# changelog

author: Petr Pisar <ppisar@redhat.com> 1.009-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Install into perl core directory
  - Hack %check for rpmbuild bug #672538


author: Paul Howarth <paul@city-fan.org> - 0.9-1
changelog:
  - Update to 0.9 (fix warnings on very old perls - CPAN RT#58442)
  - Use DESTDIR instead of PERL_INSTALL_ROOT
  - Add %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.9-5
changelog:
  - Restore EPEL-4 compatibility
  - perl(Pod::Coverage::TrustPod) is available everywhere now
  - %{?perl_default_filter} isn't needed for this tiny package
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.0-1
changelog:
  - Update to 1.0
    - Fix misleading test failure diagnostics when only issue is trailing
      whitespace
    - No longer blindly assume utf8 on input files (CPAN RT#59877)
    - Properly document testing options
  - This release by RIBASUSHI -> update source URL
  - Drop upstreamed patch for CPAN RT#59877
  - Update patch for building with old ExtUtils::MakeMaker versions


author: Paul Howarth <paul@city-fan.org> - 1.1-1
changelog:
  - Update to 1.1
    - Fix test fails on < 5.8 perls
    - Fix t/13-latin1.t failures on Win32 and under TB1.5
  - Add buildreqs for required core modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
  - Update to 1.2
    - Fix bad regex matching directories containing 'svn', not just '.svn'
      directories (CPAN RT#75968)
  - BR: perl(Cwd)
  - Drop non-dual-lived buildreqs perl(File::Find) and perl(FindBin)
  - This release by BOBTFISH -> update source URL
  - Remove tabs from bundled Module::Install that break release tests
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.3-1
changelog:
  - Update to 1.3
    - Fix to ignore inc/ directory used by Module::Install
  - Drop hack to remove tabs from bundled Module::Install
  - Bump version requirement for perl(Test::NoTabs) to 1.2 to avoid failing
    release tests due to tabs in bundled Module::Install


author: Paul Howarth <paul@city-fan.org> - 1.3-6
changelog:
  - Reinstate EPEL-5 compatibility
  - Drop redundant patch for building with ExtUtils::MakeMaker < 6.30


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - Drop executable bits.


author: Chris Weyl <cweyl@alumni.drew.edu> 0.29-1
changelog:
  - auto-update to 0.29 (by cpan-spec-update 0.01)
  - altered br on perl(Module::Build) (0 => 0.35)
  - altered br on perl(Test::Builder) (0 => 0.7)
  - altered br on perl(Test::Builder::Tester) (0 => 1.07)
  - added a new br on perl(Test::Harness) (version 2.03)
  - added a new br on perl(Test::More) (version 0.7)
  - added a new br on perl(Test::Simple) (version 0.7)


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
  - Update to 0.32
    - Fixed tests that broke due to diagnostic changes in Test::More 0.99
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Remove bogus exec permission on Changes file


author: Paul Howarth <paul@city-fan.org> 0.002-1
changelog:
  - Update to 0.002
    - Add tests for handling of false exceptions
    - Fix precedence error in documentation
  - Update versions patch


author: Paul Howarth <paul@city-fan.org> 0.004-1
changelog:
  - Update to 0.004
    - success blocks now allow trailing blocks like finally, catch, etc.
  - Remove remaining uses of macros for commands
  - Re-order %install section to conventional position in spec


author: Paul Howarth <paul@city-fan.org> 0.006-1
changelog:
  - Update to 0.006
    - Crank back the Test::More and Exporter requirements (CPAN RT#62699)
    - Add lives_ok and dies_ok emulation (CPAN RT#67598)
  - Versions patch replaced by workaround for old ExtUtils::MakeMaker
  - BR: perl(Test::Builder::Tester)


author: Paul Howarth <paul@city-fan.org> 0.008-1
changelog:
  - Update to 0.008
    - Revert the mistake by which 0.004 allowed blocks after "exception" as well
      as "success"
  - BR: perl(Carp)
  - Update patch for building with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> 0.010-1
changelog:
  - Update to 0.010
    - Avoid tickling an overloading bug in perl 5.6 during testing
      (CPAN RT#74847)


author: Petr Pisar <ppisar@redhat.com> 1.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Add BuildRequires covered by perl package
  - Distribute examples
  - Install into perl core (i.e. do not use vendor paths)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:0.93-0.fdr.2
changelog:
  - Bring up to date with current fedora.us perl spec template.
  - Require perl >= 2:5.8.0 for vendor install dir support
    (also resolves the ExtUtils::MakeMaker version problem).


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 0.23
    - Fix bug for missing file (should warn and skip, not pass to run_t_files)
    - File path and unlink fixes for VMS (CPAN RT#32061)
  - Add patch to reinstate manpage, dropped upstream
  - BR:/R: perl(File::Spec) and perl(Test::Harness)
  - BR: perl(base), perl(Carp), perl(Exporter) and perl(File::Spec::Functions)
  - Don't use macros for commands
  - Reformat %description
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Package LICENSE and README files


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:0.14-0.fdr.1
changelog:
  - Update to 0.14.
  - Require perl >= 1:5.6.1 for vendor install dir support.
  - Use pure_install to avoid perllocal.pod workarounds.
  - Moved make test to section %check.


author: Paul Howarth <paul@city-fan.org> 0.9-2
changelog:
  - Add patch and test case for CPAN RT#53727 (broken POD breaks tab detection)
  - Fix a `Parentheses missing around "my" list' warning in old Perls (RT#54477)


author: Paul Howarth <paul@city-fan.org> 1.1-1
changelog:
  - Update to 1.1
    - Fix test fails if cwd or perl has a space in its path (CPAN RT#67376)
  - Remove remaining uses of macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
  - Update to 1.2
    - Fix to ignore inc/ for Module::Install
  - BR: perl(Cwd), perl(ExtUtils::MakeMaker), perl(File::Spec), perl(File::Temp)
    and perl(Test::Builder)
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.3-4
changelog:
  - Remove BR: perl(ExtUtils::MakeMaker)
  - Replace bundled modules Module::Install* by BR perl(inc::Module::Install)


author: Steven Pritchard <steve@kspei.com> 0.082-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit dependency on perl(Test::Tester).  (Seems to be bogus.)


author: Steven Pritchard <steve@kspei.com> 1.02-1
changelog:
  - Update to 1.02.
  - Update Source0 URL.
  - BR Test::Builder and Test::More, plus update versioned Test::Tester BR.
  - CHANGES renamed to Changes, and LGPL renamed to LICENSE.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.07-1
changelog:
  - Update to 0.07.
  - Test::Builder version problem (see #205537).
  - Removed the README file (copy of the manpage).


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.07-16
changelog:
  - Specify all dependencies.
  - Remove patch, because it is not needed (current version of Test::Builder
    is 0.98)


author: Iain Arnell <iarnell@gmail.com> 1.01-1
changelog:
  - update to latest upstream version
  - clean up spec for modern rpmbuild
  - doesn't require Test::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> - 1.02-1
changelog:
  - Update by Fedora::App::MaintainerTools 0.006
  - Updating to latest GA CPAN version (1.02)
  - Added a new br on perl(Carp) (version 0)
  - Added a new br on perl(English) (version 0)
  - Altered br on perl(Module::Build) (0 => 0.35)
  - Altered br on perl(Perl::Critic) (0.21 => 1.105)
  - Added a new br on perl(Perl::Critic::Utils) (version 1.105)
  - Added a new br on perl(Perl::Critic::Violation) (version 1.105)
  - Added a new br on perl(Test::Builder) (version 0)
  - Added a new br on perl(Test::More) (version 0)
  - Force-adding ExtUtils::MakeMaker as a BR
  - Dropped old BR on perl(Test::Pod)
  - Dropped old BR on perl(Test::Pod::Coverage)
  - Added a new req on perl(Carp) (version 0)
  - Added a new req on perl(English) (version 0)
  - Added a new req on perl(Perl::Critic) (version 1.105)
  - Added a new req on perl(Perl::Critic::Utils) (version 1.105)
  - Added a new req on perl(Perl::Critic::Violation) (version 1.105)
  - Added a new req on perl(Test::Builder) (version 0)


author: Paul Howarth <paul@city-fan.org> - 1.02-7
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Drop redundant BR: perl(ExtUtils::MakeMaker)
  - Drop redundant unversioned explicit requires
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Run the author tests in %check
  - BR: perl(Test::Pod) and perl(Test::Pod::Coverage)
  - Use tabs


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.14-0.fdr.1
changelog:
  - Update to 1.14.
  - Require perl(:MODULE_COMPAT_*).
  - Add patch to avoid warnings from all_pod_files().


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - update to 1.42
  - new upstream maintainer
  - use Module::Build flow
  - include README
  - use less generic %description and %summary
  - use _fixperms macro instead of our own chmod incantation
  - bump Test::More build requirement to 0.70
  - add versioned requires for Pod::Simple, Test::Builder::Tester and Test::More


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - update to 1.44:
    - use Module::Build::Compat's "traditional" configuration
    - loosen version requirements for Test::More and Pod::Simple
    - add File::Spec to the list of prereqs
  - drop perl(Test::More) version requirement to 0.62
  - drop perl(Pod::Simple) version requirement to 3.05


author: Petr Pisar <ppisar@redhat.com> - 1.48-3
changelog:
  - Clarify license (bug #1065946)
  - Remove run-time dependency on Test::Builder::Tester (bug #1065944)
  - Declare run-time dependency on File::Find (bug #1066006)


author: Paul Howarth <paul@city-fan.org> - 0.06-2
changelog:
  - Run release tests as well as standard test suite in %check
  - Drop no-longer-needed buildreq perl(Filter::Util::Call)
  - New buildreqs perl(Test::Perl::Critic), perl(Test::Pod), perl(Test::Spelling)


author: Paul Howarth <paul@city-fan.org> - 0.06-4
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't need explicit runtime dependency on perl(Test::Builder::Module) if we
    have rpm ≥ 4.9 as it can auto-detect it
  - BR: at least version 0.61 of perl(Test::More) as per upstream
  - Drop unnecessary version requirement for perl(ExtUtils::MakeMaker)
  - Drop redundant %{?perl_default_filter}
  - BR: aspell-en rather than hunspell-en on old distributions where
    Test::Spelling uses aspell instead of hunspell
  - Don't BR: perl(Test::Perl::Critic) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
  - BR: perl(base), perl(Cwd), perl(Data::Dumper)
  - RHEL builds don't use Test::Spelling so they don't need dictionaries either


author: Ralf Corsépius <rc040203@freenet.de> - 1.02-2
changelog:
  - Reflect license tag changes.
  - BR: perl(Test::More).
  - Remove BR: perl.
  - Add chmod -x Changes lib/Test/*pm


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
  - Merge tests sub-package back into main package
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Mark Tutorial.pod as %doc
  - Drop explicit dependency on perl-devel


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12:
    - Best Practical has taken over maintainership of this module
    - Try various spellcheck programs instead of hardcoding the ancient `spell`
      (CPAN RT#56483)
    - Remove temporary files more aggressively (CPAN RT#41586)
    - Fixed by not creating them at all - instead we now use IPC::Open3
    - Remove suggestion to use broken `aspell -l` (CPAN RT#28967)
    - Add set_pod_file_filter for skipping translations, etc. (CPAN RT#63755)
    - Skip tests in all_pod_files_spelling_ok if there is no working spellchecker
    - Provide a has_working_spellchecker so you can skip your own tests if
      there's no working spellchecker
    - Switch to Module::Install
    - Rewrite and modernize a lot of the documentation
    - Decruftify code, such as by using Exporter and lexical filehandles
    - Support .plx files
  - This release by SARTAK -> update source URL
  - Rewrite hunspell patch to just favour hunspell over aspell
  - BR: perl(IPC::Open3)


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15:
    - Begin adding actual tests (hilariously, adding the suggested t/pod-spell.t
      to this dist to test itself found a typo: "stopwards")
  - BR: perl(Test::Tester) and hunspell-en


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.15-5
changelog:
  - Update dependencies
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.16-1
changelog:
  - Update to 0.16:
    - Allow use of a custom POD parser rather than Pod::Spell using
      set_pod_parser
  - Re-diff patch to avoid shipping .orig file


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18:
    - Work around Pod::Spell limitations
    - Improve case handling
    - Improve test failure reporting
    - Include more useful info in Test-Spelling's own test suite


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19:
    - For more consistent results, avoid using the user's local aspell dictionary
      (CPAN RT#56483)
  - Update hunspell preference patch


author: Paul Howarth <paul@city-fan.org> - 1.09-8
changelog:
  - Don't run the release tests when bootstrapping, to avoid circular build deps
  - Sync buildreqs with upstream:
    - BR: perl(Exporter)
    - BR: perl(ExtUtils::MakeMaker) ≥ 6.42
    - BR: perl(File::Spec) ≥ 0.80
    - Bump perl(Pod::Simple) version requirement to at least 3.07
    - BR: perl(Test::Builder)
    - Drop perl(Test::More) version requirement to a minimum of 0.42
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
  - Can run spelling test unconditionally now
  - BR: perl(ExtUtils::Manifest)
  - Don't BR: perl(Test::Perl::Critic) if we're bootstrapping
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Run developer tests in a separate test run
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.06-11
changelog:
  - Separate bootstrap and RHEL conditionals
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from buildroot
  - BR: perl(base)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
  - Specify all dependencies
  - Drop %defattr, redundant since rpm 4.4
  - Fix mixed use of spaces and tabs


author: Paul Howarth <paul@city-fan.org> - 0.001-5
changelog:
  - Fix compatibility with Perl 5.16 (CPAN RT#72133)
  - Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 0.002-1
changelog:
  - Update to 0.002
    - Fix compatibility with Perl 5.16 (CPAN RT#72133)
  - Drop upstreamed patch for 5.16 compatibility


author: Paul Howarth <paul@city-fan.org> - 0.004-1
changelog:
  - Update to 0.004
    - Re-package with Module::Build
    - Remove an unnecessary use of smart match operator
  - Switch to Module::Build flow
  - Classify buildreqs by usage
  - Drop Test::Spelling requirement, no longer used


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11 (#477298)
  - Buildreq ExtUtils::MakeMaker, File::Spec, Test::Builder,
    Test::Builder::Tester, and Test::More (from upstream Makefile.PL)
  - Add runtime dependencies on Test::Builder and Test::Builder::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> 0.21-1
changelog:
  - add perl default filter (pro forma)
  - use _fixperms incantation
  - auto-update to 0.21 (by cpan-spec-update 0.01)
  - altered br on perl(Test::Builder::Tester) (0 => 1.02)
  - altered req on perl(Test::Builder::Tester) (0 => 1.02)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24 (compatibility with Carp 1.25) (#808856)
  - BR: Perl core modules that might be dual-lived
  - BR/R: at least version 1.02 of perl(Tree::DAG_Node)
  - Drop redundant buildreq perl(Test::Exception)
  - Don't need to remove empty directories from buildroot
  - Drop explicit versioned runtime dependency on Test::Builder, satisfied in
    all distributions since the dawn of time (nearly)
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop %defattr, redundant since rpm 4.4
  - Drop redundant %{?perl_default_filter}
  - Make %files list more explicit
  - Don't use macros for commands


author: Chris Weyl <cweyl@alumni.drew.edu> 0.72-1
changelog:
  - PERL_INSTALL_ROOT => DESTDIR, add perl_default_filter (XS module)
  - auto-update to 0.72 (by cpan-spec-update 0.01) (DBIx::Class needed a newer
    Text::CSV, which in turn can only leverage Text::CSV_XS >= 0.70)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - added a new br on perl(IO::Handle) (version 0)
  - added a new br on perl(Test::Harness) (version 0)
  - added a new br on perl(Test::More) (version 0)
  - added a new br on perl(Tie::Scalar) (version 0)


author: Petr Sabata <psabata@redhat.com> - 0.81-1
changelog:
  - 0.81 version bump
  - Changed script interpreters in various example files
  - Convert ChangeLog to proper UTF8
  - Removed buildroot garbage


author: Steven Pritchard <steve@kspei.com> 0.35-3
changelog:
  - Improve Summary, description, and Source0 URL.
  - Fix find option ordering.
  - Don't generate license texts.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.37-1
changelog:
  - add filtering
  - auto-update to 1.37 (by cpan-spec-update 0.01)
  - altered br on perl(Algorithm::Diff) (0 => 1.19)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test) (version 0)


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2-0.fdr.7
changelog:
  - BuildRequire perl >= 1:5.6.1-34.99.6 for support for vendor installdirs.
  - Use pure_install to avoid perllocal.pod workarounds.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.3-0.fdr.1
changelog:
  - Update to 1.3, patch naughty upstream Makefile.PL so that INSTALLDIRS= works.
  - Avoid RPATH on < FC2.


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Remove build root cleaning, BuildRoot definition and %defattr


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22 (modernize distribution)
  - BR: perl(Test::More), perl(Test::Pod)
  - Fix Makefile.PL to work with old ExtUtils::MakeMaker versions
  - Fix argument order for find with -depth


author: Steven Pritchard <steve@kspei.com> 1:1.16-4
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.
  - Remove check macro cruft.


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
  - Remove perl(base) from BR
  - Package README and ChangeLog
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories


author: Andreas Bierfert <andreas.bierfert[AT]lowlatency.de>
changelog:
  - 804.028-1
  - version upgrade
  - fix #210718 SIGSEGV on exit from texdoctk
  - fix #234404 Cannot manage big listboxes
  - fix #235666 Segfault occurs when using Perl-Tk on FC6


author: Iain Arnell <iarnell@gmail.com> 804.029-1
changelog:
  - update to 804.029_500 development version to fix FTBFS with perl 5.14
  - clean up spec for modern rpmbuild
  - use perl_default_filter and filter useless provides


author: Ralf Corsépius <corsepiu@fedoraproject.org> 804.029-4
changelog:
  - Split out Tk/MMutil.pm, Tk/install.pm, Tk/MakeDepend.pm into perl-Tk-devel.
    (Avoid dependency on perl-devel - BZ 741777).


author: Jitka Plesnikova <jplesnik@redhat.com> - 804.030-2
changelog:
  - Update license - add SWL
  - Specify all dependencies
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Drop removing of empty directory
  - Package COPYING


author: Petr Pisar <ppisar@redhat.com> - 804.030-4
changelog:
  - Fix file modes changed while building (bug #1017322)
  - Correct change log entry date (bug #1017322)


author: Paul Howarth <paul@city-fan.org> - 1.07-1
changelog:
  - Update to 1.07
    - New maintainer: Ron Savage
    - Pre-emptive apologies for any changes which are not back-compatible; no
      such problems are expected, but the introduction of new methods may
      disconcert some viewers
    - Fix CPAN RT#78858 and audit code for similar problems
    - Fix CPAN RT#79506
    - Rename ChangeLog to CHANGES, and add Changelog.ini
    - Replace all uses of cyclicity_fault() and Carp::croak with die
    - Remove unused methods: decommission_root(), cyclicity_allowed(),
      cyclicity_fault(), inaugurate_root(), no_cyclicity() and _update_links();
      OK - cyclicity_fault() was called once - it just died
    - Add methods: format_node(), hashref2string(), is_root(), node2string(),
      tree2string()
    - Reformat the POD big-time
    - Add Build.PL
    - Re-write Makefile.PL
    - Remove use vars(@ISA $Debug $VERSION), and replace latter 2 with 'our ...'
    - Rename t/00_about_verbose.t to t/about.perl.t
    - Add scripts/cut.and.paste.subtrees.pl (Warning: Some trees get into an
      infinite loop)
    - Add t/cut.and.paste.subtrees.t (Warning: Some trees get into an infinite
      loop)
    - Document the options (discouraged by Sean) supported in the call to
      new($hashref)
  - This release by RSAVAGE -> update source URL
  - BR: perl(Test::More) and perl(Test::Pod) ≥ 1.00
  - Modernize spec file:
    - Drop %clean section
    - Drop buildroot definition and cleaning
    - Don't use macros for commands
    - Don't need to remove empty directories from the buildroot
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.09-1
changelog:
  - Update to 1.09
    - No code changes
    - For pre-reqs such as strict, warnings, etc., which ship with Perl, set the
      version requirement to 0 (CPAN RT#80663)


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Change text in README referring to licence to match text in body of source,
      since it was in conflict with the Artistic Licence V 2.0
    - Rename CHANGES to Changes as per CPAN::Changes::SPEC
    - Various spelling fixes in the docs


author: Chris Weyl <cweyl@alumni.drew.edu> - 0.04-1
changelog:
  - Update by Fedora::App::MaintainerTools 0.004
  - PERL_INSTALL_ROOT => DESTDIR
  - Updating to latest GA CPAN version (0.04)


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Allow multiple finally blocks
    - Pass the error, if any, to finally blocks when called
    - Documentation fixes and clarifications
  - This release by RJBS -> update source URL


author: Paul Howarth <paul@city-fan.org> - 0.11-4
changelog:
  - BR: perl(Carp)
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Drop redundant %{?perl_default_filter}
  - Enhance %description
  - Reinstate EPEL-5 compatibility:
    - Define buildroot
    - Clean buildroot in %install and %clean
  - Use tabs


