# changelog

author: Jeremy Katz <katzj@redhat.com> 3.4.34-1
changelog:
  - grubby: fix segfault finding default if default doesn't have a root= (#66000)
  - don't include usb modules by default.  pass --with-usb to get usb modules
  - make sure kudzu exists before trying to exec it
  - handle multiple scsi hosts being present (#77422)
  - add /usr/sbin to default path (#79581)
  - fix using --builtin= (#80448)
  - grubby: preserve the mode on config files (#80776)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - mkinitrd: add support for finding gzipped modules
  - mkinitrd: don't be noisy if we don't have lvm-mod loaded


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby: don't bail when looking for root in appends of lilo-style configs
  - include grubby on x86_64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix some syntax errors
  - use grep's -q flag to save a redirect in places where we're not redirecting
    stderr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby could segfault by going into its lilo checking if it couldn't find 
    a default to copy (default had no root= and --bad-image-okay wasn't 
    being used)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - nash: create directories if needed in mkdevices command (#73090)
  - grubby: handle lilo case of non-linux default (#72202)


author: Erik Troan <ewt@redhat.com>
changelog:
  - --ifneeded is obsolete; we always need initrds
  - grubby lets you specify multiple indexes for --info
  - grubby lets you select kernels by title
  - added showlabels to nash
  - new-kernel-pkg sets the root device from /etc/fstab rather then inheriting it
  - new-kernel-pkg removes all entries w/ a duplicate label (67459)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added loadinitrd (used by mkbootdisk) on ia32 and sparc
  - modules "off" and "null" should be ignored (67086)
  - mkrootdev looks for root=LABEL=/ in /proc/cmdline, so root by label
    works again (fully determined by root= kernel parameter)
  - added --update-kernel and --remove-args arguments to grubby
  - kernel specification of ALL supported by grubby
  - DEFAULT accepted much more consistently
  - grubby --info displays info on all kernels specified, not just the first
  - ext3 need mbcache now (67354)
  - grubby allows config file entry numbers to be used as kernel paths
  - support /etc/sysconfig/grub.conf
  - display lba info from lilo.conf file in --info


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - don't run lilo twice on kernel removal in new-kernel-pkg
  - don't run grubby to add/remove kernels from new-kernel-pkg if 
    bootloader config doesn't


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --bootloader-probe to grubby
  - wrote a man page for grubby
  - include grubby on ia64
  - updated new-kernel-pkg to work with lilo/elilo
  - added --info=DEFAULT option


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --grub option so grub tests could run on ia64
  - added some basic tests of lilo default directive handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --nopivot (53679)
  - honor INSTALL_PATH in installkernel (32833)
  - installkernel versions old kernels as well (52756)
  - lilo support added to grubby


author: Erik Troan <ewt@redhat.com>
changelog:
  - cleaned up usage message
  - added --omit-lvm-modules to man page
  - added --builtin option (65250)
  - skip comments in fstab (65249)
  - added findlodev to nash, use that to pick block device (63421)
  - support -o option in nash's mount (59185)
  - look for xfs_dmapi (60066)
  - added > support for executed commands (61180)
  - grubby copies permissions from old config file (59227)
  - use options from fstab for root filesystem (56071)
  - try and be better about returning nonzero on error (60203)
  - make modprobe symlink properly to avoid kernel message (62145)
  - support linear raid (12775)
  - support fallback option in grub config (54794)
  - comments in template entries not handled quite right (65198)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix probing for LVM usage to require a volume group to exist before adding
    the module
  - --omit-lvm-modules will omit LVM modules
  - add support for root device being LVM


author: Erik Troan <ewt@redhat.com>
changelog:
  - look for a non /tmpfs directory
  - added support for xfs
  - use with raid md.o if it exists
  - fixed bug in echo
  - use find form nash rather then /usr (mkinitrd shouldn't need /usr
    mounted)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added support for mounting root filesystem by label
  - switched to dietlibc from minilibc
  - fix so --preload= works [33675,57560,44377]
  - added info on --image-version and --nocompress to man page [57560]
  - set fileystem check interval to 0 in case the system clock
    is borked [51454]
  - give a proper error when run by a user other then root [27218,53159]
  - grubby statically linked against popt [55305]
  - cleaned up verbose output a bit [21791]


