInstance (#1034803)
  - Fixed LMI_VGElementCapabilities registration (#1034853)
  - Fixed LMI_MemberOfBlockStatisticsManifestCollection.GetInstance (#1035686)
  - Added implementation of LMI_FileSystemCapabilities (#1035305)


author: Jan Safranek <jsafrane@redhat.com> - 0.7.0-8
changelog:
  - Added dist tag to Release.
  - Removed unimplemented classed from MOF files (#1042743).
  - Fixed LMI_MDRAIDElementCapabilities.GetInstance call (#1043932).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-2
changelog:
  - Fix CreateOrModifyStoragePool exception (#1054144).
  - Fixed reloading of blivet after mount (#1054177).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-3
changelog:
  - The provider now removes physical volume metadata from all member devices
    when a volume group is destroyed (#1057692).
  - Fixed listing of mounts of MD RAID volumes (#1057666).


author: Peter Hatina <phatina@redhat.com> - 0.9-21
changelog:
  - CWD is by default appended in search path
  - introduced CLI option --cwd-first-in-path which prepends
    CWD in search path
  - Related: #1072252


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.5-3
changelog:
  - Drop obex_test program, as it is just for testing purposes
    and has some problems with multiple stack overflows etc.
    Resolves: #521663


author: Tomas Hozza <thozza@redhat.com> - 1.5-6
changelog:
  - changing not working Source0 URL and some minor changes in %prep
  - new source archive openobex-1.5.0-Source.zip


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.8.0-0.fdr.0.2.cvs20030730
changelog:
  - Update to 20030730.
  - Clean up %docs.
  - Include *.la (uses ltdl).
  - Own the %{_libdir}/pkcs11 directory.
  - Disable signer; assuan has disappeared from the tarball :(


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.2-0.fdr.1
changelog:
  - Update to 0.9.2, old patches applied upstream.
  - Add patch to fix parallel builds.
  - Convert man pages to UTF-8.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.2-0.fdr.2
changelog:
  - Building the signer plugin can be disabled with "--without signer".
    Thanks to Fritz Elfert for the idea.
  - Update description.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.4-0.fdr.1
changelog:
  - Update to 0.9.4, parallel build patch applied upstream.
  - Patch to fix library paths and LDFLAGS.
  - Don't require mozilla, but the plugin dir in signer.
  - Build with dependency tracking disabled.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.4-1
changelog:
  - Drop unnecessary Epochs, pre-FC1 compat cruft, and no longer relevant
    --with(out) rpmbuild options.
  - Exclude *.la.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.9.4-2
changelog:
  - Substitute hardcoded 'lib' in OpenSSL checks for multi-lib platforms.
  - Use --with-plugin-dir instead of --with-plugin-path (fixes x86_64).


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.6-2
changelog:
  - 0.9.6, build patch applied upstream.
  - Package summary and description improvements.
  - Drop explicit openct dependency.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.11.2-0.1.pre3
changelog:
  - 0.11.2-pre3.
  - Build with new libassuan.
  - Don't run autotools during build.
  - Adjust to readline/termcap/ncurses changes.


author: Kalev Lember <kalev@smartlink.ee> - 0.11.12-1
changelog:
  - new upstream version
  - replaced %define with %global
  - BR clean up from items not applicable to current Fedora releases


author: Kalev Lember <kalev@smartlink.ee> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Removed and obsoleted mozilla-opensc-signer and opensc-devel subpackages
  - Dropped patches which are now upstreamed
  - It is no longer possible to build in both pcsc-lite and openct support,
    so opensc now gets built exclusively with pcsc-lite.


author: Milan Broz <mbroz@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0 (#890770)
  - Remove no longer provided onepin-opensc-pkcs11.so.
  - Add iasecc-tool, openpgp-tool and sc-hsm-tool.


author: Stef Walter <stefw@redhat.com> - 0.13.0-4
changelog:
  - Use the standard name format for p11-kit module configs
  - Put the p11-kit module config is the system location


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-2.20170227git
changelog:
  - Add support for CardOS 5.3
  - Fix coverity issues
  - Provide simple tool to swith PKCS#11 library in NSS DB