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
  - Break build dependency loop by only using perl(Business::ISBN) if we're not
    bootstrapping
  - BR: perl(Carp) and perl(Exporter)
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - Do not reverse the order of new parameters
    - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
    - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
    - Updated repository URL
  - Don't need to remove empty directories from buildroot
  - BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
  - Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
    better fix for the build dependency cycle was to drop LWP::Simple as a
    buildreq of perl-Business-ISBN (needed only for optional tests) when
    bootstrapping


author: Iain Arnell <iarnell@gmail.com> 0.101021-1
changelog:
  - update to latest upstream
  - Version::Requirements is now DEPRECATED
    use CPAN::Meta::Requirements, which is a drop-in replacement


author: Robin Norwood <rnorwood@redhat.com> - 0.81-3
changelog:
  - fix various issues from package review:
  - remove || : from %check
  - remove tabs and fix spacing
  - fix encoding for README file


author: Ville Skyttä <ville.skytta at iki.fi> - 0.46alpha-29
changelog:
  - Rewrite specfile using fedora-rpmdevtools' spec template, fixes #176889.
  - Fix License, include docs.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.46alpha-32
changelog:
  - fix license tag with upstream confirmation
    see: http://perl-xml.cvs.sourceforge.net/perl-xml/XML-Grove/COPYING?revision=1.2&view=markup


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-34
changelog:
  - cleaned up universe vs. tab conflict
  - added an explanation why the Version tag does not conform to the rules
  - fixed the source tarball (bz2->gz), to match the upstream exactly
  - improved BuildRoot tag


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-35
changelog:
  - re-enable check, it seems to work
  - improved the explanation of the non-standard Version tag (Patrice Dumas)
  - filter out bogus and redundant reuires (Paul Howarth)
  - move -depth to the right place on find cmd line (Paul Howarth)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.58-1
changelog:
  - #121168
  - Update to 1.58.
  - Require perl(:MODULE_COMPAT_*).
  - Handle ParserDetails.ini parser registration.
  - BuildRequires libxml2-devel.
  - Own installed directories.


author: Paul Howarth <paul@city-fan.org> - 1:1.70-6
changelog:
  - Rebuild for libxml2 2.7.8 in Rawhide
  - Move recoding of documentation from %install to %prep
  - Use %{?perl_default_filter}
  - Use standard %install idiom


author: Petr Pisar <ppisar@redhat.com> - 1:2.0016-1
changelog:
  - 2.0016 bump (disable XML_PARSE_HUGE by default to prevent from
    CVE-2003-1564, a recursive XML entity expansion leads to memory exhaustion
    in a XML parser)


author: Zing <shishz@hotpop.com> - 1.57-2
changelog:
  - QA from Ville Skyttä
  - BuildRequires XML::LibXML >= 1.57
  - BuildRequires libxslt-devel
  - put benchmark.pl in %doc


author: Paul Howarth <paul@city-fan.org> - 1.68-1
changelog:
  - update to 1.68
  - relax hard version requirement on XML::LibXML, which is at 1.69 upstream
    but 1.67 or above will suffice (care will still have to be taken to keep
    the packages in sync, particularly when XML::LibXML is updated)
  - specify $RPM_OPT_FLAGS once rather than twice
  - drop historical perl version requirement, which is met even by EL-3
  - explicitly buildreq ExtUtils::MakeMaker rather than just perl-devel


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.41-8
changelog:
  - Update dependencies and summary
  - Remove pre-RPM-4.9 filters
  - Remove deleting empty directories
  - Update REC-xml-19980210.xml to match new encoding


author: Ville Skyttä <ville.skytta at iki.fi> - 0.12-7
changelog:
  - #121167
  - Handle ParserDetails.ini parser registration.
  - Require perl(:MODULE_COMPAT_*).
  - Own installed directories.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.16-1
changelog:
  - Update to 0.16.
  - Brings specfile closer to Fedora Perl template.
  - Corrects Source0 URL (upstream maintainer has changed).
  - Move Requires filter into spec, and add Provides filter.


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-8
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.


author: Paul Howarth <paul@city-fan.org> - 0.99-3
changelog:
  - Drop redundant runtime dependencies on perl(XML::LibXML) and
    perl(XML::LibXML::Common), which cause circular build dependencies (#720974)
  - Simplify provides and requires filters
  - Don't need to remove empty directories from buildroot
  - Mark POD files as %doc


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.99-7
changelog:
  - Update dependencies and summary
  - Remove xmltest.xml due to copyright
  - Replace PERL_INSTALL_ROOT with DESTDIR


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.08-6
changelog:
  - Update dependencies
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Update description and summary
  - Remove deleting empty directories
  - Remove dist.ini from %doc


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.12-0.fdr.2
changelog:
  - missing $RPM_OPT_FLAGS in the %build section.
  - optional test module as build requirement perl(Tie::IxHash).


author: Jason Vas Dias <jvdias@redhat.com> - 2.14-4
changelog:
  - fix bug 191911: make test fails when default Parser is XML::SAX::PurePerl -
                    succeeds when default Parser is XML::LibXML::SAX -
                    +BuildRequires: perl(XML::LibXML) perl(XML::LibXML::Common)


author: Robin Norwood <rnorwood@redhat.com> - 2.17-1
changelog:
  - Update to latest CPAN version: 2.17
  - Add BuildRequires
  - Fix macro-in-changelog rpmlint warning
  - Fix license tag


author: Jeff Fearn <jfearn@redhat.com> - 3.09-4
changelog:
  - Remove %doc from man files, used glob
  - Simplify XML in filelist
  - Remove OPTIMIZE setting from make call
  - Change buildroot to fedora style
  - Remove unused defines


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Marcela Mašláňová <mmaslano@redhat.com> 3.37-3
changelog:
  - 677179 filter internal xml_split::state from requires and call filter properly
  - add new BR, which is now in Fedora


author: Petr Šabata <contyk@redhat.com> - 0.621-1
changelog:
  - 0.621 bump
  - Lots of bugfixes
  - Packaging examples
  - Fixing build-time deps and removing unneeded lines
  - Fixing changelog issues


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-17
changelog:
  - 680418 - missing man page for xpath
  - applied debian patch, which added POD into xpath code, but also fix debian bug(#185292)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-22
changelog:
  - revert the patch. It breaks backward compatibility for some apps. 
  - the xpath has still man page installed.
  - Resolves: rhbz#1067903


author: Steven Pritchard <steve@kspei.com> 0.62-3
changelog:
  - Use fixperms macro instead of our own chmod incantation.
  - Drop Test::Base build dependency to avoid a BR loop (#215637).
  - BR ExtUtils::MakeMaker.


author: Paul Howarth <paul@city-fan.org> - 0.71-1
changelog:
  - Update to 0.71 (use UTF-8 encoding in LoadFile/DumpFile: CPAN RT#25434)
  - Enable AUTOMATED_TESTING
  - BR: perl(Test::CPAN::Meta), perl(Test::MinimumVersion), perl(Test::Pod)
  - This release by ADAMK -> update source URL
  - Re-code docs as UTF-8


author: Paul Howarth <paul@city-fan.org> - 0.81-2
changelog:
  - R: perl(Carp) and perl(Data::Dumper)
  - BR: perl(Carp), perl(constant) and perl(Exporter)
  - Release tests no longer shipped, so drop buildreqs for them and don't bother
    setting AUTOMATED_TESTING; run tests even when bootstrapping


author: Paul Howarth <paul@city-fan.org> - 0.84-2
changelog:
  - Haven't needed to fix documentation character encoding since 0.79
  - Drop Test::Base build dependency again to avoid a BR loop (#215637)
  - Filter private provides perl(yaml_mapping), perl(yaml_scalar) and
    perl(yaml_sequence)
  - Don't need to remove empty directories from the buildroot
  - This release by MSTROUT -> update source URL


author: Steven Pritchard <steve@kspei.com> 0.82-1
changelog:
  - Specfile autogenerated by cpanspec 1.69.1.
  - Remove explicit build dependency on perl.
  - Include JSON module.
  - BR Devel::Leak (for tests).


author: Paul Howarth <paul@city-fan.org> 1.23-1
changelog:
  - Update to 1.23
    - Synchronize JSON::Syck with YAML::Syck version number
    - Add DumpInto functions (YAML+Syck), which dump into a provided scalar
      instead of a newly-allocated one
    - Modify DumpFile functions to output directly to the specified
      file/filehandle instead of buffering all output in memory
    - Avoid modifying numbers into strings when emitting
    - Fix error message typo: s/existant/existent/g
    - Fix for non-printable character detection
    - Quote if non-printable characters are present
    - Make sure that LoadBlessed=0 blocks all blessing
    - Start listing primary repo as http://github.com/toddr/YAML-Syck
    - README refreshed via perldoc -t
  - Require perl(XSLoader) at runtime
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for commands
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> 1.24-1
changelog:
  - Update to 1.24
    - Implement $JSON::Syck::MaxDepth
    - Prevent failure when the same object is seen twice during Dump
    - Prevent YAML from being influenced by the previous change
    - MinGW64 compatibility (CPAN RT#78363)


author: Paul Howarth <paul@city-fan.org> 1.27-1
changelog:
  - Update to 1.27
    - Fix for hash randomization in yaml-alias.t on perl 5.18.0 (CPAN RT#84882,
      CPAN RT#84466)


author: Steven Pritchard <steve@kspei.com> 1.04-1
changelog:
  - Specfile autogenerated by cpanspec 1.70.
  - Drop redundant perl build dependency.
  - BR YAML, YAML::Syck, and Test::Pod for better test coverage.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.39-1
changelog:
  - auto-update to 1.39 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.80)


author: Petr Sabata <contyk@redhat.com> - 1.50-1
changelog:
  - 1.50 bump
  - Cleaning the spec file (I assume pre-EPEL6 compatibility is no longer
    essential here)
  - Adding Exporter and Scalar::Util (optional but preferred) to BR/Rs


author: Petr Šabata <contyk@redhat.com> - 1.05-26.2
changelog:
  - Fix the package for el7
  - Modernize the spec
  - Correct a bogus date in changelog
  - Unify spec whitespace


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004000-1
changelog:
  - auto-update to 1.004000 (by cpan-spec-update 0.01)
  - altered br on perl(ExtUtils::MakeMaker) (6.31 => 6.42)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004004-1
changelog:
  - auto-update to 1.004004 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(CPAN) (version 1.80)
  - added a new req on perl(ExtUtils::CBuilder) (version 0)
  - added a new req on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(ExtUtils::MakeMaker) (version 6.31)
  - added a new req on perl(ExtUtils::ParseXS) (version 0)
  - added a new req on perl(Module::Build) (version 0.28)


author: Iain Arnell <iarnell@gmail.com> 1.008001-1
changelog:
  - update to latest upstream version
  - drop R/BR perl(ExtUtils::CBuilder) and perl(ExtUtils::ParseXS)


author: Robin Norwood <rnorwood@redhat.com> - 5.808-1
changelog:
  - Update to latest CPAN version
  - Re-enable tests.  We'll see if they work now
  - Move Requires filter into spec file
  - Add Provides filter for unnecessary unversioned provides


author: Robin Norwood <rnorwood@redhat.com> - 5.808-4
changelog:
  - Fix various issues from package review:
  - Fix tabs and spacing
  - Remove unneeded BR: perl
  - convert non-utf-8 files to utf-8
  - Resolves: bz#226268


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 5.837-2
changelog:
  - Add missing ':' to filter_from_requires perl(HTTP::GHTTP).
  - filter_from_provides /perl(HTTP::Headers)$/d instead of /perl(HTTP::Headers)/d.


author: Petr Pisar <ppisar@redhat.com> - 6.02-1
changelog:
  - 6.02 bump
  - HTTPS support unbundled by upstream to break depency cycle in CPAN utilities.
    Install or depend on perl(LWP::Protocol::https) explicitly, if you need
    HTTPS support.


author: Robin Norwood <rnorwood@redhat.com> - 0.08-3
changelog:
  - Fix old changelog entry
  - Fix issues from package review:
  - Remove extra BR: perl
  - Remove "|| :" from check section
  - Add dist tag to release
  - Remove extra Provides: perl(Data::Grove)
  - Clean up tabs and spacing
  - Resolves: bz#226269


author: Petr Šabata <contyk@redhat.com> - 0.08-18
changelog:
  - Correct buildtime dependencies
  - Correct the licence tag
  - Update the provides filter
  - Drop command macros
  - Modernize spec


author: Chris Weyl <cweyl@alumni.drew.edu> - 0.223-1
changelog:
  - Update filtering
  - Auto-update to 0.223 (by cpan-spec-update 0.01)
  - Altered br on perl(Test::More) (0 => 0.4)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
  - Install to vendor directories rather than perl core directories so as to
    avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
  - Reinstate compatibility with old distributions like EL-5
    - Add back buildroot definition and cleaning
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Petr Pisar <ppisar@redhat.com> 1.33-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Fix dependencies
  - Requires perl(Scalar::Util) is autodetected
  - Do not provide private library
  - Remove pre-F12 BuildRoot stuff


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Paul Howarth <paul@city-fan.org> 3:0.88-1
changelog:
  - Update to 0.88
  - Revert to Makefile.PL flow as upstream dropped Build.PL to avoid circular
    dependencies
  - Install into perl directories rather than vendor directories
  - Mark Pod files as %doc


author: Simon Perreault <nomis80@nomis80.org> 20021130-2
changelog:
  - Changed architecture from i386 to noarch
  - Added my name as packager
  - Bumped up release number, which was forgotten by Anthony Rumble


author: Ville Skyttä <ville.skytta@iki.fi> - 0:20031021-1
changelog:
  - Sync with fedora-rpmdevtools' Perl spec template to fix x86_64 build.
  - Move version to the version field.


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - Update to 0.8
  - Don't open the db read-write
  - Fix permissions on keystore (everybody can sign with test keys)


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9
  - Bug fix from Gary Ching-Pang Lin
  - Support NSS Token selection for use with smart cards.


author: Peter Jones <pjones@redhat.com> - 0.99-1
changelog:
  - Update to 0.99
  - Add documentation for client/server mode.
  - Add --pinfd and --pinfile to server mode.


author: Peter Jones <pjones@redhat.com> - 0.99-4
changelog:
  - Fix some more bugs found by valgrind and coverity.
  - Don't build utils/ ; we're not using them and they're not ready anyway.


author: Peter Jones <pjones@redhat.com> - 0.99-7
changelog:
  - setfacl u:kojibuilder:rw /var/run/pesign/socket
  - Fix command line checking in client
  - Add client stdin pin reading.


author: Peter Jones <pjones@redhat.com> - 0.104-1
changelog:
  - Make sure alignment is correct on signature list entries
    Resolves: rhbz#963361
  - Make sure section alignment is correct if we have to extend the file


author: Panu Matilainen <pmatilai@welho.com> 0.999-0.fdr.1
changelog:
  - get rid of distrel munging, buildsys does that...
  - update to 0.999
  - update doc and example tarballs
  - fix build on python <> 2.2
  - use -O1 in install to generate .pyo files instead of manually creating the files
  - require python-abi = pyver to get dependencies right


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.999-2
changelog:
  - Use python_sitelib macro to resolve build issues on x86_64.
  - %ghost *.pyo
  - Install ANSI.py, screen.py, and FSM.py into the examples.  These are intended
    to suplement pexpect eventually but they are currently much less robust and
    not installed to by default.  But they are needed by some examples.
  - Use __python macro in build/install for consistency.
  - Add --skip-build to the invocation of setup.py in install.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.99999b-2
changelog:
  - Add LICENSE File.
  - Make noarch.
  - Remove executable permissions from the modules copied to examples.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-2
changelog:
  - Remove pyver define as it's not needed with the automatic python(abi).
  - Stop ghosting .pyos.
  - Let automatic python compilation take care of creating pyos.
  - Rebuild for FC6.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-4
changelog:
  - rename -backend-gst back to -backend-gstreamer (longer name as -backend-xine)
    The GStreamer backend isn't ready to be the default, and KDE 4.1 also defaults
    to the Xine backend when both are installed.
  - fix PulseAudio not being the default in the Xine backend (4.2 regression)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.80-0.1.20081121svn887051
changelog:
  - Use subversion (4.2.80) snapshot
  - phonon-backend-xine subpkg
  - make VERBOSE=1
  - make install/fast
  - Xine backend is in phonon now, add xine-lib-devel as BR
  - BR cmake >= 2.6.0
  - forward-port xine pulseaudio patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.96-1
changelog:
  - 4.2.96
  - rebase phonon-4.2.0-pulseaudio.patch (-> phonon-4.2.96-pulseaudio.patch)
  - rebase phonon-4.2.70-xine-pulseaudio.patch
    (-> phonon-4.2.96-xine-pulseaudio.patch)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-4
changelog:
  - Requires: phonon-backend >= %version
  - move icons to hicolor theme and into -backend subpkgs
  - BR: libxcb-devel
  - move phonon-gstreamer.svg to sources


author: Rex Dieter <rdieter@fedoraproject.org> - 2:4.4.4-0.4.20110104
changelog:
  - Requires: PackageKit-gstreamer-plugin , avoids potential crashers elsewhere 
    when built with USE_INSTALL_PLUGIN (kde#262308)


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com> 5.3.2-1
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)
  - add runselftest option to allow build without test suite


author: Remi Collet <remi@fedoraproject.org> 5.3.8-2
changelog:
  - add mysqlnd sub-package
  - drop patch4, use --libdir to use /usr/lib*/php/build
  - add patch to redirect mysql.sock (in mysqlnd)


author: Remi Collet <remi@fedoraproject.org> 5.3.8-3
changelog:
  - revert is_a() to php <= 5.3.6 behavior (from upstream)
    with new option (allow_string) for new behavior


author: Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7
changelog:
  - update to PHP 5.4.0RC7
  - provides env file for php-fpm (#784770)
  - add patch to use system libzip (thanks to spot)
  - don't provide INSTALL file


author: Remi Collet <remi@fedoraproject.org> 5.4.0-5
changelog:
  - fix Loadmodule with MPM event (use ZTS if not MPM worker)
  - split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4


author: Remi Collet <remi@fedoraproject.org> 5.4.4-1
changelog:
  - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
  - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
  - use /run/php-fpm instead of /var/run/php-fpm


author: Remi Collet <rcollet@redhat.com> 5.4.7-8
changelog:
  - systemd integration, https://bugs.php.net/63085
  - no odbc call during timeout, https://bugs.php.net/63171
  - check sqlite3_column_table_name, https://bugs.php.net/63149


author: Remi Collet <remi@fedoraproject.org> 5.4.7-9
changelog:
  - php-fpm: enable PrivateTmp
  - php-fpm: new systemd macros (#850268)
  - php-fpm: add upstream patch for startup issue (#846858)


author: Remi Collet <remi@fedoraproject.org> 5.4.8-1
changelog:
  - update to 5.4.8
  - define both session.save_handler and session.save_path
  - fix possible segfault in libxml (#828526)
  - php-fpm: create apache user if needed
  - use SKIP_ONLINE_TEST during make test
  - php-devel requires pcre-devel and php-cli (instead of php)


author: Remi Collet <rcollet@redhat.com> 5.4.8-6
changelog:
  - clarify Licenses
  - missing provides xmlreader and xmlwriter
  - modernize spec
  - change php embedded library soname version to 5.4


author: Remi Collet <rcollet@redhat.com> 5.4.9-0.1.RC1
changelog:
  - update to 5.4.9RC1
  - improves php.conf (use FilesMatch + SetHandler)
  - improves filter (httpd module)
  - apply ldap_r patch on fedora >= 18 only


author: Remi Collet <remi@fedoraproject.org> 5.4.12-1
changelog:
  - update to 5.4.12
  - security fix for CVE-2013-1635
  - enable tokyocabinet dba handler
  - upstream patch (5.4.13) to fix dval to lval conversion
    https://bugs.php.net/64142
  - upstream patch (5.4.13) for 2 failed tests
  - fix buit-in web server on ppc64 (fdset usage)
    https://bugs.php.net/64128


author: Remi Collet <rcollet@redhat.com> 5.4.13-1
changelog:
  - update to 5.4.13
  - security fix for CVE-2013-1643
  - Hardened build (links with -z now option)
  - Remove %config from /etc/rpm/macros.php


author: Remi Collet <rcollet@redhat.com> 5.4.16-1
changelog:
  - update to 5.4.16
  - switch systemd unit to Type=notify
  - patch for upstream Bug #64915 error_log ignored when daemonize=0
  - patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error
  - patch for upstream bug #64960 Segfault in gc_zval_possible_root
  - add version to "Obsoletes"
  - own /usr/share/fpm


author: Remi Collet <rcollet@redhat.com> - 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix


author: Remi Collet <rcollet@redhat.com> - 5.4.16-19
changelog:
  - fix memory leak introduce in patch for CVE-2014-1943
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712


author: Remi Collet <rcollet@redhat.com> - 5.4.16-23
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.4.16-27
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.4.16-29
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.16-33
changelog:
  - core: use after free vulnerability in unserialize()
    CVE-2014-8142 and CVE-2015-0231
  - core: fix use-after-free in unserialize CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - exif: free called on unitialized pointer CVE-2015-0232
  - fileinfo: fix out of bounds read in mconvert CVE-2014-9652
  - gd: fix buffer read overflow in gd_gif_in.c CVE-2014-9709
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.4.16-34
changelog:
  - fix memory corruption in fileinfo module on big endian
    machines #1082624
  - fix segfault in pdo_odbc on x86_64 #1159892
  - fix segfault in gmp allocator #1154760


author: Remi Collet <rcollet@redhat.com> - 5.4.16-35
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 5.4.16-38
changelog:
  - curl: add options to enable TLS #1291667
  - mysqli: fix segfault in mysqli_stmt::bind_result() when
    link is closed #1096800
  - fpm: fix incorrectly defined SCRIPT_NAME variable when
    using Apache #1138563
  - core: fix segfault when a zend_extension is loaded twice #1289457
  - openssl: change default_md algo from MD5 to SHA1 #1073388
  - wddx: fix segfault in php_wddx_serialize_var #1131979


author: Remi Collet <rcollet@redhat.com> - 5.4.16-41
changelog:
  - gd: fix integer overflow in _gd2GetHeader() resulting in
    heap overflow CVE-2016-5766
  - gd: fix integer overflow in gdImagePaletteToTrueColor()
    resulting in heap overflow CVE-2016-5767
  - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
    CVE-2016-5768


author: Remi Collet <rcollet@redhat.com> - 5.4.16-43
changelog:
  - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
  - gd: Signed Integer Overflow gd_io.c CVE-2016-10168


author: Remi Collet <rcollet@redhat.com> - 5.4.16-44
changelog:
  - fix php should provide php(httpd) #1215429
  - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
    default value is "yes", preserving previous behaviour
  - openssl: fix default_socket_timeout does not work with SSL #1378196