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed bug handling invalid default (MF #52889)
  - in some cases we would set the default to point at a removed image


author: Matt Wilson <msw@redhat.com>
changelog:
  - make consoles with the correct minor numbers
  - applied patch from hjl to fix fstab parsing (#50819)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - skip errors finding jbd as a module if we're skipping them trying to find
    ext3 so that you can build a kernel with ext3 built-in and still use an
    initrd


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't print errors if /etc/raidtab doesn't exist
  - or /etc/{modules.conf,conf.modules}, for that matter


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't dig through /etc/fstab to find out if we have a filesystem on
    a RAID device, it's usually mounted by label so /dev/mdN isn't there
    at all (#46525)


author: Erik Troan <ewt@redhat.com>
changelog:
  - let nash be invoked as modprobe to avoid a modprobe failure to exec
  - nash will try to run arbitrary commands now (removing insmod as a special 
    case)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch from twaugh to avoid blindly adding scsi_mod
    and sd_mod to initrd if they are not needed (#24114)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Enlarge initrds, needed for systems with both IDE and SCSI
    (Bug #23846)
  - Version 2.[6789] probably shouldn't identify itself as 2.6
    with --version. ;)
  - bzip2 source


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - now works when /usr is not mounted (do not rely on /usr/bin/install)
  - slight cleanups, better usage message


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Now automatically includes necessary raid modules
  - --omit-raid-modules now omits raid modules
  - tiny doc updates


author: Matt Wilson <msw@redhat.com>
changelog:
  - --omit-scsi-modules now omits all scsi modules
  - updated documentation
  - mkinitrd now grabs scsi_hostadapter modules from anywhere -
    some RAID controller modules live in block/


author: Matt Wilson <msw@redhat.com>
changelog:
  - Ignore the absence of scsi modules, include them if they are there, but
    don't complain if they are not.
  - changed --no-scsi-modules to --omit-scsi-modules (as it should have been)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - fix for combined sparc/sparc64 insmod, also pluto module is really
    fc4:soc:pluto and we don't look at deps, so special case it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - added 'make archive' rule to Makefile
  - rewrote install procedure for more robust version handling
  - be smarter about grabbing options from /etc/conf.modules


author: Erik Troan <ewt@redhat.com>
changelog:
  - Only use '-s' to install binaries if /usr/bin/strip is present.
  - Use an image size of 2500 if binaries can't be stripped (1500 otherwise)
  - Don't use "mount -o loop" anymore -- losetup the proper devices manually
  - Requires losetup, e2fsprogs


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Fixed a bug in parsing options.
  - Changed to use a build tree, then copy the finished tree into the
    image after it is built.
  - Added patches derived from ones written by Christian Hechelmann which
    add an option to put the kernel version number at the end of the module
    name and use install -s to strip binaries on the fly.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085007


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050187


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-15
changelog:
  - fix session ID length check and null pointer dereference (#1102355)
  - fix minitasn1 issues (#1102355)
  - Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-14
changelog:
  - Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
  - Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-10
changelog:
  - do not generate invalid certificate requests without challenge password
  - store subject DN instead of issuer DN in the CA list


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-9
changelog:
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-8
changelog:
  - fix multiple possible NULL dereferences and other problems
    that can potentially lead to segfault in the client


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-6
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-59.el5.2
changelog:
  - Modified bz1039935.patch
    * added a check to avoid segfaults if the multipath config didn't define
      an alias.
  - Resolves: bz #1065229


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.7-56.el5
changelog:
  - Added bz827016.patch
  - Added bz860185.patch
  - Added bz910585.patch
  - Added bz916630.patch
  - Added bz839983.patch
  - Resolves: bz #827016, #860185, #910585, #916630, #839983


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-51.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_35
  - Resolves: bz #644989, #744231, #747180, #799847, #833193


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-50.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_34
  - Resolves: bz #747180, #769990, #771571, #781480, #783522, #788965