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-6.20170227git
changelog:
  - Use label from certificate DN if there is none (#1448555)
  - Use Cardholder name in the token label (#1449740)
  - Avoid infinite loop when reading CAC cards (#1473335)
  - Workaround for CAC Alt tokens (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-8.20170227git
changelog:
  - Copy labels from certificate (#1448555)
  - Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
  - Properly parse Simple TLV structures in CAC driver (#1473418)


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Šimon Lukašík <slukasik@redhat.com> - 1.1.1-2
changelog:
  - STIG-generated results contain var_ref without var_check (#1159289)
  - Probes failed to stop by USR1 signal as specified (#1165139)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.13-1
changelog:
  - Upgrade to the latest upstream release
  - Added --thin-results CLI override to oscap xccdf eval
  - Added --without-syschar CLI override to oscap xccdf eval
  - Remediations are not filtered by applicability
  - Fixed segmentation faults in XCCDF and OVAL processing
  - Added a warning on generating an ARF from XCCDF 1.1


author: Jan Černý <jcerny@redhat.com> - 1.2.14-1
changelog:
  - Upgrade to the latest upstream release
  - Detailed information about ARF files in 'oscap info'
  - Generating remediation scripts from ARF
  - HTML report UX improvements
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
  - Fixed systemd probes crashes inside containers (#1431186)
  - Fixed output on terminals with white background (#1365911)
  - Error handling in oscap-vm (#1391754)
  - Fixed SCE stderr stalling (#1420811)
  - Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
  - Fixed segmentation faults in RPM probes (#1414303, #1414312)
  - Fixed missing header in result-oriented Ansible remediations


author: Martin Preisler <mpreisle@redhat.com> - 1.2.14-2
changelog:
  - RPM probes to return not applicable on non-rpm systems (#1447629)
  - fixed sysctl tests on s390x architecture (#1447649)
  - Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)


author: Jan Černý <jcerny@redhat.com> - 1.2.15-1
changelog:
  - upgrade to the latest upstream release
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information (#1439813)
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe
  - added Fedora 28 CPE
  - fixed oscap-docker with Docker >= 2.0
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts
  - severity of tailored rules is not discarded
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap
  - fixed pkgconfig file


author: Matěj Týč <matyc@redhat.com> - 1.2.16-1
changelog:
  - upgrade to the latest upstream release
  - moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies


author: Matěj Týč <matyc@redhat.com> - 1.2.16-2
changelog:
  - moved oscap-docker to newly created openscap-containers.
  - moved man of oscap-chroot to oscap-scanner.