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-5
changelog:
  - Update Archive_Tar to 1.3.9
  - add patch from RHEL (Joe Orton)
  - fix install-pear.php URL (with our patch for doc_dir applied)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-6
changelog:
  - fix Obsoletes version for XML_Util (#226295)
  - add link to upstream bug - please Provides LICENSE file
    https://pear.php.net/bugs/bug.php?id=19368
  - add link to upstream bug - Incorrect FSF address
    https://pear.php.net/bugs/bug.php?id=19367


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-9
changelog:
  - move tests to /usr/share/tests/pear
  - move pkgxml to /var/lib/pear
  - remove XML_RPC
  - refresh installer


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extenstions going to be build as shared, mainly simplexml)
  - add fix for new unpack format (php 5.5)


author: Remi Collet <Fedora@FamilleCollet.com> 2.2.0-1
changelog:
  - new version
  - add new INI directives (hash_strategy + hash_function) to config
  - add BR on php-devel >= 4.3.11


author: Joe Orton <jorton@redhat.com> - 3.0.6-4
changelog:
  - fix php_stream_cast() usage
  - fix memory corruption after unserialization (Paul Clifford)
  - package license


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.8.0-1
changelog:
  - Upstream 1.8.0 (new features)
  - Exchange Calendar integration
  - New and updated translations
  - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.0-1
changelog:
  - Upstream 1.9.0:
          - Contributed File transfer functionality. File encryption is supported.
          - NTLMv2 and NTLMv2 Session Security support
          - Implemented SIP Authentication Extensions protocol version 4 and 3
          - another shot at presence update problems
          - fix crash caused by uninitialized security contexts
          - Updated translations: ru, de, es, pt_BR
          - Bugfixes and crash fixes
  - BR libpurple >= 2.4.0
  - Split into purple-sipe and pidgin-sipe
  - Other spec fixes to match upstream's spec file


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.9.1-1
changelog:
  - Upstream 1.9.1:
          - Fix Kerberos authentication for unix platforms (broken in 1.9.0)
          - Bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.10.1-1
changelog:
  - Upstream 1.10.1:
          - Fixes to build against pidgin-2.7
          - Initial support for Office 2007+ "Access Levels"
          - SVG icon artwork
          - Miscellaneous bugfixes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 1.12.0-1
changelog:
  - Update to 1.12.0:
      - Add support for OCS2007R2 Group Chat
      - Miscellaneous features and bugfixes


author: Stefan Becker <chemobejk@gmail.com> - 1.13.0-1
changelog:
  - update to 1.13.0:
      - support for Lync & Office365
      - added [MS-SIPAE] TLS-DSK authentication scheme
      - added [MS-DLX] based Get Info/Contact Search
      - added experimental media TCP transport
  - add BR nss-devel
  - drop obsolete patch to replace deprecated glib2 functions


author: Stefan Becker <chemobejk@gmail.com> - 1.14.0-1
changelog:
  - update to 1.14.0:
      - added support for Web Ticket authentication using ADFS
      - added support for buddy photos
      - added support for call to Audio Test Service
      - reduced network traffic for acquiring Web Tickets


author: Stefan Becker <chemobejk@gmail.com> - 1.15.0-1
changelog:
  - update to 1.15.0:
      - added support for Kerberos & Negotiate authentication in HTTP connections
      - added support for DNS A record search in server auto-discovery
      - added setting to suppress calendar information publishing
      - unified Single Sign-On (SSO) handling in all places


author: Stefan Becker <chemobejk@gmail.com> - 1.15.1-1
changelog:
  - update to 1.15.1: bug fix release
      - fixes crash experienced by some users (bz #928323)
      - fixes broken NTLM fallback in Negotiate


author: Stefan Becker <chemobejk@gmail.com> - 1.16.0-1
changelog:
  - update to 1.16.0:
      - new HTTP stack: reduced network traffic, no more crashes
      - added support to call to a phone number
      - fixes subscription timeout handling, e.g. for buddy status updates


author: Stefan Becker <chemobejk@gmail.com> - 1.16.1-1
changelog:
  - update to 1.16.1: bug fix release
      - fixes call failure when host has multiple IP addresses
      - fixes buddy list handling after moving to Lync 2013
      - fixes crashes in new HTTP stack


author: Stefan Becker <chemobejk@gmail.com> - 1.17.0-1
changelog:
  - update to 1.17.0:
      - added Lync 2013 support: buddy list modification, buddy photo, group chat
      - added support for group chat history
      - fixes group chat: duplicate messages & users, HTML tags in text
      - fixes EWS autodiscover for Office 365


author: Stefan Becker <chemobejk@gmail.com> - 1.17.1-1
changelog:
  - update to 1.17.1:
      - fixes typing notifications
      - fixes that passwords were not entity encoded
      - accept alternatives for webticket timestamp/keydata


author: Stefan Becker <chemobejk@gmail.com> - 1.17.2-1
changelog:
  - update to 1.17.2:
      - fixes problems with typing notifications fix (bz #1031554)
      - fixes crash when groupchat session expired


author: Stefan Becker <chemobejk@gmail.com> - 1.17.3-1
changelog:
  - update to 1.17.3:
      - fixes crash when groupchat session expired (again)
      - fixes HTTP re-authentication with NTLM
      - fixes UCS Persona key extraction


author: Stefan Becker <chemobejk@gmail.com> - 1.18.1-1
changelog:
  - update to 1.18.1:
      - fixes crash when gstreamer nice plugin is missing (bz #1071710)
      - fixes false "not delivered" errors in conference
      - fixes incorrect HTML escaping for URLs
      - fixes conference call ending in error message
      - fixes endless loop with failed HTTP Basic authentication
      - fixes EWS autodiscover for some Office 365 users
      - fixes missing "Copy to" in buddy menu


author: Stefan Becker <chemobejk@gmail.com> - 1.18.2-1
changelog:
  - update to 1.18.2:
      - fixes crash when PersistentChat sends BYE
      - fixes joining of conference for some users
      - fixes conference call ending in error message
      - fixes EWS autodiscover for some Office 365 users
      - UCS now honors email URL set by user


author: Stefan Becker <chemobejk@gmail.com> - 1.18.3-1
changelog:
  - update to 1.18.3:
      - fixes audio/video call if host has IPv6 address (bz #1124510)
      - fixes assert triggered by EWS autodiscover in older libxml2 versions
      - fixes crash triggered by EWS autodiscover when glib2 < 2.30.0


author: Stefan Becker <chemobejk@gmail.com> - 1.18.4-1
changelog:
  - update to 1.18.4:
      - fixes ADFS failure when user and login name differ
      - fixes a longstanding issue that the Pidgin user status sometimes
        didn't switch back to "Available" after the end of a meeting
      - fixes some memory leaks


author: Stefan Becker <chemobejk@gmail.com> - 1.18.5-1
changelog:
  - update to 1.18.5:
      - fixes Pidgin user status being stuck in "Away"
      - fixes RealmInfo request when user and login name differ


author: Stefan Becker <chemobejk@gmail.com> - 1.19.0-1
changelog:
  - update to 1.19.0:
      - added support for automatic authentication scheme selection
      - added support for Multi-Factor Authentication (MFA)
      - added support for buddy photos from contact card
      - added support for SIP ID in contact search
      - added support for EWS based contact search when UCS is used
      - improves user experience for [MS-DLX] based contact search
      - fixes calendar state machine when EWS URL is set


author: Stefan Becker <chemobejk@gmail.com> - 1.19.1-1
changelog:
  - update to 1.19.1:
      - add workaround for farstream 0.1.x with libnice >= 0.1.10
      - fix SIP re-authentication timeout to be max. 8 hours


author: Stefan Becker <chemobejk@gmail.com> - 1.20.0-1
changelog:
  - update to 1.20.0:
      - add support for SRTP (requires libpurple >= 3.0.0)
      - parse HTML from Lync conference URL
      - fixes Office365 authentication failure (bz #1257485)


author: Stefan Becker <chemobejk@gmail.com> - 1.20.1-1
changelog:
  - update to 1.20.1:
      - add support for another type of ADFS response
      - improve configure check for back-ported features


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.6.9-0.fdr.1
changelog:
  - Update to 0.6.9.
  - Smoother experience with --excludedocs.
  - Don't change alternative priorities on upgrade.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.7.2-1
changelog:
  - 0.7.2, docs patch applied upstream.
  - Switch to GTK2 in -gtk.
  - Fine tune dependencies.
  - Build with dependency tracking disabled.
  - Clean up obsolete pre-FC2 support.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.8.0-3
changelog:
  - Fix X11 even race with gtk (#589998)
  - Fix qt4 problems with creating window in the background (#589532)


author: Mike A. Harris <mharris@redhat.com> 0.6.4-9
changelog:
  - Now how ironic is *this* one?...  The info documentation on pinfo has been
    missing from our packages.  Mass rebuild tests caught this.  Fixed now.
  - Added post/preun scripts for updating info dir db with install-info


author: Mike A. Harris <mharris@redhat.com> 0.6.8-8
changelog:
  - Added pinfo-0.6.8.memcorruption.patch and pinfo-0.6.8.memleak.patch by
    Sami Farin to fix a couple pinfo bugs reported in (#138770)


author: Mike A. Harris <mharris@redhat.com> 0.6.8-9
changelog:
  - Replaced pinfo-0.6.0-mkstemp.patch with updated pinfo-0.6.8-mkstemp.patch
    to fix an additional insecure tempnam() usage detected by our buildsystem


author: Mike A. Harris <mharris@redhat.com> 0.6.8-11
changelog:
  - Work around an idiotic bug in rpm (#118780) by using multiple Requires
    lines instead of the Requires(foo,bar) syntax that rpm documentation
    states is valid.  This fixes reported pinfo kickstart issue (#155700)


author: Miroslav Lichvar <mlichvar@redhat.com> 0.6.9-2
changelog:
  - use correct group when dropping group privileges (#221107)
  - open also files without .info suffix
  - make scriptlets safer
  - make sure readline support isn't compiled in


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - suppress /usr/lib64 (instead of /usr/lib) from LIBS by default on multilib
    arches where the default is to use lib64


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
    instance
  - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found
  - 'pki-setup'
  -     Bugzilla Bug #678157 - uninitialized variable warnings from Perl
  -     Bugzilla Bug #679574 - Velocity fails to load all dependent classes
  -     Bugzilla Bug #680420 - xml-commons-apis.jar dependency
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath
  -     Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library
        name for SafeNet LunaSA
  - 'pki-common'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #678715 - netstat loop fixes needed
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  - 'pki-selinux'
  -     Bugzilla Bug #674195: SELinux error message thrown during token
        enrollment
  - 'pki-ca'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  -     Bugzilla Bug #676330 - init script cannot start service
  - 'pki-silent'
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Require "jss >= 4.2.6-15" as a build and runtime requirement
  - Require "tomcatjss >= 2.1.1" as a build and runtime requirement
    for Fedora 15 and later platforms
  - 'pki-setup'
  -     Bugzilla Bug #688287 - Add "deprecation" notice regarding using
        "shared ports" in pkicreate -help . . .
  -     Bugzilla Bug #688251 - Dogtag installation under IPA takes
        too much time - SELinux policy compilation
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple
        extensions
  - 'pki-common'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled
        on the EE port
  - 'pki-selinux'
  -     Bugzilla Bug #684871 - ldaps selinux link change
  - 'pki-ca'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.(profile and CS.cfg only)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Bugzilla Bug #693327 - Missing requires: tomcatjss
  - 'pki-setup'
  -     Bugzilla Bug #690626 - pkiremove removes the registry entry for
        all instances on a machine
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.
  - 'pki-common'
  -     Bugzilla Bug #692990 - Audit log messages needed to match CC doc:
        DRM Recovery audit log messages
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.7-1
changelog:
  - 'pki-setup'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -     Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs
        throws 'Invalid protocol' for OCSP subsystems
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #698885 - Race conditions during IPA installation
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #699837 - service command is not fully backwards compatible
        with Dogtag pki subsystems
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #532548 - Tool to do DRM re-key
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-2
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Added 'DRMTool.cfg' configuration file to inventory
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.9-1
changelog:
  - Updated release of 'jss'
  - Updated release of 'tomcatjss' for Fedora 15
  - 'pki-setup'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-symkey'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-native-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #717765 - TPS configuration: logging into security domain
         from tps does not work with clientauth=want. (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-util'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-java-tools'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record
         processing) (mharmsen)
  -      Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #695403 - Editing signedaudit or transaction, system
         logs throws 'Invalid protocol' for OCSP subsystems (alee)
  -      Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (alee)
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (jmagne)
  -      Bugzilla Bug #698885 - Race conditions during IPA installation (alee)
  -      Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface:
         SubjectID=$Unidentified$ fails audit evaluation (jmagne)
  -      Bugzilla Bug #705914 - SCEP mishandles nicknames when processing
         subsequent SCEP requests. (awnuk)
  -      Bugzilla Bug #661142 - Verification should fail when a revoked
         certificate is added. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #707416 - additional audit messages for GetCookie (alee)
  -      Bugzilla Bug #707607 - Published certificate summary has list of
         non-published certificates with succeeded status (jmagne)
  -      Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated
         for tps and ca on server shutdown (jmagne)
  -      Bugzilla Bug #697939 - DRM signed audit log message - operation should
         be read instead of modify (jmagne)
  -      Bugzilla Bug #718427 - When audit log is full, server continue to
         function. (alee)
  -      Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in
         CA's signedaudit log when a directory based user enrollment is
         performed (jmagne)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-selinux'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #720503 - RA and TPS require additional SELinux
         permissions to run in "Enforcing" mode (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-ca'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
         (jdennis)
  -      Bugzilla Bug #699837 - service command is not fully backwards
         compatible with Dogtag pki subsystems (mharmsen)
  -      Bugzilla Bug #649910 - Console: an auditor or agent can be added to an
         administrator group. (jmagne)
  -      Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs
         for modify/add (alee)
  -      Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee
         pages (alee)
  -      Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs
         for a revocation invoked by EE user (awnuk)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'pki-silent'
  -      Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.
         (mharmsen)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.10-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #720510 - Console: Adding a certificate into nethsm
         throws Token not found error. (jmagne)
  -      Bugzilla Bug #719007 - Key Constraint keyParameter being ignored
         using an ECC CA to generate ECC certs from CRMF. (jmagne)
  -      Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding
         for any component value which is equal to its default value (alee)
  -      Bugzilla Bug #722989 - Registering an agent when a subsystem is
         created - does not log AUTHZ_SUCCESS event. (alee)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert
         (awnuk)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.11-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -      Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by
         renumbering "cn=<value>" (mharmsen)
  - 'pki-common'
  -      Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like
         (jmagne, awnuk)
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)
  -      Bugzilla Bug #708075 - Clone installation does not work over NAT
         (alee)
  -      Bugzilla Bug #726785 - If replication fails while setting up a clone
         it will wait forever (alee)
  -      Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk)
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #700505 - pki tomcat6 instances currently running
         unconfined (alee)
  - 'pki-ca'
  -      Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs
         in IPA profile (awnuk)
  - 'pki-silent'
  -      Bugzilla Bug #689909 - Dogtag installation under IPA takes too much
         time - remove the inefficient sleeps (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.12-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-symkey'
  - 'pki-native-tools'
  -      Bugzilla Bug #717643 - Fopen without NULL check and other Coverity
         issues (awnuk)
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #700522 - pki tomcat6 instances currently running
         unconfined, allow server to come up when selinux disabled (alee)
  -      Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated
         correctly when subsystem cloned (using hsm) (alee)
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-selinux'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  - 'pki-silent'


author: Ade Lee <alee@redhat.com> 9.0.13-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-ca'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-common'
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.14-1
changelog:
  - 'pki-setup'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-symkey'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-java-tools'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-common'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  -      Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-silent'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.15-1
changelog:
  - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen)
  - Bugzilla Bug #699809 - Convert CS to use systemd (alee)
  - 'pki-setup'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee)
  - 'pki-symkey'
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-native-tools'
  -      Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-util'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  -      Bugzilla Bug #737218 - Incorrect request attribute name matching
         ignores request attributes during request parsing. (awnuk)
  -      Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode
         (hsm+NSS). (jmagne)
  - 'pki-selinux'
  -      Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee)
  - 'pki-ca'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW (alee)
  -      Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS
         mode (cfu)
  - 'pki-silent'
  -      Bugzilla Bug #739201 - pkisilent does not take arch into account
         as Java packages migrated to arch-dependent directories (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.16-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  - 'pki-java-tools'
  - 'pki-common'
  -      Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after
         the in-place upgrade( CS 8.0->8.1) (cfu)
  - 'pki-selinux'
  - 'pki-ca'
  -      Bugzilla Bug #746367 - Typo in the profile name. (jmagne)
  -      Bugzilla Bug #737122 - DRM: during archiving and recovering,
         wrapping unwrapping keys should be done in the token (cfu)
  -      Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17
         (rawhide) . . . (mharmsen)
  -      Bugzilla Bug #749945 - Installation error reported during CA, DRM,
         OCSP, and TKS package installation . . . (mharmsen)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.2.a1
changelog:
  - Integrated 'pki-kra' into 'pki-core'
  - Integrated 'pki-ocsp' into 'pki-core'
  - Integrated 'pki-tks' into 'pki-core'
  - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.3.a1
changelog:
  - Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes
    in fundamental path structure in Fedora 17
  - 'pki-setup'
  -      Hard-code Perl dependencies to protect against bugs such as
         Bugzilla Bug #772699 - Adapt perl and python fileattrs to
         changed file 5.10 magics
  - 'pki-selinux'
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess


author: Ade Lee <alee@redhat.com> 10.0.0-0.5.a1
changelog:
  - 'pki-selinux'
  -      Added platform-dependent patches for SELinux component
  -      Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16)
  -      Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.7.a1
changelog:
  - For 'mock' purposes, removed platform-specific logic from around
    the 'patch' files so that ALL 'patch' files will be included in
    the SRPM.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.9.a1
changelog:
  - Initial attempt at PKI deployment framework described in
    'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.


author: Ade Lee <alee@redhat.com> 10.0.0-0.11.a1
changelog:
  - BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes
  - Corrected patch selected for selinux f17 rules


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.16.a1
changelog:
  - Integration of Tomcat 7
  - Addition of centralized 'pki-tomcatd' systemd functionality to the
    PKI Deployment strategy
  - Removal of 'pki_flavor' attribute


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.23.a1
changelog:
  - Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17
  - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy'
  - Altered PKI Package Dependency Chain (top-to-bottom):
    pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.24.a1
changelog:
  - Split pki-common into pki-base and pki-server.
  - Merged pki-util into pki-base.
  - Merged pki-deploy into pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.0-0.25.a1
changelog:
  - Merged pki-native-tools and pki-java-tools into pki-tools.
  - Modified pki-server to depend on pki-tools.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.32.a1
changelog:
  - TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances
    upon RPM "update" . . .
  - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy"
    from /usr/bin to /usr/sbin . . .


author: Ade Lee <alee@redhat.com> 10.0.0-0.53.b3
changelog:
  - Cleaned up spec file to provide only support rhel 7+, f17+
  - Added resteasy-base dependency for rhel 7
  - Update cmake version


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-0.56.b3
changelog:
  - TRAC Ticket #315 - Man pages for pkispawn/pkidestroy.
  - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.0-4
changelog:
  - TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and
    dogtag-pki.spec . . .
  - TRAC Ticket #468 - pkispawn throws exception


author: Ade Lee <alee@redhat.com> 10.0.1-1
changelog:
  - TRAC Ticket 214 - Missing error description for duplicate user
  - TRAC Ticket 213 - Add nonces for cert revocation
  - TRAC Ticket 367 - pkidestroy does not remove connector
  - TRAC Ticket #430 - License for 3rd party code
  - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP
  - Fix spec file to allow f17 to work with latest tomcatjss
  - TRAC Ticket 466 - Increase root CA validity to 20 years
  - TRAC Ticket 469 - Fix tomcatjss issue in spec files
  - TRAC Ticket 468 - pkispawn throws exception
  - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes
  - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . .
  - TRAC Ticket 437 - Make admin cert p12 file location configurable
  - TRAC Ticket 393 - pkispawn fails when selinux is disabled
  - Punctuation and formatting changes in man pages
  - Revert to using default config file for pkidestroy
  - Hardcode setting of resteasy-lib for instance
  - TRAC Ticket 436 - Interpolation for pki_subsystem
  - TRAC Ticket 433 - Interpolation for paths
  - TRAC Ticket 435 - Identical instance id and instance name
  - TRAC Ticket 406 - Replace file dependencies with package dependencies


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-2
changelog:
  - Removed runtime dependency on 'pki-server-theme' to resolve
    Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme


author: Matthew Harmsen <mharmsen@redhat.com> 10.0.1-3
changelog:
  - TRAC Ticket #517 - Clean up theme dependencies
  - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .


author: Endi S. Dewata <edewata@redhat.com> 10.0.1-9
changelog:
  - Renamed base/deploy to base/server.
  - Moved pki.conf into pki-base.
  - Removed redundant pki/server folder declaration.