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-48.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_32
  - Resolves: bz #703277, #719575, #729478, #737072, #740022, #740512, #741664, #742906


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-47.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_31
  - Resolves: bz #650795, #655203, #655976, #702410, #703501, #711970, #715524, #716329


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-44.el5
changelog:
  - Updated to latest sourse, t0_4_7_rhel5_30
  - Resolves: bz #639429, #627911, #670836, #674366, #675369


author: Benjamin Marzinksi <bmarzins@redhat.com> 0.4.7-38.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_24
  - Resolves: bz #484419, #559852, #560892, #566685, #568127, #570513, #574813, #576600, #585225, #599686


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-34.el5
changelog:
  - Added 545822_fix_part2.patch
  - Added 554830_fix.patch
  - Fixed Invista default config, and typo in multipath.conf man page.
  - Resolves: bz #545822, #554830


author: Benjamin Marzinski <bmarzins@redaht.com> 0.4.7-33.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_19
  - Added new multipath.conf option "checker_timeout". If this is not set the
    checker functions with explicit timeouts use /sys/block/sd<x>/device/timeout
  - Resolves: bz #553042


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-31.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_17
  - Resolves: bz #526550, #518575, #512243, #531744, #540882, #537977, #437585, #472171, #473039, #481239, #502128, #510331, #517896, #501019, #524009, #537281, #475967, #499080, #504619, #515171, #524178, #527754, #532424


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-27.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_16
  - Resolves: bz #437588, #474451, #462776, #477023, #485296, #489030, #481227, #484711


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-25.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_14
  - Resolves: bz #452897, #480048, #457776, #459629, #470896, #493402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-19.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_13
  - Resolves: bz #238421, #419581, #449097, #455692, #456126, #456228, #457226


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-18.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_12
  - Resolves: bz #431843, #434588, #434988, #439366, #440123, #442000, #444421, #446223, #448655, #454928


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014c-1
changelog:
  - Rebase to 2014c
    - Egypt's government to re-apply daylight saving time.
    - zic now generates transitions for minimum time values
    - Port to Cygwin sans glibc.
    - Remove now-confusing comment about Jordan.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012f-1.el5
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012c-1.el5
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820689


author: Petr Machata <pmachata@redhat.com> - 2012b-2.el5
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802541


author: Petr Machata <pmachata@redhat.com> - 2012b-1.el5
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802541


author: Petr Machata <pmachata@redhat.com> - 2011n-2.el5
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796747


author: Petr Machata <pmachata@redhat.com> - 2011n-1.el5
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #782173


author: Petr Machata <pmachata@redhat.com> - 2011l-3.el5
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #739916


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #739916


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #739916
  - Resolves: #739668


author: Petr Machata <pmachata@redhat.com> - 2011h-2.el5
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.
  - Resolves: #729697


author: Petr Machata <pmachata@redhat.com> - 2011h-1.el5
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
  - Resolves: #701268


author: Petr Machata <pmachata@redhat.com> - 2011g-1.el5
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Resolves: #698608
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Resolves: #698397
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011d-3.el5
changelog:
  - Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
  - Resolves: #692160


author: Petr Machata <pmachata@redhat.com> - 2011d-1.el5
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch
  - Resolves: #684212


author: Petr Machata <pmachata@redhat.com> - 2011b-1.el5
changelog:
  - Upstream 2011a:
    - Updates of historical stamps for Hawaii
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone
  - Kemerovo oblast should use OMST/OMSST abbreviation (tzdata-2011b-kemerovo.patch)
  - tzdata-2011b-c.patch
    - Update of historical stamps for Juneau, Sitka, and histcurrent
      stamps for Metlakatla.  Sitka and Metlakatla are new zones.
    - Delay end of DST in Chile in 2011 until first Sunday in April.
  - Resolves: #681594


author: Petr Machata <pmachata@redhat.com> - 2010o-1.el5
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00
  - Upstream 2010o:
    - Fiji will end DST on March 6, 2011, not March 27, 2011
  - Resolves: #662777


author: Petr Machata <pmachata@redhat.com> - 2010l-1.el5
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628637