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-2 + 0.9.3-4
changelog:
  - keep track of which IndentityFile options were manually supplied and
    which were default options, and don't warn if the latter are missing.
    (mindrot#2084)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-3 + 0.9.3-4
changelog:
  - sshd.service: use KillMode=process (#890376)
  - add latest config.{sub,guess} to support aarch64 (#926284)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-4 + 0.9.3-5
changelog:
  - don't show Success for EAI_SYSTEM (#985964)
  - make sftp's libedit interface marginally multibyte aware (#841771)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010361)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed (#1001566)
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-4 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-8
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-5 + 0.9.3-8
changelog:
  - use tty allocation for a remote scp (#985650)
  - run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set (#969375)
  - FIPS mode - adjust the key echange DH groups and ssh-keygen according toSP800-131A (#1001748)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-7 + 0.9.3-8
changelog:
  - log fipscheck verification message into syslog authpriv
  - ssh-keygen - relative-specified certificate expiry time should be relative
    to current time and not the validity start time (#1058234)
  - use the size of security of 3des for DH (#1053107)
  - ssh-copy-id.1 man page fix (#1058792)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-1 + 0.9.3-9
changelog:
  - new upstream release (#1059667)
  - prevent a server from skipping SSHFP lookup - CVE-2014-2653 (#1081338)
  - make /etc/ssh/moduli file public (#1134448)
  - test existence of /etc/ssh/ssh_host_ecdsa_key in sshd-keygen.service
  - don't clean up gssapi credentials by default (#1134447)
  - ssh-agent - try CLOCK_BOOTTIME with fallback (#1134449)
  - disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6
  - add support for ED25519 keys to sshd-keygen and sshd.sysconfig
  - standardise on NI_MAXHOST for gethostname() string lengths (#1097665)
  - set a client's address right after a connection is set (mindrot#2257) (#912792)
  - apply RFC3454 stringprep to banners when possible (mindrot#2058) (#1104662)
  - don't consider a partial success as a failure (mindrot#2270) (#1112972)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9
changelog:
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)
  - log when a client requests an interactive session and only sftp is allowed (#1130198)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9
changelog:
  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9
changelog:
  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9
changelog:
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-13 + 0.9.3-9
changelog:
  - Increase limit of files for glob match in sftp (#1160377)
  - Add pam_reauthorize.so to /etc/pam.d/sshd (#1204233)
  - Show all config values in sshd test mode (#1187597)
  - Document required selinux boolean for working ssh-ldap-helper (#1178116)
  - Consistent usage of pam_namespace in sshd (#1125110)
  - Fix auditing when using combination of ForcedCommand and PTY (#1199112)
  - Add sftp option to force mode of created files (#1197989)
  - Ability to specify an arbitrary LDAP filter in ldap.conf for ssh-ldap-helper (#1201753)
  - Provide documentation line for systemd service and socket (#1181591)
  - Provide LDIF version of LPK schema (#1184938)
  - Document TERM environment variable (#1162683)
  - Fix ssh-copy-id on non-sh remote shells (#1201758)
  - Do not read RSA1 hostkeys for HostBased authentication in FIPS (#1197666)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-14 + 0.9.3-9
changelog:
  - Fix ldif schema to have correct spacing on newlines (#1184938)
  - Add missing values for sshd test mode (#1187597)
  - ssh-copy-id: tcsh doesnt work with multiline strings (#1201758)
  - Fix memory problems with newkeys and array transfers (#1223218)
  - Enhance AllowGroups documentation in man page (#1150007)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-15 + 0.9.3-9
changelog:
  - One more typo in manual page documenting TERM variable (#1162683)
  - Fix race condition with auditing messages answers (#1240613)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-17 + 0.9.3-9
changelog:
  - Security fixes released with openssh-6.9 (CVE-2015-5352) (#1247864)
   - XSECURITY restrictions bypass under certain conditions in ssh(1) (#1238231)
   - weakness of agent locking (ssh-add -x) to password guessing (#1238238)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-20 + 0.9.3-9
changelog:
  - Fix vulnerabilities published with openssh-7.0 (#1265807)
   - Privilege separation weakness related to PAM support
   - Use-after-free bug related to PAM support


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-23 + 0.9.3-9
changelog:
  - Disable undocumented feauture Roaming for good (#1298218)
  - prevents CVE-2016-0777 and CVE-2016-0778


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-26 + 0.9.3-9
changelog:
  - Drop glob patch for sftp client preventing listing many files (#1310303)
  - Fix race condition between audit messages from different processes (#1310684)
  - Make systemd service forking to properly report state (#1291172)
  - Get rid of rpm triggers for openssh-5.x (#1312013)
  - Generate the host keys when the key files are empty (#1266043)
  - pam_ssh_agent_auth: authorized_keys_command option (#1317858)
  - Don't use MD5 digest from pam_ssh_agent_auth in FIPS mode (#1317952)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-27 + 0.9.3-9
changelog:
  - Coverity and RPMDiff build issues (#1334326)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (#1329191)
  - Check for real location of .k5login file (#1328243)
  - close ControlPersist background process stderr (#1335540)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-28 + 0.9.3-9
changelog:
  - SFTP force permission collision with umask (#1344614)
  - Make closefrom() ignore FD's to /dev/ devices on s390 (#1318760)
  - Create a default value for AuthenticationMethods any (#1237129)
  - Fix ssh-copy-id with LogLevel=quiet (#1349556)
  - Expose more information to PAM (#1312304)
  - Move MAX_DISPLAYS to a configuration option (#1341302)
  - Add a wildcard option to PermitOpen directive (host) (#1344106)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.3-1
changelog:
  - Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
  - detach -cavs subpackage
  - enable seccomp filter for sandboxed child


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.3-1
changelog:
  - Fix coverity scan results
  - Adjust FIPS algorithms list (#1420910)
  - Revert problematic feature for chroot(#1418062)
  - Fix CBC weakness in released OpenSSH 7.5


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
  - Remove wrong coverity patches


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-5 + 0.10.3-1
changelog:
  - Fix the default key exchange proposal in FIPS mode (#1438414)
  - Remove another wrong coverity chunk to unbreak gsskex (#1438414)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