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-0.7
changelog:
  - Added pki-server-upgrade script and pki.server module.
  - Call upgrade scripts in %post for pki-base and pki-server.


author: Endi S. Dewata <edewata@redhat.com> 10.0.2-2
changelog:
  - Added default pki.conf in /usr/share/pki/etc
  - Create upgrade tracker on install and remove it on uninstall


author: Matthew Harmsen <mharmsen@redhat.com> 10.1.0-0.2
changelog:
  - TRAC Ticket 606 - add restart / start at boot info to pkispawn man page
  - TRAC Ticket 610 - Document limitation in using GUI install
  - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory


author: Abhishek Koneru <akoneru@redhat.com> 10.1.0.0.9
changelog:
  - Listed new packages required during build, due to issues reported
    by pylint.
  - Packages added: python-requests, python-ldap, libselinux-python,
                    policycoreutils-python


author: Ade Lee <alee@redhat.com> 10.1.0-1
changelog:
  - Trac Ticket 788 - Clean up spec files
  - Update release number for release build
  - Updated requirements for resteasy


author: Dogtag Team <pki-devel@redhat.com> 10.2.0-0.1
changelog:
  - Added option to build without server packages.
  - Replaced Jettison with Jackson.
  - Added python-nss build requirement
  - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python
  - TRAC Ticket #840 - pkispawn requires policycoreutils-python
  - Updated requirements for resteasy
  - Added template files for archive, retrieve and generate key
    requests to the client package.


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.6
changelog:
  - Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires --
    drop dependency on java-atk-wrapper
  - Removed 'java-atk-wrapper' dependency from 'pki-server'


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.0-0.9
changelog:
  - Merged jmagne@redhat.com's spec file changes from the stand-alone
    'pki-tps-client' package needed to build/run the native 'tpsclient'
    command line utility into this 'pki-core' spec file under the 'tps' package.
  - Original tps libararies must be built to support this native utility.
  - Modifies tps package from 'noarch' into 'architecture-specific' package


author: Ade Lee <alee@redhat.com> 10.2.0-3
changelog:
  - Disable pylint dependency for RHEL builds
  - Added jakarta-commons-httpclient requirements
  - Added tomcat version for RHEL build
  - Added resteasy-base-client for RHEL build


author: Dogtag Team <pki-devel@redhat.com> 10.2.1-0.1
changelog:
  - Updated version number to 10.2.1-0.1.
  - Added CLIs to simplify generating user certificates
  - Added enhancements to KRA Python API
  - Added a man page for pki ca-profile commands.
  - Added python api docs


author: Christina Fu <cfu@redhat.com> 10.2.1-0.2
changelog:
  - Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by
    default and upgrade (cfu)
  - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen)
  - up the release number to 0.2


author: Matthew Harmsen <mharmsen@redhat.com> - 10.2.1-0.4
changelog:
  - PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2
  - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency.
  - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime
    dependencies


author: Dogtag Team <pki-devel@redhat.com> 10.2.2-0.1
changelog:
  - Updated version number to 10.2.2-0.1
  - Moved web application deployment locations.
  - Updated Resteasy and Jackson dependencies.
  - Added missing python-lxml build dependency.


author: Dogtag Team <pki-devel@redhat.com> 10.2.7-0.3
changelog:
  - Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on
    tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools
  - Updated dep on tomcatjss [Fedora 23 and later]


author: Dogtag Team <pki-devel@redhat.com> 10.3.0.a1-2
changelog:
  - PKI TRAC Ticket #1625 - Allow multiple ACLs of same name
    (union of rules) [ftweedal]
  - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap
    unconditionally [edewata]
  - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert
    request. [edewata]
  - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA
    certificates. [edewata]
  - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata]
  - PKI TRAC Ticket #1808 - Fixed illegal token state transition
    via TEMP_LOST. [edewata]


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-3
changelog:
  - PKI TRAC Ticket #691  - [MAN] pki-server man pages (mharmsen)
  - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with
    key-generate when --usages verify is passed (jmagne)
  - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS
    (cfu)
  - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key
    generation for non-encryption token keys (cfu)
  - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to
    'pki_default.cfg' & 'pkispawn' man pages (mharmsen)
  - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for
    shared vs non shared tomcat instance installation (mharmsen)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws
    IOError (edewata, ftweedal)
  - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core
    update on upgraded system (ftweedal)
  - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing
    it to "internal" (mharmsen)
  - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared
    secret from remote TKS (jmagne)
  - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws
    attribute error (ftweedal)
  - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with
    --help option (edewata)
  - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust
    flags (edewata)
  - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while
    specifying invalid parameters. (edewata)
  - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password
    during silent installation (edewata)
  - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg
    (ftweedal)
  - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given
    (ftweedal)
  - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance
    fails (ftweedal)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements
    (akasurde, edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-5
changelog:
  - PKI TRAC Ticket #978  - TPS connector man page: add revocation routing
    info (cfu)
  - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from
    Firefox' workarounds to appropriate 'pki' man page (jmagne)
  - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu)
  - PKI TRAC Ticket #2381 - Throws exception while providing invalid module.
    (edewata)
  - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable
    should accept only boolean value (edewata)
  - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter
    beyond CA signing cert in case of external or existing CA (cfu)
  - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements
    (akasurde, alee, cheimes, edewata, jmagne, mharmsen)
  - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not
    rpm-require hostname (mharmsen)
  - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and
    pki-server (cheimes)
  - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata)
  - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne)
  - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not
    apply the specified trust bits (alee)
  - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen
    during installation (alee)
  - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are
    not used (ftweedal)
  - PKI TRAC Ticket #2421 - Incorrect SELinux contexts
    Installation/Configuration (edewata)
  - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server
    is converted from CA-less to CA-full (edewata)
  - PKI TRAC Ticket #2428 - broken request links for CA's system certs in
    agent request viewing (cfu)
  - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial
    number in migration case (jmagne)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (mharmsen)
  - PKI TRAC Ticket #2433 - Lightweight CA GET <id>/chain returns bogus PEM
    data (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-7
changelog:
  - PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen)
    - CMCEnroll
  - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message
    "PKIException: LDAP error (21): error result" (edewata)
  - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade.
    (cheimes, edewata, mharmsen)
  - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata, mharmsen)
  - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem
    format with/without header works while pkcs7 with header is not allowed
    (edewata)
  - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-8
changelog:
  - PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne)
  - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor)
  - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open
  - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-9
changelog:
  - PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion
    (ftweedal)
  - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements
    (edewata)
  - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry
    deleted (ftweedal)
  - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if
    USN plugin enabled (ftweedal)
  - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per
    instance name (for shared HSM) (cfu)
  - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu)
  - PKI TRAC Ticket #2449 - Unable to create system certificates in different
    tokens (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-10
changelog:
  - Revert Patch:  PKI TRAC Ticket #2449 - Unable to create system certificates
    in different tokens (edewata)
  - Resolves:  rhbz #1374054 - ipa-replica-install fails setting up certificate
  - Restores:  rhbz #1319557 - pkispawn KRA instance is failing server
  - Removes from Errata:  rhbz #1372041 - Unable to create system certificates
    in different tokens


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-11
changelog:
  - PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu)
  - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a
    dependency package (mharmsen)
  - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar
    files (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-12
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does
    not show proper error message (alee)
  - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java
    (edewata)
  - ## RHCS 9.1.z Batch Update 1
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu)
  - Bugzilla Bug #1274096 -  [BUG] Add ability to disallow TPS to enroll a
    single user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-13
changelog:
  - ## RHEL 7.3.z Batch Update 1
  - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    (added KRA key recovery via CLI in FIPS mode)
  - ## RHCS 9.1.z Batch Update 1
  - Reverted patches associated with
    Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-14
changelog:
  - Marked the following RHCS 9.1.z bug:
    Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel
    when TPS and TKS security db is on fips mode. (jmagne)
    as a duplicate of RHEL 7.3.z bug:
    Bugzilla Bug #1389757 - Problems with FIPS mode (edewata)
    and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-15
changelog:
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1404175 -  pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-base] (edewata)
  - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI [pki-tps] (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 -  TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-16
changelog:
  - Separate original patches into RHEL and RHCS portions
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1404900 - RHCS logging properties (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-17
changelog:
  - ## RHCS 9.1.z Batch Update 3
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - ## RHEL 7.3.z Batch Update 3
  - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1417064 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website
    incorrect (alee)
  - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6
    environment. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-18
changelog:
  - ## RHEL 7.3.z Batch Update 4
  - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN
    (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.0-1
changelog:
  - Require "jss >= 4.4.0-1" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate
    when --usages verify (vakwetu)
  - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does
    not show proper error message (vakwetu)
  - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN
    (ftweedal)
  - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1325071 - add options to enable/disable cert or crl
    publishing. (vakwetu)
  - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata)
  - Bugzilla Bug #1372052 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1375347 - Typo in comment line of
    UserPwdDirAuthentication.java (edewata)
  - Bugzilla Bug #1376226 - IPA replica-prepare failed with error
    "Profile caIPAserviceCert Not Found" (ftweedal)
  - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata)
  - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen)
  - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHEL 7) (edewata)
  - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA
    (vakwetu)
  - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata)
  - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL)
    (jmagne)
  - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate
    (vakwetu)
  - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website
    incorrect (vakwetu)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne)
  - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata)
  - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata)
  - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6
    environment. (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu)
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)
  - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHCS 9) (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (RHCS) (jmagne)
  - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata)
  - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS)
    (jmagne)
  - ############################################################################


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-1
changelog:
  - Require "nss >= 3.28.3" as a build and runtime requirement
  - Require "jss >= 4.4.0-4" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement
  - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
    failure (edewata)
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
    implementation (cfu)
  - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
    cert requests (cfu)
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
    protection cert mechanism (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-2
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1282504 - Installing pki-server in container reports
    scriptlet failed, exit status 1 (jpazdziora)
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHEL) (jmagne)
  - Bugzilla Bug #1437591 - cli authentication using expired cert throws an
    exception (edewata)
  - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
    request (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHCS) (jmagne)
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
  - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
    implementation (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-3
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
    startTime parameter is not working as expected. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
  - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
  - Bugzilla Bug #1445088 - profile modification cannot remove existing config
    parameters (ftweedal)
  - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHEL) (alee)
  - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
    pki CLI terminates SSL connection (edewata)
  - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHCS) (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
    HSM is used. (alee)
  - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
  - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
    the KRA (ftweedal)
  - Bugzilla Bug #1448204 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
    thales hsm (alee)
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
    CMC with identity proof (cfu)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (mharmsen)
  - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
    defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
  - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
  - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
  - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
  - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
    audit event. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1445519 - CA Server installation with HSM fails
    (jmagne)
  - Bugzilla Bug #1452617 - Unable to create IPA Sub CA
    (ftweedal)
  - Bugzilla Bug #1454471 - Enabling all subsystems on startup
    (edewata)
  - Bugzilla Bug #1455617 - Key recovery on token fails because
    key record is not marked encrypted (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-8
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (edewata)
  - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
    ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - Bugzilla Bug #1454450 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
    is asking for password when already provided (edewata)
  - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
  - Bugzilla Bug #1458043 - Key recovery using externalReg fails
    with java null pointer exception on KRA (alee)
  - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
    (edewata)
  - Bugzilla Bug #1458429 - client-cert-import --ca-cert should
    import CA cert with trust bits "CT,C,C" (edewata)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
     revocation non-signing cert requests (cfu)
  - Bugzilla Bug #1458047 - change the way aes clients refer to
    aes keysets (alee)
  - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
    (alee)
  - Bugzilla Bug #1460028 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1458043 - Key recovery on token fails with
    invalid public key error on KRA (alee)
  - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
    deleting the any of the subsystem certs from it (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-11
changelog:
  - # Resolves: rhbz #1469432
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1469432 - CMC plugin default change
  - # Resolves CVE-2017-7537
  - # Fixes BZ #1470948


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-12
changelog:
  - # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
        - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
      - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
      - # Bugzilla Bug #1463350 - Access banner validation (edewata)
    - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
        - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
    - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
      - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
      - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
      - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-13
changelog:
  - Resolves: rhbz #1463350
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1463350 - Access banner validation (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-14
changelog:
  - #Require "jss >= 4.4.0-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
  - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
    - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
    - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
    - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
    - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
    - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
    - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
  - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
    - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin


author: Dogtag Team <pki-devel@redhat.com> 10.5.0-1
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
    (jmagne)
  - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
    setup with CMC signed certificates (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-6
changelog:
  - Updated jss, nuxwdog, and openssl dependencies
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
    few cases (ftweedal)
  - Bugzilla Bug #1428021 - CC: shared token storage and retrieval
    mechanism (cfu)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
    would cause error (cfu)
  - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
     (alee)
  - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
    pkispawn (alee)
  - Bugzilla Bug #1520526 - p12 admin certificate is missing when
    certificate is signed Externally (edewata)
  - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
     instance (alee)
  - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
    missing nextupdate field (ftweedal)
  - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
  - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
    in several different files after installation completes (alee)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
    audit event logging at startup (jmagne)
  - Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
    (alee)
  - Bugzilla Bug #1525306 - CC: missing CMC request and response record
    (cfu)
  - Bugzilla Bug #1532933 - Installing subsystems with external CMC
    certificates in HSM environment shows import error (edewata)
  - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
    (edewata)
  - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
    permitted in fips mode (mharmsen)
  - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
    outcomes. (edewata)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
    revRequest.issuer (cfu)
  - Bugzilla Bug #1541853 - ProfileService: config values with
    backslashes have backslashes removed (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
    - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-8
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1542210 - pki console configurations that involves ldap
    passwords leave the plain text password in debug logs (jmagne)
  - Bugzilla Bug #1543242 - Regression in lightweight CA key replication
    (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
  - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
    and FIPS (edewata)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a1.2jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed %post and %postun sections for javadoc.
  - Defined _with_gcj_supoprt and _gcj_support.
  - Changed to use cp -p to preserve timestamps.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-0.8.a2.1.2
changelog:
  - Update to maven 3
  - Replace nonstandard groups names with standard ones
  - Drop support for non-maven build
  - Add workarounds for RPM bug
  - Cleanup according to Fedora Packaging Guidelines
  - Include missing copyright file in javadoc package


author: Michal Srb <msrb@redhat.com> - 0:1.0-0.9.a2.1
changelog:
  - migrated to plexus-containers-container-default (#878580)
  - using global is preferred over define when defining macros
  - removed not used custom depmap file and its occurrence in spec file
  - removed unused Ant buildfile
  - fixed release number


author: Matt Wrigne <mwringe@redhat.com> - 0:1.0-0.1.a6.1jpp.1
changelog:
  - Fix rpmlint issues
  - Version package to new jpp versioning standards
  - Remove javadoc post and postun sections


author: Jaromir Capik <jcapik@redhat.com> - 0:1.2-2
changelog:
  - Removal of plexus-maven-plugin dependency (not needed)
  - Minor spec file changes according to the latest guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.3-1
changelog:
  - Update to upstream version 2.3
  - Use apache-commons-compress for bzip2 (de)compression
  - Resolves: CVE-2012-2098


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.4.2-2
changelog:
  - Update to latest packaging guidelines
  - Remove MIT license (only applies to test cases not binary rpm)


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a7s.2jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Fixed %Vendor.
  - Fixed %Distribution.
  - Fixed instructions on how to generate source drop.
  - Removed %post and %postun sections for javadoc.
  - Made sure lines had less than 80 characters.
  - Changed to use cp -p to preserve timestamps.


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.0-0.2.a7s.1.7
changelog:
  - drop repotag
  - label license as Unknown (hopefully, upstream will get back to us before the sun explodes)


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a4.2jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Edited instructions on how to generate the source drops.
  - Removed %post and %postun sections for javadoc.
  - Added gcj support.


author: Michal Srb <msrb@redhat.com> - 0:1.0-0.15.a14
changelog:
  - Removed dependency to plexus-container-default (Resolves: #878570)
  - Removed forgotten older tarball from sources file
  - Fixed various rpmlint warnings


author: Yong Yang <yyang@redhat.com> 0:1.2-0.a9.5
changelog:
  - Add BRs maven2-plugin-surfire*, maven-doxia*
  - Rebuild with maven2-2.0.8 built in non-bootstrap mode


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.4-1
changelog:
  - Update to latest upstream version
  - Drop ant build parts
  - Versionless jars & javadocs
  - Enable tests again


author: Andrew Overholt <overholt@redhat.com> 0:1.2-7
changelog:
  - Remove gcj support
  - Default to building with ant
  - Add patch to include fixed file headers
    (http://jira.codehaus.org/browse/PLX-418)


author: Deepak Bhole <dbhole@redhat.com> - 0:1.5.2-2jpp.1
changelog:
  - Fix license
  - Disable aspectj compiler until we can put that into Fedora
  - Remove vendor and distribution tags
  - Removed javadoc post and postuns, with dirs being marked %doc now
  - Fix buildroot per Fedora spec


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.8-1
changelog:
  - Update to latest version (1.8)
  - Create extras subpackage with optional compilers
  - Provide maven depmaps
  - Versionless jars & javadocs


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.8-3
changelog:
  - Build with maven 3
  - Don't install compiler-test module (nothing should use it anyway)
  - Fixes accoding to current guidelines
  - Install depmaps into extras separately


author: Michal Srb <msrb@redhat.com> - 1.0-0.2.alpha11
changelog:
  - Use direct link in Source0
  - Improved prep/setup section
  - mvn-rpmbuild verify is now in check section
  - More specific files section
  - add_maven_depmap macro now with -a option


author: Yong Yang <yyang@redhat.com> 1.0-0.1.a34.5
changelog:
  - Add BRs maven2-plugin-surfire*, maven-doxia*
  - Merge from RHEL-4-EP-5 1.0-0.1.a34.2, add plexus-containers-sourcetarget.patch
  - Rebuild with new maven2 2.0.8 built in non-bootstrap mode


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.5.5-1
changelog:
  - Update to latest upstream
  - Remove obsolete patches
  - Use maven 3 to build
  - Packaging fixes
  - Versionless jars & javadocs


author: Deepak Bhole <dbhole@redhat.com> - 1.5.5-5
changelog:
  - Resolves rhbz#791339
  - Applied fix from Omair Majid <omajid at redhat dot com> to build with Java 7


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.5.5-7
changelog:
  - Fix license tag (Plexus license was replaced by MIT some time ago)
  - Update javadoc plugin BR version


author: Yong Yang <yyang@redhat.com> 1.0-5
changelog:
  - Add BRs maven-doxia*, qdox
  - Enable jpp-depmap
  - Rebuild with new maven2 2.0.8 built in non-bootstrap mode
  - ignore test failure


author: Tania Bento <tbento@redhat.com> - 0:1.0-0.b6.3jpp.1
changelog:
  - Fixed %Release tag.
  - Changed the svn URL.
  - Added instruction on how to tar the files extracted with svn export.
  - Fixed %BuildRoot tag.
  - Removed %post and %postun sections for javadoc and made necessary changes.
  - Added gcj support.


author: Jaromir Capik <jcapik@redhat.com> - 1.0-0.b10.2.2
changelog:
  - Migration to maven3
  - Migration from plexus-maven-plugin to plexus-containers-component-metadata
  - Minor spec file changes according to the latest guidelines


author: Yong Yang <yyang@redhat.com> - 0:1.0-0.a2.7
changelog:
  - Don't run the tests as they reqyuire access to the net
  - Add BRs maven-doxia*
  - Rebuild with new maven2 2.0.8 built in non-bootstrap mode


author: Andrew Overholt <overholt@redhat.com> 0:1.0-0.a2.9
changelog:
  - Remove gcj support
  - Remove javadoc post scriplet
  - Add patch to clarify license (http://jira.codehaus.org/browse/PLX-417)
  - Fix license
  - Use tarball with versioned directory


author: Andrew Overholt <overholt@redhat.com> 1.0-0.1.a4.5
changelog:
  - Remove gcj support
  - Fix license tag
  - Improve source build instructions
  - Remove "excalibur-" prefix from two BRs


author: Alexander Kurtakov <akurtako@redhat.com> 1.0-0.3.a7
changelog:
  - Update to alpha 7.
  - Apply patch to fix rhbz#621714.
  - Use global instead of define.
  - Drop ant build - broken after update.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4-4
changelog:
  - Fixes according to new guidelines
  - Add spice-parent to Requires
  - Versionless jars & javadocs
  - Use maven3 to build


author: Tania Bento <tbento@redhat.com> - 0:1.1.2-2jpp.1
changelog:
  - Fixed %License.
  - Fixed %BuildRoot.
  - Fixed %Release.
  - Removed the %post and %postun for javadoc.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed "%define section free".
  - Added the gcj support option.
  - Added BR for jakarta-commons-logging.