author: Andreas Schwab <schwab@redhat.com> - 2010k-1.el5
changelog:
  - Upadate to 2010k (#618593)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Petr Machata <pmachata@redhat.com> - 2010i-1.el5
changelog:
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan
  - Dropped tzdata-2010g-tunis.patch
  - Dropped tzdata-2010f-g.patch
  - Dropped tzdata-2010g-karachi.patch
  - Resolves: #584847


author: Petr Machata <pmachata@redhat.com> - 2010f-9.el5
changelog:
  - Tunisia not to observe DST in 2010 (tzdata-2010g-tunis.patch)
  - Resolves: #577793
  - Pakistan not to observe DST in 2010 (tzdata-2010g-karachi.patch)
  - Resolves: #577710


author: Petr Machata <pmachata@redhat.com> - 2010f-8.el5
changelog:
  - On RHEL 5, arch package cannot have noarch subpackages.  Instead we
    build tzdata as arch package.  Or argh.
  - Resolves: #576611


author: Petr Machata <pmachata@redhat.com> - 2010f-7.el5
changelog:
  - Introduce tzdata-java
    - The java subpackage has to be built on java-enabled architecture.
      But we can't use ExclusiveArch with noarch package.  So instead we
      make tzdata arch, and then conditionally enable noarch java
      subpackage.
    - Original tzdata package became tzdata-c, a noarch subpackage.
    - Credits go to msivak@redhat.com and dbhole@redhat.com
  - Resolves: #576611


author: Petr Machata <pmachata@redhat.com> - 2010f-1.el5
changelog:
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g proposal:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates (tzdata-2010f-g.patch)
  - Resolves: #576268


author: Petr Machata <pmachata@redhat.com> - 2010e-1.el5
changelog:
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
    - Resolves: #571538
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule


author: Petr Machata <pmachata@redhat.com> - 2010c-1.el5
changelog:
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Resolves: #568667


author: Petr Machata <pmachata@redhat.com> - 2009u-1.el5
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
    - Resolves: #550570
  - Dropped tzdata-2009o-argentinas.patch


author: Petr Machata <pmachata@redhat.com> - 2009o-2.el5
changelog:
  - San Luis (Argentina) entered DST on October 11 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009o-1.el5
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009m-1.el5
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1
  - Resolves: #524198


author: Petr Machata <pmachata@redhat.com> - 2009k-1.el5
changelog:
  - Upstream 2009j
    - DST switch for Bangladesh will occur an hour earlier than was
      thought (we can drop Bangladesh patch).
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file
  - Egypt starts winter time on August 21.
  - Resolves: #517009


author: Petr Machata <pmachata@redhat.com> - 2009i-2.el5
changelog:
  - Official announcement is for the Bangladesh change to occur at 23:00
    of local time, not 24:00.  Add upstream patch implementing the same.
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009i-1.el5
changelog:
  - Upstream 2009i
    - Bangladesh introduces DST 2009-06-20
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009f-1.el5
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Resolves: #495470
  - Egypt ends DST on 2009-09-24
  - Resolves: #492263


author: Petr Machata <pmachata@redhat.com> - 2008i-1.el5
changelog:
  - Upstream 2008g
    - Fixed future DST transitions for Brazil
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).
  - Resolves: #467188


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Gaza strip runs on different clocks during Ramadan
    - Argentina and Brazil will start DST on Sunday October 19, 2008
  - Drop Pakistan & Morocco patches
  - Resolves: #462707


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Upstream 2008d
    - Changes for Brazil and Mauritius
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Pakistan DST is scheduled until Oct/31
  - Morocco DST is scheduled until Aug/31
  - Resolves: #460059 #460365 #452679


author: Petr Machata <pmachata@redhat.com> - 2008b-2
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information
  - Pakistan introduces DST
  - Resolves: #447270


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS
  - Resolves: #410101


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, and New South Wales are
      changing their DST rules effective next year
    - Several Antarctic station's rules weren't properly updated to account
      for this year's change to the New Zealand daylight saving rules
  - Venezuela timezone changes from -4:00 to -4:30 at 24 September
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.
  - Resolves: #240786