author: Jaromir Capik <jcapik@redhat.com> - 0:1.1.8-7
changelog:
  - Migration to maven3
  - Removal of plexus-maven-plugin (not needed)
  - Minor spec file changes according to the latest guidelines


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.30.1
changelog:
  - Drop upstreamed patches
  - Patch from Charlie to update artwork
  - Patch from Charlie to make password screen match animation better
    (bug 468899)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110419.1
changelog:
  - unlock tty when reopening in case it spontaenously goes bonkers
    and we need to fix it up
    Resolves: #655538


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110822.1
changelog:
  - Update to latest git snapshot
  - Reintroduce accidentally dropped spinner theme and systemd integration


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110809.3
changelog:
  - Change spec based on suggestion from Nicolas Chauvet <kwizart@gmail.com>
    to fix scriptlet error during livecd creation
    Resolves: #666419


author: Ray Strode <rstrode@redhat.com> 0.8.6-1
changelog:
  - Update to 0.8.6
  - Fixes encrypted fs bug
    Resolves: #830482
  - Adds support for offline package updates


author: Tom Callaway <spot@fedoraproject.org> - 0.8.6.1-3
changelog:
  - fix bz704658 (thanks to Ian Pilcher for the patch), resolves issue where spinfinity theme
    never goes idle and thus, never exits to gdm


author: Dave Airlie <airlied@redhat.com> 0.8.6.2-1.2012.07.23
changelog:
  - fix plymouth race at bootup breaking efi/vesa handoff.
  - fix version number - its against fedora package policy to have 0.year


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2013.12.10.1
changelog:
  - Update to latest snapshot, but revert text splash back to tribar
  - Fixes systemd unit files and lets us drop our upstreamed patches
    Resolves: #1040015
  - Uses udev for device enumeration
    Resolves: #1026571
  - Correct "charge" theme description


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2014.01.10.1
changelog:
  - Update to latest snapshot
  - Fixes ask-for-password feature
    Resolves: #1043689
  - Drops bogus delay when hitting escape
    Resolves: #1049379


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.3.20140113
changelog:
  - Read OS string from REDHAT_BUGZILLA_PRODUCT instead of PRETTY_NAME
    in /etc/os-release to work around a lorax bug.
    Resolves: #911553
  - Fix text splash when explicitly configured by user
    Related: #911553
    Related: #1026571


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.9.20140113
changelog:
  - Ignore early fb devices
    Resolves: #1063758
    Resolves: #1064235
    Resolves: #1066641
  - Ignore udev if using lone serial console
    Resolves: #1058049
  - Fix password at start up race
    Resolves: #1070707
    Resolves: #1073145


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.15.20140113
changelog:
  - Ship label plugin in initrd
    Resolves: #801932
  - Backport udev queue detection fix which may help missing password
    prompt on hyper-v
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.16.20140113
changelog:
  - Ensure graphical special gets terminal even if drm driver isn't
    boot_vga (more fixes for hyper-v)
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.25.20140113
changelog:
  - Read OS string from PRETTY_NAME instead of REDHAT_BUGZILLA_PRODUCT
    again, this time munging it to get rid of parts we want to hide.
    Related: #911553
    Resolves: #1306543


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
  - Fix color of text progress bar
    Related: #1167735
  - Fix escape key during media check of live image
    Resolves: #1167735


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.28.20140113
changelog:
  - Don't change file mode of boot.log.  Instead, remember what mode
    the admin set it to.
    Related: #916704
  - Don't unlink boot.log before opening it.
    Related: #916704


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.29.20140113
changelog:
  - Fall back to text mode if /dev/dri/card0 can't modeset
    Resolves: #1431141
  - Remove unnecessary post scripts that rpm -V output
    Resolves: #1266085


author: Jeremy Katz <katzj@redhat.com> - 0.09-1
changelog:
  - Remove button module on suspend
  - Set default kernel in grub to current one when hibernating 
    so that resume works


author: Phil Knirsch <pknirsch@redhat.com> - 0.10-1
changelog:
  - Added missing pciutils-devel BuildRequires (#182566) 
  - Fixed missing vbestata save/restore calls for video suspend/resume (#182167, 
    - Renamed hook scripts to allow local pre and post inserts (#179421)
  - Added support for blinking led lights on Thinkpad Laptops during suspend
    (#179420)
  - Added pm-powersave script for powersaving via HAL (#169054)
  - Added symlinks for pm-shutdown and pm-restart (#165953)


author: Jeremy Katz <katzj@redhat.com> - 0.11-1
changelog:
  - fix display on resume with nvidia graphics
  - add infrastructure to tell what pm-util is running; don't resume 
    video on return from hibernate as the BIOS has already re-initialized it


author: Phil Knirsch <pknirsch@redhat.com> - 0.13-1
changelog:
  - Revert last changes for ATI graphics chips as they seem to cause more
    problems than they solved.


author: Peter Jones <pjones@redhat.com> - 0.16-1
changelog:
  - rework the difference between hibernate and suspend; get rid of PM_MODE
  - add 00clear script
  - move default_resume_kernel from "functions" to 01grub's hibernate section


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - add more helper functions
  - rework things that were forking an extra subshell
  - fix the suspend lock
  - work around bluetooth/usb suspend wackiness


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - update from CVS
  - move pam and consolehelper stuff here.
  - move video hooks here since HAL isn't ready


author: Jeremy Katz <katzj@redhat.com> - 0.19-3
changelog:
  - doing the vbestate save/restore on intel video with the modesetting 
    intel xorg driver is broken.  so don't do it.


author: Peter Jones <pjones@redhat.com> - 0.19.1-1
changelog:
  - Hopefully fix Centrino ThinkPad suspend+resume
  - Hopefully fix Intel Mac Mini/MacBook suspend+resume


author: Peter Jones <pjones@redhat.com> - 0.19.1-3
changelog:
  - Disable bluetooth suspend/reusme hook by default; the kernel modules seem
    to support this correctly these days.


author: Phil Knirsch <pknirsch@redhat.com> - 0.19.1-4
changelog:
  - Start/stop correct services in 10NetworkManager hook (#215253)
  - Fixed check for /sys/power/disk and /sys/power/state (#214407)
  - Added proper error messages in case /sys/power/disk or /sys/power/state are
    missing (#215386)
  - Removed service calls and module load/unload for bluetooth hook (#213387)
  - Added hook file to restore the sysfont after resume (#215391)
  - Added the possibility to disable hibernate and suspend completely via the
    config file (#216459)
  - Symlinked the config file to /etc/sysconfig/power-management (#216459)
  - Fixed pm-powersave permission check bug (#222819)
  - Small specfile cleanups


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6
changelog:
  - Fixed missing builds for vbetool and radeontool for some archs (#241469)
  - Fixed typo in functions where wrong variable was used (#241633)


author: Adam Jackson <ajax@redhat.com> 0.99.3-11
changelog:
  - Install (not just build) vbetool and radeontool on x86_64 too
  - Explicitly list files under %_sbindir, so they don't drop away again
  - Light spec cleanups


author: Till Maas <opensource till name> - 0.99.3-12
changelog:
  - Adjust %files to own /etc/pm/ and /usr/lib/pm-utils/ (#233906)
  - remove (C|CXX|F)FLAGS definitions, they are already in %configure
  - remove Core in Summary tag
  - add URL for pm-utils
  - add %{?arm} to ExclusiveArch (#245463)
  - remove vbetool and require it (it is a separate package now)
  - remove radeontool and require it (it is a separate package now)
  - Update License Tag
  - cleanup buildrequires
  - clear %setup


author: Peter Jones <pjones@redhat.com> - 0.99.4-1
changelog:
  - Merge new upstream
  - remove pm/power.d/laptop-tools
  - add --quirk-reset-brightness (needed for the Fujitsu Lifebook S7110)


author: Till Maas <opensource till name> - 0.99.4-3
changelog:
  - remove unused patch (vidhooks)
  - add patch to keep logfile (RH #237840 (f7), #238068 (devel)), 
    to keep selinux context
  - simplify spec
  - restore selinux context of logfile in %post 
  - use rpmmacros more often


author: Till Maas <opensource till name> - 0.99.4-10
changelog:
  - enhance hd-apm-restore and add a config file
  - fix source-definition for hd-apm-restore
  - add hook suffix for hook script


author: Till Maas <opensource till name> - 0.99.4-12
changelog:
  - remove ExclusiveArch, because it contains all supported archs
    (in case an arch schould be excluded, please use ExcludeArch)
  - improve readability of usermode setup
  - remove pm-restart pm-shutdown from usermode setup, because
    there are no such binaries
  - list more files in %files explicit to make it obvious when
    there are changes in the distributed package
  - add .conf suffix to oldconfig files


author: Till Maas <opensource till name> - 0.99.4-14
changelog:
  - add pm-utils-bugreport-info.sh script to collect information for bugreports
  - require Hal (RH #428452)


author: Till Maas <opensource till name> - 1.1.0-5
changelog:
  - remove double %dir %{_libdir}/pm-utils
  - update pm-utils-99hd-apm-restore to work with current pm-utils release
    Red Hat Bugzilla: #442294
  - move config file for hd apm restore away from config.d, which is only used
    for pm-utils internal config anymore
  - own /var/run/pm-utils/ and create storage/locks subdirs (may be
    needed for selinux)
  - make sure an empty logfile is created after install (touch -a ...)
  - sort %files
  - make Source0: an URL
  - remove Conflicts: bluez utils, all supported Fedora releases ship
    already a newer version
  - remove unused BR: hal-devel, dbus-devel, pkgconfig, docbook-utils


author: Richard Hughes <rhughes@redhat.com> - 1.1.0-8
changelog:
  - Rip out all the consolehelper and PAM stuff - users are not meant to be
    running these tools directly and it's a massive change from upstream.


author: Till Maas <opensource@till.name> - 1.1.2.2-2
changelog:
  - %pre and %post scriptlets should not be needed anymore, old
    config files should be already moved in every supported release
    and the selinux context for the logfile should be restored by
    rpm
  - remove pcitulils BR, it was needed for vbetool, which is in a
    separate package now
  - substitute %{__rm} macros for uniform macro usage


author: Richard Hughes <rhughes@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - The core hook-running machinery will now abort running hooks of one fails,
    and the front-end scripts will return a failure error code if hook-running
    was aborted.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2.1-1
changelog:
  - Update to 1.2.2.1
  - Supports automatically pulling quirks from HAL and has the ability to save
    the last working set of quirks to an .fdi file.


author: Richard Hughes <rhughes@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fixes a glitch in module unloading
  - Numerous small usability and debugging improvements


author: Richard Hughes <rhughes@redhat.com> - 1.2.5-1
changelog:
  - New upstream version
  - If running on a system that is using KMS, we will refuse to handle any video
    quirks passed to us by HAL, and we will not chvt to an empty console.
  - Fix a longstanding bug in tuning scheduler powersaving knobs on SMT systems.


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Richard Hughes <rhughes@redhat.com> - 1.2.6-1
changelog:
  - New upstream version
  - Make KMS detection more accurate for several KMS drivers
  - Fix several typos on the documentation.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-1
changelog:
  - New version
  - Dropped pm-utils-99hd-apm-restore hook, similar functionality provided by
    harddrive script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-3
changelog:
  - Used append instead of write for init_logfile (#660329)
  - Fixed and ghosted /var/run/pm-utils (#656668)
  - Added postun script to clean state storage
  - Updated pm-utils-bugreport-info.sh, it requires root privileges for
    correct function, moved to sbin


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-12
changelog:
  - Added support for grub2 in 01grub hook (grub2 patch)
  - Fixed hooks exit code logging (hook-exit-code-log patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-13
changelog:
  - Fixed line spacing in logs to be easier to read (log-line-spacing-fix patch)
    Resolves: rhbz#750755


author: - Gerd Hoffmann <kraxel@redhat.com> - 1.6.10-3.fc9
changelog:
  - remove all unneeded (zlib/libpng copy) header files.
  - fix Source: URL.
  - get cflags and libs from pkg-config.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Upgrade to 1.04, editied the pbm2ppa patch to add <string.h>
  - to pbmtpg.c, which uses strmp, edited the redhat patch to
  - apply cleanly.


author: Tim Waugh <twaugh@redhat.com> - 1:1.04-19
changelog:
  - Consistent use of macros.
  - Removed ancient obsoletes tag.
  - Clean buildroot in install section not prep section.
  - Make setup quiet.
  - Use noreplace for config files.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.34-10
changelog:
  - Add BuildRequires: perl(Test::More), BuildRequires: docbook-dtds.
  - Activate tests.
  - Fix Source0:-URL.
  - Spec file cosmetics.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.40.1-1
changelog:
  - Upstream update.
  - Add po4a-v0.40.1.diff (add missing file t/compare-po.pl)
  - Make testsuite working.
  - Spec overhaul.
  - Eliminate /usr/bin/env perl.
  - Require perl >= 5.10.1


author: Richard W.M. Jones <rjones@redhat.com> - 0.44-1
changelog:
  - New upstream version 0.44.
  - Fix incorrect use of File::Temp->tempfile (RHBZ#953066).
  - Tidy up the spec file.
  - po4a-build.conf.5 and po4a-runtime.7 man pages are no longer
    installed in the English version for some (unknown) reason.


author: Richard W.M. Jones <rjones@redhat.com> - 0.44-9
changelog:
  - Fix bang path /usr/bin/env perl -> /usr/bin/perl (RHBZ#987035).
  - Increase verbosity of po4a when building to help diagnose build errors.
  - +BR Pod::Parser.
  - Disable 24-tex.t which does not run and does not produce any
    useful diagnostics either.


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local;
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
  	* Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol.
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
  	semodule utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  		* audit2allow: process MAC_POLICY_LOAD events
  		* newrole: run shell with - prefix to start a login shell
  		* po: po file updates
  		* restorecond: bail if SELinux not enabled
  		* fixfiles: omit -q
  		* genhomedircon:  fix exit code if non-root
  		* semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan.
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy.
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
  	and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
  	* Add semanage dontaudit to turn off dontaudits from Dan Walsh.
  	* Fix semanage to set correct mode for setrans file from Dan Walsh.
  	* Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
  	* setfiles: estimate percent progress
  	* load_policy: make link at the destination directory
  	* Rebuild polgen.glade with glade-3
  	* sepolicy: new command to unite small utilities
  	* sepolicy: Update Makefiles and po files
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* add po file configuration information
  	* po: stop running update-po on all
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* gui: Start using Popen, instead of os.spawnl
  	* sandbox: Copy /var/tmp to /tmp as they are the same inside
  	* qualifier to shred content
  	* semanage: Fix handling of boolean_sub names when using the -F flag
  	* semanage: man: roles instead of role
  	* gui: system-config-selinux: Catch no DISPLAY= error
  	* setfiles: print error if no default label found
  	* semanage: list logins file entries in semanage login -l
  	* semanage: good error message is sepolgen python module missing
  	* gui: system-config-selinux: do not use lokkit
  	* secon: add support for setrans color information in prompt output
  	* restorecond: remove /etc/mtab from default list
  	* gui: If you are not able to read enforcemode set it to False
  	* genhomedircon: regenerate genhomedircon more often
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
  	* fixfiles: relabel only after specific date
  	* po: update translations
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid
  	* sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs
  Resolves: #1018913


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-89
changelog:
  - Update to latest sepolicy tool chain.
  - Document semodule -P
  - Verify input to semanage permissive -a is a valid domain.
  - Assigning login user with semanage login, range should default to user record


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Properly build the swig exception file from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville.
  	* Fix init_policy warning from Laurent Bigonville.
  	* Fix semanage logging from Laurent Bigonville.
  	* Open newrole stdin as read/write from Sven Vermeulen.
  	* Fix sepolicy transition from Sven Vermeulen.
  	* Support overriding CFLAGS from Simon Ruderich.
  	* Create correct man directory for run_init from Russell Coker.
  	* restorecon GLOB_BRACE change from Michal Trunecka.
  	* Extend audit2why to report additional constraint information.
  	* Catch IOError errors within audit2allow from Dan Walsh.
  	* semanage export/import fixes from Dan Walsh.
  	* Improve setfiles progress reporting from Dan Walsh.
  	* Document setfiles -o option in usage from Dan Walsh.
  	* Change setfiles to always return -1 on failure from Dan Walsh.
  	* Improve setsebool error r eporting from Dan Walsh.
  	* Major overhaul of gui from Dan Walsh.
  	* Fix sepolicy handling of non-MLS policy from Dan Walsh.
  	* Support returning type aliases from Dan Walsh.
  	* Add sepolicy tests from Dan Walsh.
  	* Add org.selinux.config.policy from Dan Walsh.
  	* Improve range and user input checking by semanage from Dan Walsh.
  	* Prevent source or target arguments that end with / for substitutions from Dan Walsh.
  	* Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
  	* Support deleteall for restoring disabled modules from Dan Walsh.
  	* Improve semanage error reporting from Dan Walsh.
  	* Only list disabled modules for module locallist from Dan Walsh.
  	* Fix logging from Dan Walsh.
  	* Define new constants for file type character codes from Dan Walsh.
  	* Improve bash completions from Dan Walsh.
  	* Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
  	* Add semanage tests from Dan Walsh.
  	* Split semanage man pages from Dan Walsh.
  	* Move bash completion scripts from Dan Walsh.
  	* Replace genhomedircon script with a link to semodule from Dan Walsh.
  	* Fix fixfiles from Dan Walsh.
  	* Add support for systemd service for restorecon from Dan Walsh.
  	* Spelling corrections from Dan Walsh.
  	* Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
  	* Switch sandbox to openbox window manager from Dan Walsh.
  	* Coalesce audit2why and audit2allow from Dan Walsh.
  	* Change audit2allow to append to output file from Dan Walsh.
  	* Update translations from Dan Walsh.
  	* Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  Resolves: #1002529
  Resolves: #924105
  Resolves: #918140
  Resolves: #1028096

  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
  	* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
  	* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
  	* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
  	* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
  	* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
  	* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-1
changelog:
  - Fix Mass Rebuild problems
  - Update to upstream 
  	* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections
  Resolves: #1049977


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-5
changelog:
  - Remove default s0 range from semanage-login command. It is handled in seobject.py.
  Resolves:#1028106


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-12
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1103292


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-13
changelog:
  - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error
  Resolves:#1082956
  - Make fixfiles_exclude_dirs working if there is a substituion for the given directory
  Resolves:#1082676
  - Add ability to list the actual active modules
  Resolves:#1075023
  - Update XDG_RUNTIME_DIR directory
  Resolves:#1112811
  - Fix semanage man page to talk about  semanage-* (8) man pages.
  Resolves:#1084390


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-16
changelog:
  - semanage: Use OrderedDict for list of fcontexts
  Resolves: rhbz#1206769
  - fixfiles: Cover file_context.XXX.homedir
  Resolves: rhbz#1186640


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-17
changelog:
  - Fix handling of Forking daemon, to allow systemd to handle it better
  Resolves: rhbz#1186648
  - Fix typo in semanage args for minimum policy store
  Resolves: rhbz#1208797
  - Allow to define sock file in /etc directory
  Resolves: rhbz#1188360


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - sepolgen: Add support for TYPEBOUNDS statement in INTERFACE policy
    files (#1319338)
  - Add documentation for MCS separated domains
  - Move svirt man page out of libvirt into its own


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Update sandbox types in sandbox manual
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - Fix multiple spelling errors
  - hll/pp: Warn if module name different than output filename


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6.2
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Don't use subprocess.getstatusoutput() in Python 2 code


author: Petr Lautrbach <plautrba@redhat.com> 2.5-7
changelog:
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - audit2allow: tests should use local copy not system
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - sandbox: create a new session for sandboxed processes - CVE-2016-7545
  - sandbox: do not try to setup directories without -X or -M


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-13
changelog:
  - hll/pp: Fix pp crash when processing base module (#1350806)
  - sepolicy: fix obtaining domain name in HTMLManPages (#1174744)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-14
changelog:
  - Fix export of fcontext socket entries (#1435100)
  - Fix checks whether a module name is passed to semanage-module (#1420527)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-15
changelog:
  - sepolicy: Do not fail when file_contexts.{homedirs,local} are not present (#1395778)
  - fixfiles - use quotes around "$FILEPATH" (#1241946)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-16
changelog:
  - Strip non-printable characters when parsing audit messages (#1406328)
  - Install seobject python module into arch specific path (#1061049)
  - restorecond: Decrease loglevel of termination message (#1422121)
  - semodule_package: do not fail with an empty fc file (#1390535)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-18
changelog:
  - semanage: Enable listing file_contexts.homedirs
  - semanage: Fix manpage author for ibpkey and ibendport pages.
  - semanage: Update man pages for infiniband
  - semanage: Update semanage to allow runtime labeling of ibendports
  - semanage: Update semanage to allow runtime labeling of Infiniband Pkeys
  - semanage: Improve semanage-port man page
  - fixfiles: do not dereference link files in tmp


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-20
changelog:
  - setfiles: Mention customizable types in restorecon man page (#1260238)
  - sepolicy: do not fail when file_contexts.local or .subs do not exist (#1512590)
  - semanage: Fix export of ibendport entries (#1471809)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-22
changelog:
  - semanage: Fix fcontext help message (#1499259)
  - semanage: Improve semanage-user.8 man page (#1079946)
  - semodule: Improve man page (#1337192)


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.97-1
changelog:
  - Update to 0.97. This release contains a port from EggDBus to the
    GDBus code available in recent GLib releases.


author: David Zeuthen <davidz@redhat.com> - 0.97-3
changelog:
  - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
  - Require GLib >= 2.25.12 instead of 2.25.11
  - Ensure polkit-gnome packages earlier than 0.97 are not used with
    these packages


author: David Zeuthen <davidz@redhat.com> - 0.101-2
changelog:
  - Nuke desktop_admin_r and desktop_user_r groups - just use the
    wheel group instead (#688363)
  - Update the set of configuration directives that gives users
    in the wheel group extra privileges


author: David Zeuthen <davidz@redhat.com> 0.102-2.el7
changelog:
  - Add patch to neuter the annoying systemd behavior where stdout/stderr
    is sent to the system logs


author: David Zeuthen <davidz@redhat.com> 0.103-1.el7
changelog:
  - Update to upstream release 0.103
  - Drop upstreamed patch
  - Drop Fedora-specific policy, it is now upstream (fdo #41008)


author: David Zeuthen <davidz@redhat.com> 0.104-1.el7
changelog:
  - Update to upstream release 0.104
  - Force usage of systemd (instead of ConsoleKit) for session tracking


author: David Zeuthen <davidz@redhat.com> 0.105-1.el7
changelog:
  - Update to upstream release 0.105
  - Nuke patches that are now upstream
  - Change 'PolicyKit' to 'polkit' in summary and descriptions


author: David Zeuthen <davidz@redhat.com> 0.106-1.el7
changelog:
  - Update to upstream release 0.106
  - Authorizations are no longer controlled by .pkla files - from now
    on, use the new .rules files described in the polkit(8) man page


author: David Zeuthen <davidz@redhat.com> 0.108-1.el7
changelog:
  - Update to upstream release 0.108
  - Drop upstreamed patches
  - This release dynamically loads the JavaScript interpreter and can
    cope with it not being available. In this case, polkit authorization
    rules are not processed and the defaults for an action - as defined
    in its .policy file - are used for authorization decisions.
  - Add new meta-package, polkit-js-engine, that pulls in the required
    JavaScript bits to make polkit authorization rules work. The default
    install - not the minimal install - should include this package


author: David Zeuthen <davidz@redhat.com> 0.108-3.el7
changelog:
  - Attempt to open the correct libmozjs185 library, otherwise polkit
    authz rules will not work unless js-devel is installed (fdo #57146)


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Shut up rpmlint about Summary:
  - Build with V=1
  - Use %{_unitdir} instead of hard-coding the path
  - Use the new systemd macros, primarily to run (systemctl daemon-reload)
    Resolves: #857382


author: Miloslav Trmač <mitr@redhat.com> - 0.111-1
changelog:
  - Update to polkit-0.111
    Resolves: #917888
  - Use SpiderMonkey from mozjs17 instead of js
  - Ship the signature in the srpm
  - Try to preserve timestamps in (make install)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.0-3
changelog:
  - patch to bring polkit auth dialog to front
  - patch restart polkit-kde on crash 
  - patch to remove unimplimented 'remember authorization' checkbox


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Radek Novacek <rnovacek@redhat.com> 0.96.1-2
changelog:
  - Fixed deprecation warning with polkit-0.98
  - Fixed typo in url
  - Null checking patch (might be fix for #637064)


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.0-3
changelog:
  - upstream crash patch (kde#258916,#684625)
  - pull a couple more upstream patches
  - -devel: drop Req: polkit-devel


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> 0.22.5-2
changelog:
  - Add poppler-0.22.5-CVE-2013-4473.patch
      (Limit length of output to pathName buffer)
  - Add poppler-0.22.5-CVE-2013-4474.patch
      (Check file pattern)
  - Resolves: #1025160


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-1
changelog:
  - Update to 0.26.5
  - Remove unused patches
  - Rereview patches from fedora
  - Modify RHEL patches so that they apply
  - Disable Qt5 explicitly
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-4
changelog:
  - Bump sonames of all frontends so that they loads symbols
  - from correct libpoppler.so.* when the compat-poppler022
  - package is installed.
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-5
changelog:
  - Remove PFB headers from embedded Type1 fonts
  - before embedding them into a PostScript file.
  - Resolves: #1241488


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #1034139).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.5-3
changelog:
  - fix init script LSB compliance (#528151)
  - update pflogsumm to 1.1.2
  - require Date::Calc for pflogsumm (#536678)
  - fix some rpmlint warnings


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.7-2
changelog:
  - Introduce systemd unit file, thanks to Jóhann B. Guðmundsson <johannbg@hi.is>
    Resolves: rhbz#718793


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-5
changelog:
  - %beta implies debug everywhere (also in upgrade part of build)
  - allow `rpmbuild -bi --short-circuit`
  - upgrade: setup previous (RHEL6) version as 8.14.3
  - upgrade: start old postgres with socket file in /var/run/postgresql


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-6
changelog:
  - disable aggressive loop optimizations for old codebase (#993532)
  - upgrade: stop old server in case of permissions problem (#896161)


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-1
changelog:
  - rebase postgresql to 9.2.5 #1019762 
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-2
changelog:
  - Resolves: #1019762 
  - additionally fixes rpmdiff filelist problem with
    /usr/share/doc/postgresql-9.2.5/html/bookindex.html.orig


author: Jozef Mlich <jmlich@redhat.com> - 9.2.6-1
changelog:
  - Resolves #1038688
  - rebase to 9.2.6 see changes at
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.7-1
changelog:
  - update to 9.2.7 per release notes (#1065845)
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.10-1
changelog:
  - update to 9.2.10 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    (rhbz#1198672 rhbz#1198673)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Tom Lane <tgl@redhat.com> 8.1.405-1jpp
changelog:
  - Split postgresql-jdbc into its own SRPM (at last).
  - Build it from source.  Add support for gcj compilation.


author: Tom Lane <tgl@redhat.com> 9.0.801-3
changelog:
  - Switch to non-GCJ build, since GCJ is now deprecated in Fedora
  Resolves: #722247
  - Use %{_mavendepmapfragdir} to fix FTBFS with maven 3


author: Tom Lane <tgl@redhat.com> 9.0.801-4
changelog:
  - Add BuildRequires: java-1.6.0-openjdk-devel to ensure we have recent JDK
  Related: #730588
  - Remove long-obsolete minimum versions from BuildRequires


author: Tom Lane <tgl@redhat.com> 9.1.901-3
changelog:
  - Change BuildRequires: java-1.6.0-openjdk-devel to just java-devel.
    As of 9.1-901, upstream has support for JDBC4.1, so we don't have to
    restrict to JDK6 anymore, and Fedora is moving to JDK7
  Resolves: #796580


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.1002-4
changelog:
  - don't use removed macro %add_to_maven_depmap (#992816)
  - lint: trim-lines, reuse %{name} macro, fedora-review fixes
  - merge cleanup changes by Stano Ochotnicky


author: Tom Lane <tgl@redhat.com> 08.01.0200-1
changelog:
  - Update to version 08.01.0200.
  - Upstream now calls the library psqlodbcw.so ... add a symlink to avoid
    breaking existing odbc configuration files.


author: Tom Lane <tgl@redhat.com> 08.01.0200-2
changelog:
  - Change library name back to psqlodbc.so, because it appears that upstream
    will revert to that name in next release; no point in thrashing the name.
  - Include documentation files unaccountably omitted before (bug #184158)


author: Tom Lane <tgl@redhat.com> 08.03.0100-1
changelog:
  - Update to version 08.03.0100
  - Since it looks like upstream has decided to stick with psqlodbcw.so
    permanently, allow the library to have that name.  But continue to
    provide psqlodbc.so as a symlink.


author: Tom Lane <tgl@redhat.com> 09.01.0200-1
changelog:
  - Update to version 09.01.0200
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: <sshedmak@redhat.com> - 1.3.2-1
changelog:
  - Fixed FSType, Preferred Style, UinqueID and Fullname
  - Fixed Invalid Glyph Names reported by fontlint
  - with exceptions string added in License


author: Sandeep Shedmake <sshedmak@redhat.com> - 1.3.3-1
changelog:
  - Added Indian Rupee Sign (U+20B9)
  - Modified URL to fedorahosted.org domain
  - Updated Source0 link
  - Added BuildRequires fontforge
  - Modified doc section


author: Adam Jackson <ajax@redhat.com> 1.7-2
changelog:
  - Don't suggest disabling g-p-m.  Any additional power consumption is more
    than offset by the ability to suspend.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.13-2
changelog:
  - Fixed sigwinch handling (#644800)
  - Readded strncpy patch as strncpy is safer than strcpy
  - Print all P-states in dump mode
  - Added explicit requires for pcituils (#653560)
  - Output error in interactive mode if there is no tty (#657212)
  - Do not suggest ondemand when p4-clockmod scaling driver is used (#497167)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.98-4
changelog:
  - Backported support for power_supply class
    (add-power-supply-class-support patch)
  - Added support for POWER_NOW readings
    (power-supply-add-power-now-support patch)
    Resolves: rhbz#796068


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-1
changelog:
  - New version
    Resolves: rhbz#821144
  - Dropped patches: unknown-readings-fix (upstreamed), compile-fix (upstreamed),
    power-supply-add-power-now-support (upstreamed),
    html-print-commands (upstreamed), add-power-supply-class-support (obsoleted),
    power-supply-units-fix (obsoleted)
  - Updated patches: show-watts-only-if-discharging patch (sent upstream),
    html-escape patch
  - Added patch: valid-html-output (sent upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-2
changelog:
  - Fixed segfault during calibration
    Resolves: rhbz#823502
  - Used macro optflags instead of variable RPM_OPT_FLAGS


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1-1
changelog:
  - New version
  - Removed patches (all upstreamed): show-watts-only-if-discharging,
    valid-html-output, factor-out-powertop-init, catch-fstream-errors


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2-4
changelog:
  - Reduced number of useless syscalls (reduce-syscalls patch) and
    fixed gpu wiggle (gpu-wiggle-fix patch)
    Resolves: rhbz#886185


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-1
changelog:
  - New version
    Resolves: rhbz#923729
  - Dropped fix-crash-on-readonly-fs, reduce-syscalls,
    gpu-wiggle-fix patches (upstreamed)
  - Dropped version-fix patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-5
changelog:
  - Fixed some possible unregistered parameters errors
    (by reg-net-param patch)
    Resolves: rhbz#1014662
  - Unlimit FDs (by unlimit-fds patch)
    Printed friendly error message if the system is running out
    of FDs (by fd-limit-err patch)
    Resolves: rhbz#1017668


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-8
changelog:
  - Fixed buffer overflow in cpufreq tunables on systems with many CPUs
    (by tunable-overflow-fix patch)
    Resolves: rhbz#1080191


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-9
changelog:
  - MSR read errors are no more fatal (by msr-check patch)
    Resolves: rhbz#1102088
  - Backported --auto-tune feature and added one-shot systemd service
    (by auto-tune patch)
    Resolves: rhbz#1143014
  - Improved handling of reporting filenames (by improve-reporting patch)
    Resolves: rhbz#1039822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-10
changelog:
  - Reintroduced -d, --dump option and added plain report mode,
    fixed parameters and manual page
    Resolves: rhbz#1333495


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a patch to use our own route.h, rather then glibc's (which has
    alignment problems on Alpha's) -- I only applied this patch on the Alpha,
    though it should be safe everywhere


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not
    required any more.
  - added buildroot
  - fixed the PAM support, which was really, completely broken and against any
    standards (session support is still not here... :-( )
  - we build against running kernel and pray that it will work
  - added a samples patch; updated glibc patch


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - New version 2.3.9 required for kernel 2.3.13 and will be required
    for new initscripts.  auth patch removed; 2.3.9 does the same thing
    more readably than the previous patch.


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.1-2
changelog:
  - add buildprereq on pam-devel (#49559)
  - add patch to respond to CBCP LCP requests (#15738)
  - enable cbcp support at build-time
  - change the Copyright: tag to a License: tag


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Thu Jun 06 2002 Phil Knirsch <pknirsch@redhat.com>
  	- Fixed varargs problem for s390/s390x.


author: Thomas Woerner <twoerner@redhat.com> 2.4.2-5
changelog:
  - example scripts are using change_resolv_conf to modify /etc/resolv.conf
    (#132482)
  - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound
    filter processing
  - not using internal libpcap structures anymore, fixes inbound/outbound
    filter processing (#128053)


author: David Woodhouse <dwmw2@redhat.com> 2.4.2-6.2
changelog:
  - Link pppoatm plugin against libresolv.
  - Revert to linux-atm headers without the workaround for #127098


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-1
changelog:
  - new version 2.4.3
    - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip,
      radiusplugin
    - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-2
changelog:
  - dropped all executable bits in scripts directory to prevent rpm requiring
    programs used in there


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch
  - enabled CBCP (#199278)


author: Martin Nagy <mnagy@redhat.com> 2.4.4-6
changelog:
  - call closelog earlier (#222295)
  - fix ChapMS2 (#217076)
  - moving header files to new -devel package (#203542)


author: Jiri Skala <jskala@redhat.com> - 2.4.4-14
changelog:
  - fixed #519042 - ppp package is missing URL in spec
  - fixed #524575 - ppp: no_strip patch modifies backup files created by previous patches


author: Jiri Skala <jskala@redhat.com> - 2.4.5-10
changelog:
  - fixes #613717 - Missing line in example script ip-up.local.add
  - removed /usr/kerberos/include from eaptls patch


author: Jiri Skala <jskala@redhat.com> - 2.4.5-12
changelog:
  - fixes #637513 - Missing: README.eap-tls
  - updated to latest eaptls upstream
  - fixes #637886 - EAP-TLS not working with enabled PPP Multilink Framing option


author: Jiri Skala <jskala@redhat.com> - 2.4.5-18
changelog:
  - fixes #682381 - hardcodes eth0
  - fixes #708260 - SELinux is preventing access on the file LCK..ttyUSB3


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.7.20120407git0deb9c
changelog:
  - update to 20120407git0deb9c
  - move timepps.h to sys (#852950)
  - include license files in devel subpackage
  - remove obsolete macros


author: Paul Howarth <paul@city-fan.org> 1.6.0-2
changelog:
  - Weed out documentation useful only to developers
  - Add dist tag
  - Use full URL for SOURCE0
  - Fix permissions on %{_sbindir}/pptp


author: Paul Howarth <paul@city-fan.org> 1.7.0-1
changelog:
  - new upstream version 1.7.0
  - remove patch, included upstream
  - edit Makefile to prevent attempted chown in %install
  - remove redundant %attr tag in %files
  - honour $RPM_OPT_FLAGS
  - ensure directories have correct permissions


author: Paul Howarth <paul@city-fan.org> 1.7.1-1
changelog:
  - new upstream version 1.7.1 (fixes #166394)
  - include new document PROTOCOL-SECURITY
  - cosmetic change: replace variables with macros


author: Paul Howarth <paul@city-fan.org> 1.7.1-3
changelog:
  - Change download URL from df.sf.net to downloads.sf.net
  - Expand tabs in spec
  - Clarify license as GPL version 2 or later


author: Paul Howarth <paul@city-fan.org> 1.7.2-1
changelog:
  - Update to 1.7.2
  - New script and manpage: pptpsetup
  - Add patch to remove reference to stropts.h, not shipped in F9 onwards


author: Paul Howarth <paul@city-fan.org> 1.7.2-3
changelog:
  - Add dependency on /sbin/ip
  - Disable parallel make - object files are missing dependency on config.h


author: Paul Howarth <paul@city-fan.org> 1.7.2-5
changelog:
  - Retain permissions on /etc/ppp/chap-secrets when using pptpsetup (#492090)
  - Use upstream versions of patches
  - Re-enable parallel build; Makefile dependencies now fixed
  - Use perl rather than sed to edit Makefile, for spec compatibility with
    ancient distro releases


author: Paul Howarth <paul@city-fan.org> 1.7.2-6
changelog:
  - Don't check for MPPE capability in kernel and pppd unless we're creating a
    tunnel that requires encryption
  - Don't check for MPPE capability in kernel and pppd at all because current
    Fedora releases and EL >= 5 include MPPE support out of the box (#502967)


author: Paul Howarth <paul@city-fan.org> 1.7.2-9
changelog:
  - Add some fixes from CVS:
    - Fix waitpid usage
    - Move free of connection struct out of main loop
    - Avoid using connection struct after it is freed


author: Paul Howarth <paul@city-fan.org> 1.7.2-10
changelog:
  - Add /etc/tmpfiles.d/pptp.conf to create /var/run/pptp at boot time for
    systems with /var/run on tmpfs (#656672)


author: Paul Howarth <paul@city-fan.org> 1.7.2-11
changelog:
  - Require systemd-units for ownership of /etc/tmpfiles.d directory
  - Fix Call-Disconnect-Notify operation


author: Paul Howarth <paul@city-fan.org> 1.7.2-13
changelog:
  - Patch to fix broken Call-Disconnect-Notify code accepted upstream
  - Add upstream patch to support setting SO_MARK for the PPTP TCP control
    connection as well as on the GRE packets
  - Add upstream patch to implement the --nohostroute option
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.1
changelog:
  - Drop compiler optimization level to -O0 as per upstream in attempt to
    resolve occasional segfault in pptpcm (#749455)
  - Add patch to fix highly-parallel build (e.g. -j16)


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.2
changelog:
  - Add patch to fix highly-parallel build (e.g. -j16)
  - Add additional compiler warning flags to highlight questionable code
  - Add patch to fix comparisons between signed and unsigned integers
  - Add patch to fix const usage
  - Add patch to fix missing field initializers
  - Add patch to suppress warnings about possibly unused variables
  - Add patch to fix declarations that are not prototypes
  - Add patch to fix warnings about nested externs
  - Add patch to fix dubious typecasts that violate strict-aliasing rules
  - Update the FSF address references and GPLv2 license text
  - Use default optimization level (-O2) again


author: Paul Howarth <paul@city-fan.org> 1.7.2-14
changelog:
  - Build with warning-fix patches to address occasional segfaults (#749455)
  - Patches have all now been merged upstream


author: Paul Howarth <paul@city-fan.org> 1.7.2-17
changelog:
  - Add note in options.pptp about MPPE not being available in FIPS mode
    (#845112)
  - Add note in options.pptp about PPTP with MSCHAP-V2 being insecure


author: Jakub Jelinek <jakub@redhat.com> 0.1.1-1
changelog:
  - relocate stabs and dwarf-2 debugging formats
  - support both --all and incremental prelinking
  - handle hardlinks
  - limit to libraries in /etc/prelink.conf directories or
    directories from command line


author: Jakub Jelinek <jakub@redhat.com> 0.1.2-1
changelog:
  - bail out early if ELF object does not have sh_offsets
    monotonically increasing
  - disallow prelinking if there are conflicts against read-only
    segments in shared libraries (ie. non-pic shared libraries
    - this is better than bailing out for all non-pic shared libraries)
  - add some C++ specific optimizations to reduce number of conflicts,
    more to come


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-1
changelog:
  - fix layout.c
  - create .gnu.prelink_undo section, --undo and --verify modes will use that
  - some more C++ specific optimizations


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-2
changelog:
  - use the new DT_GNU_CONFLICT/DT_GNU_LIBLIST/SHT_GNU_LIBLIST constants
  - unlink *.#prelink# files if necessary


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-3
changelog:
  - don't use .gnu.reloc section, use .rel.dyn or .rela.dyn instead
  - put RELATIVE relocs first, not last, so that DT_REL{,A}COUNT
    works
  - put in updated glibc patch
  - no need for special binutils patch - all is done in the -z combreloc
    patchset


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-4
changelog:
  - brown paper bag time: when determining if conversion from REL to RELA
    is needed, check all non-PLT rel sections, including last.
    This caused prelinking to fail with -z combreloc compiled libraries.