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".
  - Resolves: #230089


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a:
    - Cuba has ended its three years of permanent DST.
    - Western Australia DST trial changes
    - Updates to Bahamas, they will be in sync with 2007 US DST change
  - Resolves: #228732


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in /usr/share/doc;
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115872


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085000


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Michal Luscon <mluscon@redhat.com> 7:2.6.STABLE21-7
changelog:
  - Resolves: #1134976 - CVE-2013-4115 buffer overflow when processing overly long DNS names
  - Resolves: #1134976 - CVE-2014-3609 assertion failure in header processing


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-4
changelog:
  - Resolves: #521926 - squid 'stop after stop' is not LSB compliant
  - Resolves: #496170 - Add arp filter option
  - Resolves: #516245 - negotiate support not enabled in squid
  - Resolves: #538738 - Squid accelerator mode works only if port 80 is opened
  - Resolves: #470843 - Squid 'error_map' does not work when used 'Accep-Encoding: gzip'


author: Jiri Skala <jskala@redhat.com> 7:2.6.STABLE21-1
changelog:
  - Resolves: #297521 update to the latest upstream STABLE21
  - Resolves: #245304 changed init script to be LSB compliant
  - Resolves: #250572 using refresh_stale_hit don't cause "clock going backwards"
  - Resolves: #436135 ported init script bug fixign of RHEL-4 to RHEL-5
  - Resolves: #442108 added define -D_FORTIFY_SOURCE=2
  - Resolves: #454255 fixed -g parameter handling of unix_group helper
  - Resolves: #448086 changed security context of /usr/local/squid to squid ownership:w
  - Resolves: #451923 solved repeated SIGABRTs


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-3
changelog:
  - added upstream fix for #223439 - Responses without Expires get 
    assigned one an hour in the future
  - Resolves: rhbz#223439


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE6-2
changelog:
  - added upstream fixes for CVE-2007-0247 - Squid crashes 
    when receiving certain FTP listings
  - Resolves: rhbz#222884


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add -j1 to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use /usr/lib64
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-118.3
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Martin Stransky <stransky@redhat.com> 1.9.2.3-2
changelog:
  - Added fix for rhbz#555760 -  Firefox Javascript anomily,
    landscape print orientation reverts to portrait (mozbz#546270)


author: Martin Stransky <stransky@redhat.com> 1.9.2.1-0.1.beta2
changelog:
  - Rebase to 1.9.2.1 Beta 2
  - fix the sqlite runtime requires again (#480989), add a check 
    that the sqlite requires is sane (by Stepan Kasal)


author: Jan Horak <jhorak@redhat.com> - 1.9.1-3
changelog:
  - Fixed wrong version of Firefox when loading 'about:' as location
  - Added patch to compile against latest GTK


author: Stepan Kasal <skasal@redhat.com> 1.9.1-0.21
changelog:
  - require sqlite of version >= what was used at buildtime (#480989)
  - in devel subpackage, drop version from sqlite-devel require; that's
    handled indirectly through the versioned require in main package


author: Martin Stransky <stransky@redhat.com> 1.9-0.56
changelog:
  - Changed "__ppc64__" to "__powerpc64__", 
    "__ppc64__" doesn't work anymore
  - Added fix for #443725 - Critical hanging bug with fix 
    available upstream (mozbz#429903)


author: Christopher Aillon <caillon@redhat.com> 1.9-0.beta2.10
changelog:
  - Update to latest trunk (2008-01-13)
  - Use CFLAGS instead of configure arguments
  - Random cleanups: BuildRequires, scriptlets, prefs, etc.


author: Martin Stransky <stransky@redhat.com> 1.9-0.beta2.7
changelog:
  - removed fedora specific pkg-config files
  - updated to the latest trunk (2008-01-07)
  - removed unnecessary patches
  - fixed idl dir (#427965)


author: Christopher Aillon <caillon@redhat.com> 1.9-0.beta2.4
changelog:
  - Don't Provide webclient (xulrunner is not itself a webclient)
  - Don't Obsolete old firefox, only firefox-devel
  - Kill legacy obsoletes (phoenix, etc) that were never in rawhide


author: Christopher Aillon <caillon@redhat.com> 1.9-0.alpha7.1
changelog:
  - Initial cut at XULRunner 1.9 Alpha 7
  - Temporarily revert camellia 256 support since our nss doesn't support it yet


author: Ian Kent <ikent@redhat.com> 5:6.1.5-9
changelog:
  - bz1065876 - RHEL5.8: amd crashes in autofs_umount_failed, similar to
    bz 862283
    - bump revision to fix changelog date.
  - Related: rhbz#1065876


author: Ian Kent <ikent@redhat.com> 5:6.1.5-8
changelog:
  - bz1065876 - RHEL5.8: amd crashes in autofs_umount_failed, similar to
    bz 862283
    - handle-ENOENT-umount-return-for-autofs-mounts.
  - Resolves: rhbz#1065876


author: Ian Kent <ikent@redhat.com> 5:6.1.5-7
changelog:
  - bz862283 - RHEL5.8: amd crashes when shutting down the machine, leading to a
    shutdown hang
    - add setjmp/longjmp patch (Dave Wysochanski).
    - check file handle struct before use on umount.
  - Related: rhbz#862283


author: Ian Kent <ikent@redhat.com> 5:6.1.5-6
changelog:
  - bz836359 - amd command ignores -noacl mount option in RHEL 5
    - fix amd ignores noacl mount option.
  - quiet the BuildPrereq and Prereq depricated warnings.
  - Resolves: rhbz#836359


author: Karel Zak <kzak@redhat.com> 5:6.1.5-5
changelog:
  - bz862283 - RHEL5.8: amd crashes when shutting down the machine, leading to a shutdown hang
    - dont background autofs umount.
  - Resolves: rhbz#862283


author: Karel Zak <kzak@redhat.com> 5:6.1.5-4.1
changelog:
  - fix #219437 - amd: stopping service will pop up an error dialog in 
                  system-config-services app.
  - fix build (m4 stuff) of the package (UTS_RELEASE macro has been removed 
                  from the latest kernel-headers)


author: Peter Vrabec <pvrabec@redhat.com> 5:6.1.5-2
changelog:
  - force to use HAVE_LINUX_NFS_MOUNT_H macro, because linux/nfs_mount.h 
    check in configure fails on s390x


author: Peter Vrabec <pvrabec@redhat.com> 6.1.2.1-1
changelog:
  - upgrade
  - fix amd shutdown(#158268,#54246) 	
  - enhancement, /host/localhost and /host/<localmachinename> 
    are symlinks to / (#11843)


author: Peter Vrabec <pvrabec@redhat.com> 6.0.9-12
changelog:
  - fix the am-utils part of #143118 by implementing the util-linux
    mtab locking scheme into am-utils automounter, patch and testing
    by Daniel Berrange <berrange@redhat.com>, improved locking
    algorithm by <prockai@redhat.com> (which allows for several 
    hundred or even thousand of parallel makes to finish 
    successfully and keep /etc/mtab in sync with /proc/mounts  as well)


author: Nalin Dahyabhai <nalin@redhat.com> 6.0.9-1
changelog:
  - update to 6.0.9
  - disable RPM's internal dependency calculation so that we can filter out
    dependencies which are expected to be filled in by the site administrator


author: Nalin Dahyabhai <nalin@redhat.com> 6.0.7-1
changelog:
  - update to 6.0.7, fixing EIO on access bugs (#53251)
  - back out nfs3 patch; no longer needed for current kernels
  - don't explicitly strip binaries; let the buildroot policies handle it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add BuildPrereq: db1-devel (#44987)
  - use FHS macros
  - return error codes correctly from init script (#44597)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add ldconfig to %postun
  - chuck the hesiod patch -- new bind-utils doesn't have the support for it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only create /var/lock/subsys/amd if startup succeeds
  - revamp shutdown procedure to minimize time spent just spinning
  - change initscripts dependency to /etc/init.d


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 6.0.3
  - enhance init script to be more wait4amd2die-like
  - make default map type to be file (#9185)
  - get rid of the kludges