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-5
changelog:
  - fix sorting of .rel*.dyn sections, so that all RELATIVE relocs really
    come first
  - when DT_RELCOUNT already exists and conversion REL->RELA is done,
    convert it into DT_RELACOUNT
  - set conflict lookupent and conflictent to 0 for undefineds
  - don't bother with DT_REL*COUNT for apps, they cannot have any RELATIVE
    relocs


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-7
changelog:
  - fix layout code so that -R works
  - on IA-32, when there are no R_386_PC32 relocs and no R_386_32 relocs
    with non-zero addend (= memory content), don't convert REL->RELA,
    only switch R_386_32 relocs to R_386_GLOB_DAT
  - support creating a new PT_LOAD segment if necessary, if SHT_NOBITS
    sections are small, instead of adding new PT_LOAD segment just add file
    backing to those NOBITS sections
  - added testsuite
  - new supported architectures (Alpha including .mdebug section support,
    Sparc, Sparc 64-bit, X86_64 (the last one untested)), beginning of PPC
    support


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-1
changelog:
  - added --undo and --verify mode
  - new architectures s390, s390x, arm, sh
  - handle binaries/shared libraries with non-allocated sections
    without monotonically increasing sh_offsets
  - handle .sbss and .sdynbss
  - fixed a bug in 64-bit LE/BE read routines
  - removed .rel{,a}.dyn reloc conversion/sorting, it was duplicating
    ld's -z combreloc and complicated lots of things
  - fixed STB_LOCAL/STT_SECTION symbol adjusting
  - use mkstemp for temporary files, allow --verify for binaries/libs
    on read-only filesystems
  - added DWARF-2 .debug_ranges adjustement, special case GCC's
    "set base to 0 and make things absolute instead of relative" trick
  - allow arches to override default layout mechanism (for ppc)
  - added some new tests, test --undo and --verify modes in the testsuite
  - alpha: adjust what R_ALPHA_GLOB_DAT points to too
  - i386: apply _32 and _PC32 REL relocs, as apply_rel can be called
    for C++ optimizations before REL->RELA conversion
  - ppc: layout strategy to satisfy ppc lib location preferences
  - sparc64: handle R_SPARC_DISP64
  - x86-64: adjust what R_X86_64_RELATIVE points to too
  - link prelink statically, esp. because of --verify mode
  - run make check during build process


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-7
changelog:
  - when growing allocated shared lib sections (for REL->RELA
    conversion), make sure !PF_W and PF_W segments don't end up
    on the same page
  - when finding space for sections in an executable, make sure
    it is not included in between two reloc sections
  - for non-zero SHN_ABS symbols on 32-bit arches mask high
    32-bits of st_value (libelf 0.8.x is strict here)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-8
changelog:
  - avoid putting garbage into executable's .gnu.liblist sh_link
    if we did not have to grow .dynstr
  - don't segfault on bogus sh_link and sh_info values (#72705)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-9
changelog:
  - enable on ppc and x86_64
  - fix ppc far PLT slot prelink
  - support --undo on ppc
  - for bug-compatibility with some unnamed OS changed R_SPARC_RELATIVE
    --undo
  - tiny steps towards TLS support on IA-32, more will come


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-11
changelog:
  - make it work with elfutils instead of libelf 0.[78]
  - update to newer auto*/libtool
  - some more steps towards TLS support, at least --reloc-only should work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-13
changelog:
  - use ELF_F_PERMISSIVE if defined
  - be permissive even when doing --reloc-only
  - fix up .plt section sh_entsize on Alpha


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-18
changelog:
  - fix section indices in .symtab if non-alloced sections weren't
    originally monotonically increasing
  - s390, s390x and Alpha TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-20
changelog:
  - ppc TLS
  - some ppc64 work
  - avoid using trampolines for nested functions
  - fix typo in prelink man page (#89247)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-22
changelog:
  - don't adjust DT_REL{,A} if it is 0
  - allow prelinking of libraries with no dependencies
  - fix handling of libraries with no lazy relocs, no normal relocs or no
    relocs at all
  - some new tests
  - fix SH (Daniel Jacobowitz)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-23
changelog:
  - when updating dynamic tags for executable after section reshuffling,
    check section type as well, so that 0 sized sections don't get the
    tags attached instead of the proper ones
  - when an address space conflict is found between libraries for the same
    executable during layouting, check properly for all remaining conflicts
    as well


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-24
changelog:
  - optimize out conflicts in G++ 3+ virtual tables if they are just
    because some method has been called from a binary and thus there
    is a .plt slot in the binary. This change not only kills lots of conflicts
    on some KDE programs, but also should speed up runtime (not just startup
    time), since the hop through .plt is bypassed
  - added new C++ test
  - fix a bug in ppc64 fixup .plt code


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-25
changelog:
  - exec-shield support
  - with -R, don't randomize just base address from which all libs
    are layed out, but also slightly randomize order of libraries
    in the layout queue
  - add check-harder and check-cycle makefile goals in testsuite/,
    use it during rpm building


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-26
changelog:
  - don't segfault in C++ optimizations if a conflict from undefined
    to defined value is seen
  - some more ppc64 work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-27
changelog:
  - add --quick mode
  - new test for --quick mode and also reprelinking of binary against
    upgraded shared library which needs more conflicts


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-28
changelog:
  - finish and enable ppc64
  - fix ppc BR{,N}TAKEN reloc handling
  - fix up sh_offset values of zero-sized or SHT_NOBITS section
    if ld messed them up
  - issue error about bogus library dependency chains instead of
    segfaulting (plus testcases for it)


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-1
changelog:
  - make sure binaries prelinked for the second and later time without
    unprelinking in between verify correctly
  - make sure DT_CHECKSUM computation is the same for newly prelinked
    and second or later time prelinked libraries
  - dwarf2 abbrev hash bugfix
  - don't allow prelinking libraries outside directories specified
    in config file or on the command line
  - several new tests for reprelinking
  - pack non-alloced sections and section header table tightly after the
    last alloced section


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-2
changelog:
  - fix a thinko in the library path checking code
  - change R_386_GLOB_DAT into R_386_32 in .gnu.conflict, similarly
    R_X86_64_GLOB_DAT and R_X86_64_64
  - fix a bug in find_free_space which caused
    "section file offsets not monotonically increasing" errors on some
    IA-32 binaries
  - add --md5 and --sha options
  - use mmap during --verify if possible
  - add */lib64 directories to prelink.conf


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-1
changelog:
  - run prelink from cron automatically, add /etc/sysconfig/prelink
    to configure it
  - update manual page


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-2
changelog:
  - avoid assertion failures when changing PROGBITS .bss back into
    NOBITS .bss (#101813)
  - add 2 new tests for it


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-3
changelog:
  - fix DT_CHECKSUM computation - do STT_LOCAL symbol frobbing and .mdebug
    updates write_dso would do also before checksum computation (#89953)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-5
changelog:
  - fix prelink segfault on -z nocombreloc libraries (#103404)
  - run one make check round with -Wl,-z,nocombreloc to test handling
    of nocombreloc binaries and libraries


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-7
changelog:
  - don't rely on malloc/calloc/realloc with size 0 returning a unique pointer
  - fix testsuite, so that it works even if installed glibc/libstdc++
    is already prelinked


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-8
changelog:
  - use /var/lib/misc/prelink.full instead of /var/run/prelink.full for last
    full prelink timestamp (#106721)
  - warn about UPX compressed binaries or libraries/binaries without section
    headers (neither can be prelinked obviously)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-11
changelog:
  - fix adjustement of DT_VALRNGLO .. DT_VALRNGHI and
    DT_ADDRRNGLO .. DT_ADDRRNGHI dynamic tags when relocating shared
    libraries
  - never adjust p_vaddr/p_paddr/p_offset of PT_GNU_STACK segment
  - allow shell wildcards in /etc/prelink.conf
  - fix REL->RELA conversion of shared libraries if .rel.dyn
    or .rel.plt are last sections in readonly PT_LOAD segment
  - force full reprelinking on prelink upgrades (well, first time
    the cron job is run after the upgrade)
  - require coreutils, findutils, util-linux, gawk and grep


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-12
changelog:
  - added execstack tool
  - added -o option, to be used together with -u
  - free temp_filename in close_dso


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-15
changelog:
  - blacklist support
  - use FTW_ACTIONRETVAL if available to avoid even stating of
    files in blacklisted directory trees
  - SELinux support


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-18
changelog:
  - allow R_*_JU?MP_SLOT relocs to point also into .got.plt
    sections on IA32/AMD64/ARM/s390/s390x/SH


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-19
changelog:
  - refuse to prelink objects whose dependencies as reported by
    ldd don't include all dependencies transitively (this can
    happen when using RPATH and a shared library with the same
    SONAME exists both in that RPATH and either another RPATH
    or standard library directories)
  - add testcase for this
  - rework .dynsym/.symtab STT_SECTION translation, so that it works
    with binutils which put only sections not generated by the linker
    into .dynsym for shared libraries
  - fix make check, so that it is not confused by 2.6.x kernel
    VDSOs


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-20
changelog:
  - clearify message about unlisted dependencies
  - don't do SELinux context copying if is_selinux_enabled () < 0


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-21
changelog:
  - fix prelink abort in certain cases where a new PT_LOAD segment
    needs to be added (seen on AMD64)


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-1
changelog:
  - add prelink documentation (PDF format)
  - fix assertion failures on PPC (.sdynbss related, #115925)
  - fix prelink --help (#115202)
  - avoid free on uninitialized variable in one error path (#117332)
  - s/i386/%{ix86}/ to make mharris happy


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-2
changelog:
  - unlink temporary files if renaming to the destination or setting of
    security context failed (#118251)
  - fix bi-architecture prelinking (#118226)
  - if prelink called from the cron script fails, note the exit status
    into /var/log/prelink.log


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - fix cxx.c:68: find_cxx_sym: Assertive `n < ndeps' failed problem
    on 32-bit architectures (#118522)
  - build prelink.cache into temporary file and atomically rename over
    (#121109)


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-2
changelog:
  - add 2 new TLS testcases (one that fails e.g. with glibc < 2.3.3-28
    on IA-32)
  - SPARC TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-6
changelog:
  - change sed separator in testsuite scripts from | to , if \|
    is present in regexps, as that invokes undefined behaviour
    which changed between GNU sed 4.0.9 and 4.1


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-10
changelog:
  - support for non-absolute blacklist glob patterns (e.g. -b *.la)
  - cache information about non-prelinkable files (non-ELF, statically linked,
    too small .dynamic, DT_TEXTREL with conflicts against it; #132056)
  - other speedups for prelink -aq
  - for --verify, make sure only read-only fd's are opened for the
    unprelinked temporary file, otherwise a kernel might ETXTBUSY on it
    (#133317)
  - change warning message if some object's dependencies can't be found
  - add buildrequires libselinux-devel and use %{_tmppath} instead
    of /var/tmp in Buildroot (#132879)


author: Jakub Jelinek <jakub@redhat.com> 0.3.3-1
changelog:
  - if layout code needs to re-prelink some library, make sure
    all libraries that depend on it are re-prelinked too (#140081)
  - add several more checks before deciding it is ok to prelink a binary
    (even if another bug like #140081 was in, these checks should hopefully
    catch it and refuse to (re-)prelink the binary)
  - added new PRELINK_NONRPM_CHECK_INTERVAL variable to /etc/prelink,
    defaulting to 7 days.  Prelink nightly job will not do anything
    if that interval has not elapsed since last prelinking and
    and the rpm database has not been modified since that prelinking.
    This is useful if you rely on rpm/up2date/yum/apt-rpm for library
    and binary updates.  If you combine it with other means (installs
    from source, tarballs etc.), you probably want to
    set PRELINK_NONRPM_CHECK_INTERVAL=0.
  - update prelink man page (#126468)


author: Jakub Jelinek <jakub@redhat.com> 0.3.4-1
changelog:
  - fix prelink -uo when linked against libselinux (#146637)
    and when the -o argument filename is on a different filesystem
    than the object that needs undoing


author: Jakub Jelinek <jakub@redhat.com> 0.3.5-1
changelog:
  - support for ppc32 -msecure-plt libraries and binaries
  - don't crash if d_tag is invalid (#155605)
  - rebuilt against robustified libelf (CAN-2005-1704)
  - fix handling of libraries and binaries given on command
    line without any / characters in the filename


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-1
changelog:
  - remove kernel requires - installed kernel doesn't imply running
    kernel anyway and in FC5 kernels older than 2.4.20 can't be used
    anyway, as LinuxThreads are no longer included
  - don't relocate stabs N_{B,D,}SLINE (reported by Ashley Pittman)


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-3
changelog:
  - rebuilt again, disable -Wl,-z,nocopyreloc tests on x86_64,
    nocopyreloc really doesn't work on this platform (#180552)


author: Jakub Jelinek <jakub@redhat.com> 0.3.7-1
changelog:
  - in -q mode, recheck the canonicalized filename to avoid
    overwriting symlinks with regular files (#145983, #188062)
  - allow prelinking of binaries with .tbss section


author: Jakub Jelinek <jakub@redhat.com> 0.3.8-1
changelog:
  - fix -q mode canonicalization fix, speed up filename canonicalization
    by caching canonicalization for directories (#145983, #188062)
  - remove bogus e_shoff assertion check (#194016)
  - move prelink log file to /var/log/prelink/prelink.log (#194473)
  - increase x86-64 maxpagesize to 2MB


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-1
changelog:
  - DT_GNU_HASH support
  - handle N_BNSYM and N_ENSYM stabs (#198203)
  - handle upgrades from prelink with smaller maxpagesize to prelink
    with larger maxpagesize (#196941)


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-4
changelog:
  - fix adjusting of .debug_ranges if end of range is at the end of some
    section and there is padding before the following one


author: Jakub Jelinek <jakub@redhat.com> 0.3.10-1
changelog:
  - MIPS support (Richard Sandiford)
  - don't leave temporary files behind on prelink --verify failures (#199251)


author: Jakub Jelinek <jakub@redhat.com> 0.4.0-1
changelog:
  - add support for -c /etc/prelink.conf.d/*.conf in prelink.conf (#244452)
  - remove no longer existent directories from default prelink.conf (#248694)
  - reenabled prelink C++ optimizations which have not triggered any longer
    since _ZT[IV]* moved into .data.rel.ro section from .data
  - fixed performance issues in C++ optimizations, especially on GCJ
    CNI programs (#314051)
  - other performance improvements, prelink -avmR after prelink -ua now
    takes roughly 3m4s real time instead of 20m27s before
  - don't run TEXTREL tests if SELinux is enforcing (#245928)


author: Jakub Jelinek <jakub@redhat.com> 0.4.1-1
changelog:
  - add support for STT_GNU_IFUNC on i?86/x86_64 and R_{386,X86_64}_IRELATIVE
  - add support for DWARF3/DWARF4 features generated newly by recent
    gccs
  - temporarily link prelink against -lpthread to workaround -lselinux
    issue


author: Jakub Jelinek <jakub@redhat.com> 0.4.2-7
changelog:
  - BuildReq libselinux-utils (#571724)
  - handle R_390_{PC32DBL,16,PC16,PC16DBL,8} relocations in 31-bit objects
    (#552635)
  - add prelink.conf(5) man page as a link to prelink(8) (#528933)


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-1
changelog:
  - add support for prelink -u -o - library
  - add DWARF4 support
  - fix up reloc{8,9}.sh for sparc64, reenable testing on sparc64


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-6
changelog:
  - fix up DWARF4 DW_AT_data_member_location handling
  - add .debug_macro support
  - add DWZ multifile support


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
  - fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
  - change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Change to "License: GPL or artistic" from "Copyright: distributable"
  - Fix man page (#35825)
  - 3.15.1
  - redo config patch


author: Trond Eivind Glomsrød <teg@redhat.com> 3.22-4
changelog:
  - Add Telsa Gwynne's procmailrc as a doc file - it's
    excellently commented, and is a great example


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (x86-32) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-2
changelog:
  - fixing the following regressions:
  -   negative ETIME field in ps (#871819)
  -   procps states a bug is hit when receiving a signal (#871824)
  -   allow core file generation by ps command (#871825)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Changing URL/Source from gitorious to recently created sourceforge page
  - Replacing autogen.sh with autoreconf


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-7
changelog:
  - Disabling screen content restoration when exiting 'top' (#977561)
  - Enabling SIGWINCH flood prevention


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-11
changelog:
  - Support for libselinux (#975459)
  - Support for systemd (#994457)
  - Support for 'Shmem' in free (#993271)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.9-5
changelog:
  - Support for timestamps & wide diskstat (#1053428, #1025833)
  - Fixing fd leak in watch
  - Fixing format-security build issues
  - Skipping trailing zeros in read_unvectored (#1057600)
  - Resolves: rhbz#1053428, Related: rhbz#1025833


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-1
changelog:
  - Upgrading to 3.3.10
  - top.1: physical memory - has used / is using (#1119263)
  - Include man pages for openproc, readproc and readproctab (#1119260)
  - ps -p cycles over all PIDs instead of just one (#1060715)
  - Remove explicit dependency on systemd-libs package (#1113206)
  - Allow longer usernames to display in ps output (#1112734)
  - w doesn't display FROM by default (#1078310)
  - Return value of pgrep is incorrect (#1116309)
  - Should shared memory be accounted in cached in free output? (#1070736)
  - Resolves: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Resolves: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-2
changelog:
  - Replacing RC tarball with final 3.3.10 release
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-3
changelog:
  - Disabling translated man pages due to conflicts with man-pages-*
  - Removing /etc/sysctl.d (quietly stolen by systemd)
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-7
changelog:
  - Fixing sysinfo - devices with length exceeding 15 chars are not displayed in vmstat -d
  - Resolves: #1169349


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-9
changelog:
  - Fixes showing same cgroups for threads under process by adding format option
  - Resolves: rhbz#1284087


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (x86-64) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-6
changelog:
  - Fix java subpackage bugs #669345 and #669346
  - Use new maven plugin names
  - Use mavenpomdir macro for pom installation


author: Conrad Meyer <konrad@tylerc.org> - 2.4.1-9
changelog:
  - Fix packaging bug, -emacs-el subpackage should depend on -emacs subpackage of
    the same version (%version), not the emacs version number...


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Adrian Reber <areber@redhat.com> - 1.0.2-1
changelog:
  - new upstream release
  - split off protoc-c into protobuf-c-compiler to reduce runtime
    dependencies of the main package


author: Mike A. Harris <mharris@redhat.com> 6.3.2-7
changelog:
  - Change spec tag Copyright -> License
  - change logrotate to rotate daily, and keep 1 month (31 days) of data


author: Mike A. Harris <mharris@redhat.com> 6.3.2-9
changelog:
  - Fixed bug (#53307) psacct is enabled by default, and the log files
    are huge, and will fill the disk up very quickly.  logrotate will
    now compress them daily.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-11
changelog:
  - Conditionalized acct-6.3.2-config.patch to only be applied for RHL 7.x
    builds, as it breaks FHS compliance by putting files in nonstandard
    locations.  Also fixed up other places in specfile for FHS 2.2.
  - Added acct-6.3.2-I-HATE-GNU-AUTOCONK.patch because I hate GNU autoconk
    really really badly.
    
  - Bumped to -11 to avoid buildsystem stupidness


author: Mike A. Harris <mharris@redhat.com> 6.3.2-13
changelog:
  - Removed Build_7x flag, added FHS_compliant flag, reworked specfile to use new
    flag, and fixed bug (#60716)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-15
changelog:
  - Added new feature - psacct initscript now controls process accounting so
    that it is not just forced on if installed as was the previous behaviour
  - Modified the initscripts package to not force psacct on anymore and made
    the new psacct-6.3.2-15 conflict with previous initscripts packages.
  - Fixed logrotate config to set perms/owner of new log files, and closed
    bug (#54165)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-17
changelog:
  - Removed the files usracct and savacct, which are not used by psacct
    utilities at all, but by the sa program.  Our sa uses files in a different
    location, and so these files are unused and unnecessary.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-19
changelog:
  - Made initscript touch/chmod accounting file if it is not present during
    startup, to ensure accounting works properly when enabled.


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Take the time to make sure things get through on all archs, by simply
    running it through the build system.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-23
changelog:
  - Fixed chkconfig issue in rpm scripts (#61191)
  - Excludearch ia64, not taking the time to debug/troubleshoot random
    buildsystem failure due to higher priorities.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-24
changelog:
  - Fixed initscript reload/restart by creating start/stop functions and
    making everything use them (#72261)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-25
changelog:
  - Added with_last conditional to disable /usr/bin/last because ours is in
    the SysVInit package.  This fixes unpackaged files terminate build prob.


author: Charles Bennett <ccb@redhat.com> 6.3.2-33.fc4
changelog:
  - rhbz 133077: logrotate fixed to continue accounting during rotate
  - rhbz 141802: lastcomm was not handling all forms of --strict-match
  - rhbz 141971: rpm -e no longer leaves /var/lock/subsys/psacct
  - rhbz 43294: sa will never report any io because the kernel doesn't
     provide it.  Tweaked to ignore ac_io in acct.h
  - integrate lastcomm hz patch from RH support


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-2
changelog:
  - fix initscript (accton parameters changed)
  - fix lastcomm setings (#550229 - confusion about accounting file 
    location)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-5
changelog:
  - Fix the logrotate script and split its template to a separate file.
    (Michal Schmidt patch, thanks)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.4-4
changelog:
  - Resolves: #575975
    Build psacct with --enable-linux-multiformat
  - remove obsolete change
  - fix sa problem with hzval variable


author: Jan Görig <jgorig@redhat.com> - 6.5.5-1
changelog:
  - upgrade to new upstream release
  - remove obsolete patches
  - remove FHS_compliant condition
  - remove obsolete conflicts with initscripts
  - info installation fix
  - modified man-pages patch
  - spec fixes


author: Jaromir Capik <jcapik@redhat.com> - 6.5.5-8
changelog:
  - #759321 - psacct logrotate script references init.d service
  - #735300 - Enabling psacct causes daily cron spam


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Jan Görig <jgorig@redhat.com> 22.13-1
changelog:
  - updated to new upstream version
  - removed unused patch
  - peekfd should work on all architectures now
  - spec cleanups


author: Richard W.M. Jones <rjones@redhat.com> 22.20-1
changelog:
  - Update to 22.20.
    Contains a fix for: http://sourceforge.net/p/psmisc/bugs/53/
  - Fix src/pstree.c when SELinux is available.


author: Jaromir Capik <jcapik@redhat.com> - 22.20-6
changelog:
  - Fixing null pointer dereference introduced with namespaces
  - Fixing bogus dates in the changelog
  - Related: rhbz#980514


author: Jan Rybar <jrybar@redhat.com> 22.20-13
changelog:
  - fuser manpage: note about invisible other PIDs moved to RESTRICTIONS section
  - Resolves: rhbz#1400126


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - new version:
      Patchlevel 17 had some minor bugfixes and improvements
      - Trailer information now put before %EOF comments if no %Trailer
      - psselect can now add blank pages.
      - Piped input works in Linux
      - spec file rewrited for using Buildroot,
      - man pages gziped.


author: Timo Karjalainen <timok@iki.fi>
changelog:
  - Reverted back to un-gzipped man-pages (Redhat style)
  - Added patch to compile everything cleanly
  - Some minor changes to specfile


author: Tim Powers <timp@redhat.com>
changelog:
  - man pages in /usr/share/man (FHS compliant location)
  - grabbed spec from contrib
  - initial build for Powertools


author: Jiri Popelka <jpopelka@redhat.com> - 1.17-40
changelog:
  - fix dist tag and URL
  - put psutils-copyright.patch among sources as it's used only in
    psutils-remove-copyrighted-files
  - no need to define BuildRoot and clean it in %clean and %install anymore
  - %defattr no longer needed in %files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0:2.0.3-1
changelog:
  - Update to 2.0.3, minor and common spec adjustments + LGPL, %check,
    use URLs for official GNU companion sites.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.6-2
changelog:
  - Insert -g into CFLAGS after configure script removes it.
  - Disable configure check for obsolete sigstack(), which segfaults.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-5
changelog:
  - Patch pth-config.
    This shall fix the multiarch conflict in pth-devel (#342961).
    It must not return -I/usr/include and -L/usr/{lib,lib64} either,
    since these are default search paths already.
  - Replace the config.status CFLAGS sed expr with a patch.


author: Chris Tyler <chris@tylers.info> - 2.0.7-12
changelog:
  - Removed FORTIFY_SOURCE for %{arm} archs per Ajay Ramaswamy <ajayr@krithika.net>
  - See https://bugzilla.redhat.com/show_bug.cgi?id=750243


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2.8.3-4
changelog:
  - Add initial upstream patch to deal with Network interfaces with names other than eth - RHBZ 682388


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.2-4
changelog:
  * Sat Aug 25 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 2.10.7-1
  - New 2.10.7 stable release


author: Jeff Fearn <jfearn@redhat.com> 3.1.2-0
changelog:
  - Fix tests failing when publican not installed. BZ #908956
  - Fix broken mr-IN/Conventions.po. BZ #908956
  - Fix footnote link unclickable. BZ #909006
  - Fix missing translations for common files. BZ #908976
  - Fix using edition for version on cover pages. BZ #912180
  - Fix nested entities causing XML::TreeBuilder to fail. BZ #912187


author: Jeff Fearn <jfearn@redhat.com> 3.1.3-1
changelog:
  - Fix add_revision breaking XML parser. BZ #912985
  - Stronger fix for cover pages causing page number overrun. BZ #912967
  - Fix CSS for article front page subtile. BZ #913016


author: Jeff Fearn <jfearn@redhat.com> 3.1.4-0
changelog:
  - Fix entities in Book_Info braking build. BZ #917898
  - add translations of "Revision History". BZ #918365
  - Fix TOC title not translated in PDF. BZ #918365
  - Fix translated strings with parameters. BZ #891166
  - update translations
  - add it-IT translation of PUG via <fedora@marionline.it> BZ #797515


author: Jeff Fearn <jfearn@redhat.com> 3.2.0-0
changelog:
  - Add spaces to web-spec.xsl to work around newer libxml2 eating white space in spec files  BZ #982424
    - Fix typos in common content BZ #952490 #974918
    - Stop menu bouncing. BZ #953716
    - Fix ID missing from admonitions. BZ #966494
    - Support corpauthor for PDF. BZ #908666
    - Fix nested block tags breaking translation flow. BZ #909728
    - Fix multiple calls to update_po breaking packaging. BZ #891167
    - Add website labels and translations. BZ #979885
    - Add orgname to block/inline code. BZ #872955
    - Fix get_keywords not using correct info file. BZ #957956
    - Improve web print CSS. BZ #927513
    - Fix pre border in PDF. BZ #905752
    - Fix epub DOCTYPE. BZ #875129
    - Fix step first child style. BZ #971221
    - Fix long link word wrap in PDF. BZ #923481
    - Support case-insensitive "language" attribute. BZ #919474
    - Apply title style patch from Jaromir Hradilek. BZ #924518
    - Expose %book_ver_list to products/versions_index.tmpl. BZ #962643
    - Allow brands to ship web templates. Add site config toc_js. BZ #956935
    - Add pdftool option to build for pdf tool control. BZ #953728
    - Add default mapping for language to locale. BZ #844202
    - Fix ID missing from translated Revision History. BZ #911462
    - Add pub_dir option to override publish directory. BZ #830062
    - Removed show_unknown parameter and associated code. BZ #915428
    - Add img_dir parameter to override images directory. BZ #919481
    - Support all DocBook conditionals. BZ #919486
    - Flag spaces in product number as invalid. BZ #973895
    - Standardized prompts in commands. BZ #880456sources
    - Updated web_formats publican.cfg info BZ #839141
    - Replaced 'home page' with 'product or version page' BZ #921803
    - Replaced a broken link to CPAN with a working link BZ# 973461
    - Remove duplicate brand files from base install. BZ #966143
    - Add extras_dir parameter to override extras directory. BZ #953998
    - Fix PDF ignoring cover logo. BZ #974353
    - Add trans_drop action to freeze source language for translation. BZ #887707
    - Fix empty pot files not being deleted. BZ #961413
    - Fix long title layout on cover page in PDF. BZ #956934
    - Add Mac OS X Lion installation instructions. BZ# 979229
    - Add file handle limit workaround to FAQ BZ #952476
    - Support CDATA tags. BZ #958343
    - Fix UTF8 image names getting mangled in publish. BZ #953618
    - Add wkhtmltopdf_opts parameter to pass options to wkhtmltopdf. BZ #951290
    - Fix edition missing on PDF cover pages. BZ #956940
    - Support XML in add_revision member. BZ #862465
    - Fix duplicate footnotes in bibliography. BZ #653447
    - Fix Link from footlink to footlink-ref not working in PDF. BZ #909786
    - Fix TOC draft watermark in PDF. BZ #905271
    - Add common-db5 sub package. BZ #958495
    - Support decimals in colwidth & convert exact measures to pixels. BZ #913775
    - Tweak equation formatting. BZ #804531
    - Fix POT-Creation-Date format. BZ #985836
    - Fix site stats report swapping languages and products.
    - Fix web_dir not used for home page packages. BZ #988191
    - Updated web site instructions - BZ#979224


author: Jeff Fearn <jfearn@redhat.com> 0.8-0
changelog:
  - Setup per Brand Book_Templates
  - Fix soure and URL paths
  - Use release in source path
  - add OPL text as COPYING


author: Jeff Fearn <jfearn@redhat.com> 0.9-0
changelog:
  - Added PRODUCT entity with default msg. BZ #431171
  - Added BOOKID entity with default msg. BZ #431171
  - Fix keycap hard to read in admon BZ #369161
  - Added Brand Makefile
  - Added DocBook 4.5 DTD and 1.72.0 xsl


author: Andy Fitzsimon <afitzsim@redhat.com> 0.11-0
changelog:
  - optimised default stylesheet colours
  - author group improvements
  - formatting for revision history 
  - merged tocnav and documentation.css to defauly.css
  - updated icons
  - Fix doc URL


author: Jeff Fearn <jfearn@redhat.com> 0.13-0
changelog:
  - Fix missing list image in html-single articles
  - QANDA set css fix BZ #442674
  - Removed entities requiring mandatory override
  - Override PDF Theme
  - Added package tag BZ #444908
  - Added Article and Set Templates
  - Added code highlighting to CSS
  - Modify CSS to use new easier maintenance system.


author: Jeff Fearn <jfearn@redhat.com> 0.14-0
changelog:
  - Fix styles for publican 0.35 mods
  - Switch from html-single to html-desktop. BZ #458743
  - Removed common entity files as they break translation
  - Remove ID's from common files. BZ #460770


author: Jeff Fearn <jfearn@redhat.com> 0.18
changelog:
  - Updated redhat brand license. BZ #478405
  - Add LICENSE override for RPMs. BZ #477720
  - Fix layout issue in Legal Notice. BZ #477573


author: Rüdiger Landmann <r.landmann@redhat.com> 1.8
changelog:
  - remove reference to OPL licence
  - add max_image_width for BZ#580774
  - add confidential_text for BZ#588980


author: Rüdiger Landmann <r.landmann@redhat.com> 2.3-0
changelog:
  - Extend callout graphics to 40; adjust colour and font BZ #629804 <r.landmann@redhat.com>
  - Restrict CSS style for edition to title pages to avoid applying to bibliographies <r.landmann@redhat.com>


author: Rüdiger Landmann <r.landmann@redhat.com> 2.4-0
changelog:
  - Updated Italian translation Francesco Valente <fvalen@redhat.com>
  - rm fuzzies caused by BZ #628266 previously


author: Pierre Ossman <drzeus@drzeus.cx> 0.8.1-1
changelog:
  - Update to 0.8.1
  - Split into more packages
  - Remove the modules' static libs as those shouldn't be used (they shouldn't
    even be installed)


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.3-1
changelog:
  - Update to 0.9.3
  - GLib 1.2 bindings dropped.
  - Howl compat dropped as Avahi is supported natively.
  - Added fix for pc files on x86_64.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-3
changelog:
  - Add esound-compat subpackage that allows PulseAudio to be a drop-in
    replacement for esd (based on patch by Matthias Clasen).
  - Backport patch allows startup to continue even when the users'
    config cannot be read.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-4
changelog:
  - Add patch to handle ALSA changing the frame size (bug 230211).
  - Add patch for suspended ALSA devices (bug 228205).


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.2.svn20070812
changelog:
  - Update snapshot, contains 64 bit build fixes, and disables module-x11-xsmp by
    default to avoid deadlock when PA is started from gnome-session


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.3.svn20070812
changelog:
  - Depend on tcp_wrappers-devel instead of tcp_wrappers, to make sure we
    actually get the headers installed.


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.9.svn20070904
changelog:
  - Update SVN snapshot
  - ship libflashsupport in our package
  - drop pulseaudio-devel since libpulsecore is not linked statically


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.12.svn20070925
changelog:
  - New SVN snapshot
  - Split off libflashsupport again
  - Rename "-lib" packages to "-libs", like all other packages do it.
  - Provide esound


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.16.svn20071017
changelog:
  - Another SVN snapshot, fixing another round of bugs (#330541)
  - Split libpulscore into a seperate package to work around multilib limitation (#335011)


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-4.1
changelog:
  - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch
  - Make the Source0 tag point to URL instead of a local file
  - Drop the nochown patch; it's not applied at all and no longer needed


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-8
changelog:
  - Fix multilib issue (#228383)
  - Prevent dumping core if exiting sooner that ltdl initializaion (#427962)


author: Adam Jackson <ajax@redhat.com> 0.9.8-11
changelog:
  - pulseaudio-0.9.8-disable-realtime.patch: Don't ask PolicyKit for increased
    scheduling mojo for now.  It's not clear that it's a win; and if it is,
    the policy should just be fixed to always allow it.


author: Rex Dieter <rdieter@fedoraproject.org> 1.1-2
changelog:
  - -libs: Obsoletes: pulseaudio-libs-zeroconf
  - use versioned Obsoletes/Provides
  - tighten subpkg deps via %_isa
  - remove autoconf/libtool hackery


author: Wim Taymans <wtaymans@redhat.com> - 6.0-4
changelog:
  - Add more Requires to avoid testing multiple versions
  - enable hardened build
  - Fix missing %endif
  - Resolves: #1174548


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-7
changelog:
  - better autostart.patch, handle case were autospawn is disabled
    (or otherwise doesn't work, like for root user)
  - Resolves: #1269104


author: Wim Taymans <wtaymans@redhat.com> - 10.0-4
changelog:
  - Add support for usb audio in the Dell dock TB16
  - Add patches to improve default sinks
  - Resolves: #1457385


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Building 0.5.1rc1 with version number 0.5.0.91 (this should also fix the big
    error of pushing 0.5pre previously, since it breaks rpm's version comparison
    algorithm).
  - We use %{__python}. Too bad I can't pass --define's to distutils.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fix for bug 73967: site-packages/OpenSSL not owned by this package
  - Adding hacks around the lack of latex2html on ia64


author: Mihai Ibanescu <misa@redhat.com> 0.5.1-12
changelog:
  - lynx no longer supported, using elinks instead (patch from
    Michael Redinger <michael.redinger@uibk.ac.at>, bug #101947 )


author: Paul Howarth <paul@city-fan.org> - 0.6-1.p24.9
changelog:
  - add missing buildreq latex2html, needed to build HTML docs
  - rewrite to be more in line with Fedora python spec template and use
    %{python_sitearch} rather than a script-generated %files list
  - package is not relocatable - drop Prefix: tag
  - buildreq perl not necessary
  - fix permissions for files going into debuginfo package


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-1.fc10
changelog:
  - Update to 2.15.1
  - Bump glib2_version to 2.16.0.
  - Remove ancient automake_version.
  - Add a pygobject2-codegen subpackage.


author: - Matthew Barnes <mbarnes@redhat.com> - 2.16.0-1.fc11
changelog:
  - Update to 2.16.0
  - Remove patch for RH bug #457502 (fixed upstream).
  - Remove patch for GNOME bug #551059 and #551212 (fixed upstream).


author: Colin Walters <walters@verbum.org> - 2.21.1-6
changelog:
  - Switch to disabling pygi, remove my patch for now.  See commentary
    https://bugzilla.redhat.com/show_bug.cgi?id=569885#c38


author: Colin Walters <walters@verbum.org> - 2.21.4-4
changelog:
  - Update to latest upstream
  - Drop upstreamed patches
  - Require pycairo, since we have a module that uses it
  - Drop libtool overriding; was not commented and seems fine
    without
  - Drop --enable-thread, it's default now
  - Drop --enable-pygi, it's default now
  - Drop clean section, no longer needed in F-14
  - Drop python-sitearch copy&paste, no longer needed in F-14
  - Add SMP flags to make


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-2
changelog:
  - add another py3k patch so that we compile correctly under python 3
  - fixes a couple of print syntax and a try, except syntax


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-3
changelog:
  - add patch to work with PyCapsule since PyCObject is removed from 
    Python 3.2 which we ship in rawhide


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-4
changelog:
  - Edit PyCapsule patch to only use PyCapsule in Python 3.x
    since this effects header files which require other modules to 
    be recompiled.  There is actually discussion upstream to undeprecate it
    for the 2.x series


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.1-1
changelog:
  - update to upstream version 2.28.1 stable
  - fix the spec file's sources line to point to the correct ftp directory


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.2-1
changelog:
  - update to upstream version 2.28.2 stable
  - fixes issue in bug - https://bugzilla.redhat.com/show_bug.cgi?id=682543


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-1
changelog:
  - update to upstream 2.28.6
  - closure: avoid double free crash
  - GVariantType is a boxed struct in newer versions of glib
  - Revert back to a GVariant workaround since the fix hasn't migrated to
    Fedora's version of glib yet (workaround works in both cases)
  - closure: Check the out arg is not null.
  - Fix GC-related crash during PyGObject deallocation (remove patch from
    previous spec)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: John (J5) Palmieri <johnp@redhat.com> - 2.90.2-2
changelog:
  - fix up issues uncovered during package review
  - disable docs because they still reference the static bindings 
    and upstream is working on new documentation


author: Kalev Lember <kalevlember@gmail.com> - 3.7.1-2
changelog:
  - Remove lib64 rpaths (#817701)
  - Move code examples to the -devel subpackage and fix the multilib
    conflict (#831434)


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.1-3
changelog:
  - Add a patch to work under Python 2.3.
  - Stop shipping the tests as they are useless to the end user.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Miloslav Trmač <mitr@redhat.com> - 0.1-19.20090824bzr68
changelog:
  - Filter out bogus Provides: _gpgme.so
  - Drop no longer required references to BuildRoot:
  - s/%define/%global/g


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2-1
changelog:
  - Update for new upstream release.  Doesn't add any new code, just switches
    from a snapshot to a release and bumps version


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed typo in devel filelist
  - added macro that tests to see if we have libglade2, make the
    filelist a condition of that
  - changed name to 'pygtk2' to avoid name conflict with pygtk


author: Matt Wilson <msw@redhat.com> 1.99.16-1
changelog:
  - added a compatibility function for gtk.gdk.gc_new() so we won't have
    to fix all our code quite yet


author: Mark McLoughlin <markmc@redhat.com> - 2.5.3-2
changelog:
  - Backport fix for gnome #154779 - python signal handlers weren't
    getting executed while gobject.MainLoop was running


author: John (J5) Palmieri <johnp@redhat.com> - 2.7.3-3
changelog:
  - Add a BuildRequires on python-numeric so that Numeric
    python support is added
  - Add a Requires on python-numeric as well


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.3-1.fc7
changelog:
  - Update to 2.10.3
  - Spec file cleanups.
  - Define a python_sitelib macro for files under site_packages.


author: Matthew Barnes <mbarnes@redhat.com> - 2.12.1-1.fc9
changelog:
  - Update to 2.12.1
  - Remove patch for RH bug #217430 (fixed upstream).
  - Remove patch for GNOME bug #479012 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.13.0-2.fc10
changelog:
  - Restore pycairo and pygobject2 requirements, with a note to myself
    to stop screwing around with them (RH bug #460105).


author: Adam Jackson <ajax@redhat.com> 2.15.2-4
changelog:
  - Drop the explicit Requires: numpy as per new packaging guidelines.  If
    your app calls gtk.gdk.get_pixels_array() you need to pull numpy in
    yourself.


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-4
changelog:
  - manually specify PYTHON_LIBRARIES again, fixes regression that tries
    to load libpython<foo>.so from python<foo>-devel


author: Chris Lumens <clumens@redhat.com> 0.2-1
changelog:
  - Rename module to pykickstart to avoid conflicts in anaconda.
  - Rename data classes for consistency.
  - Add default bytesPerInode settings.


author: Chris Lumens <clumens@redhat.com> 0.3-1
changelog:
  - Add a deprecated attribute to options.
  - Add --card option back to xconfig and mark as deprecated.
  - Throw a deprecation warning on mouse and langsupport commands.
  - Rename Writer to KickstartWriter for consistency.
  - Collapse scripts into a single list and add an attribute on Script to
    differentiate.


author: Chris Lumens <clumens@redhat.com> 0.7-1
changelog:
  - Fix clearpart --all.
  - vnc command does not require --connect option (#172192).
  - network --onboot does not take any option.
  - Remove extra spaces from firewall --ports and --trust.
  - Write out network --<service> options.


author: Chris Lumens <clumens@redhat.com> 0.8-1
changelog:
  - Default to SELINUX_ENFORCING.
  - Default partition sizes to None for anaconda (#172378).
  - Don't call shlex.split on anything inside a script (#172313).


author: Chris Lumens <clumens@redhat.com> 0.13-1
changelog:
  - Recognize the --eject parameter to shutdown/halt.
  - Store the exact post-installation action in ksdata.


author: Chris Lumens <clumens@redhat.com> 0.18-1
changelog:
  - Fix some errors pychecker caught.
  - Allow exceptions to not be fatal so ksvalidator can spot more errors in
    a single pass (#179894).


author: Chris Lumens <clumens@redhat.com> 0.21-1
changelog:
  - Provide an option to not traceback on missing include files (#181760).
  - Update programming documentation.


author: Chris Lumens <clumens@redhat.com> 0.24-1
changelog:
  - Don't write out a blank xconfig line.
  - Reorder output handlers to group like commands together.
  - Mark strings for translation.


author: Chris Lumens <clumens@redhat.com> 0.26-1
changelog:
  - Ignore spaces before group names (#188095).
  - Added some translations.
  - Add options for repo command.
  - Reorder %packages section output.
  - Output %packages header options.
  - Initialize RAID and volume group members to empty lists.


author: Chris Lumens <clumens@redhat.com> 0.30-1
changelog:
  - Change order of LVM-related writing functions (#193073).
  - Require urlgrabber.
  - Return a more useful error message on unknown commands.
  - Fix logvol writing typo.
  - Make ksvalidator validate from a URL in addition to a file.
  - Don't write out an empty packages section (#192851).


author: Chris Lumens <clumens@redhat.com> 0.30-2
changelog:
  - Add BuildRequires to fix building under mock (#194156,  Joost Soeterbroek
    <fedora AT soeterbroek.com>).


author: Chris Lumens <clumens@redhat.com> 0.31-1
changelog:
  - Handle nfs --opts (katzj).
  - RAID devices should be integers instead of strings (#176537).
  - Add initial support for iscsi (katzj).