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - remove the noldap patch
  - add amd.net file as the default config map file
  - change the config file to teh new config file format instead of a
    simple map file name.
  - try to avoid some damage with a new %pre script
  - prereq grep now
  - modify the init file so it calls amd -F /etc/amd.conf now


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089202


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    Resolves: #1055875


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for /usr/lib/samba and /usr/lib/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-29
changelog:
  - added patch for CVE-2014-0106: certain environment variables not
    sanitized when env_reset is disabled
    Resolves: rhbz#1072210


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-28
changelog:
  - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-2777
    Resolves: rhbz#968221


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-27
changelog:
  - visudo: fixed incorrect warning and parse error regarding
    undefined aliases which were in fact defined
    Resolves: rhbz#849679
    Resolves: rhbz#905624


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-26
changelog:
  - updated sudoers man-page to clarify the behavior of the user
    negation operator and the behavior of wildcard matching in command
    specifications
    Resolves: rhbz#846118
    Resolves: rhbz#856902


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-23
changelog:
  - Fixed caching of user and group names 
  - Backported RFC 4515 escaping of LDAP queries
    Resolves: rhbz#855836
    Resolves: rhbz#869287


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-21
changelog:
  - Implement a new sudoers Defaults option to restore old command exec behavior
    Resolves: rhbz#840971


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-19
changelog:
  - Changed policycoreutils dependency to a context specific dependency
    (post & postun)
    Resolves: rhbz#846694


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-18
changelog:
  - don't use a temporary file when modifying nsswitch.conf
  - fix permissions on nsswitch.conf, if needed
    Resolves: rhbz#846631


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.2
changelog:
  - call restorecon after modifying nsswitch.conf in the postun scriplet
  - added policycoreutils dependency
    Resolves: rhbz#818585


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.1
changelog:
  - fixed `sudo -i' command escaping (#806073)
  - fixed multiple sudoHost LDAP attr. handlng (#740884)
    Resolves: rhbz#740884
    Resolves: rhbz#806073


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-11
changelog:
  - backported selinux support from 1.7.4p5 (#477185, #673157)
  - fixed bug in Runas_Spec group matching (#627543)
  - disable `sudo -l' output word wrapping if the output
    is piped (#697111)
  - fixed overwriting of errno after execve failure (#673157)
  - fixed segmentation fault (#673072)
  - add a sudoers entry to the nsswitch.conf file
    on install (and delete it on uninstall) (#617061)
    Resolves: rhbz#697111
    Resolves: rhbz#673157
    Resolves: rhbz#673072
    Resolves: rhbz#627543
    Resolves: rhbz#617061
    Resolves: rhbz#477185


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-10
changelog:
  - fixed regression in the sudoers parser (#580438)
  - merged .loopsegv3 and .includedir patches into .580438 patch
  - generated new toke.c from toke.l using flex (needed by #580438)
  - added !visiblepw with comment to sudoers
  - added ChangeLog, WHATSNEW and sudoers.ldap.5*
  - removed *.pod files
  - fixed printing of entries with multiple host entries on a single line (#603819)
  - fixed audit related code in configure.in (#583683)
  - removed unused patches
  - fixed a typo in the sudoers man-page (#602022)
    Resolves: rhbz#580438
    Resolves: rhbz#583911
    Resolves: rhbz#583644
    Resolves: rhbz#603819
    Resolves: rhbz#583683
    Resolves: rhbz#602022


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-7
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598382


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.2p1-1
changelog:
  - rebase to 1.7.2p1
    Resolves: #469653
    Resolves: #497873
    Resolves: #500942
    Resolves: #512191
    Resolves: #519017
    Resolves: #521778
    Resolves: #521903
  - sudo-1.7.2p1-negation.patch, don't apply negation to an already
    negated Cmnd_Alias member. Backported from upstream development
    version of sudo.
    Resolves: #453045


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-4
changelog:
  - audit patch rediff (one chunk failed to apply due to fuzz=0)
  - Fix for incorrect handling of groups in Runas_User (#481720)
    Resolves: #481821


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
changelog:
  - rebase 1.6.8 -> 1.6.9
  - patches from F10
  - compiled with secure path(80215)
  - patches for sudoers file provided by sudo are removed,
    because we deliver our own sudoers in sources1
  - compiled without selinux support since there was no 
    selinux support in previous release
    Resolves: #447408


author: Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
changelog:
  - fix segfaults when using ldap on s390,
    Resolves: #305331
  - add audit support,
    Resolves: #320671


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Than Ngo <than@redhat.com> - 3.5.4-22
changelog:
  - Resolves: #505621,
      CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
      CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content (DoS, ACE)


author: Than Ngo <than@redhat.com> 3.5.4-16
changelog:
  - Resolves: #223958, add missing documentation menu
  - Resolves: #422011, libutemper issue, konsole doesn't write to utmp


author: Than Ngo <than@redhat.com> - 6:3.5.4-14.el5
changelog:
  - Resolves: #293581, CVE-2007-0537
  - Resolves: #293921, CVE-2007-0242
  - Resolves: #293431, CVE-2007-4224, CVE-2007-4225, CVE-2007-3820
  - Resolves: #293581, CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> - 6:3.5.4-11.1.el5
changelog:
  - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #225414, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> 6:3.5.4-10
changelog:
  - fix utf8 issue in kdeprint
  - fix #178320,#198828, follow menu-spec
  - upstream patches,
     fix #106748, Evaluate scripts in <iframe src=javascript:..> in the right context
     fix #133071, Crash when characterSet was accessed on newly-created document


author: Than Ngo <than@redhat.com> 6:3.5.4-9
changelog:
  - fix #178320,#198828, follow menu-spec
  - fix #119167, page rendered incorrectly at larger font sizes


author: <than@redhat.com> 6:3.5.4-8
changelog:
  - fix #115891/bz#208270, CUPS 1.2.x unix socket support
  - apply upstream patches
     fix #123915, Page format display is 'overlaid'
     fix #100188, Fix incorrect 'endl' usage


author: Than Ngo <than@redhat.com> 6:3.5.4-7
changelog:
  - apply upstream patches
     fix #132678, Google search encoding fix
     khtml rendering issue
     fix #134118, silent startup notification never going away
     fix #133401, crash when attempting to remove a standard shortcut that isn't actually in 
     the KStdAccel::ShortcutList
     fix #131979, unbreak "latest" and "most downloads" views


author: Than Ngo <than@redhat.com> 6:3.5.4-6
changelog:
  - fix #205767, konsole no longer register itself to utmp
  - fix #123941, qt xim plugin sometimes leads to crash


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
     fix #123413, kded crash when KDED modules make DCOP calls in their destructors
     fix #133529, konqueror's performance issue
     fix kdebug crash
     more icon contexts (Tango icontheme)
     fix #133677, file sharing doesn't work with 2-character long home directories


author: Than Ngo <than@redhat.com> 6:3.5.4-3
changelog:
  - apply upstream patches
     fix kde#131366, Padding-bottom and padding-top not applied to inline elements
     fix kde#131933, crash when pressing enter inside a doxygen comment block
     fix kde#106812, text-align of tables should only be reset in quirk mode
     fix kde#90462, konqueror crash while rendering in khtml


author: Petr Rockai <prockai@redhat.com> - 6:3.5.4-0.pre1
changelog:
  - prerelease of 3.5.4 (from the first-cut tag)
  - disable --enable-final on s390x, seems to cause problems


author: Than Ngo <than@redhat.com> 6:3.5.3-11
changelog:
  - apply upstream patches,
     fix kde#130831, remember when the last replacement string was the empty string


author: Petr Rockai <prockai@redhat.com> - 6:3.5.3-10
changelog:
  - do not ship the dummy kdnssd implementation, depend on external one
    (there is one provided by kdnssd-avahi now)
  - change the use of anonymous namespace in kedittoolbar.h, so that
    the KEditToolbar classes are exported again


author: Petr Rockai <prockai@redhat.com>
changelog:
  - should have been 6:3.5.3-9 but accidentally built as 6:3.5.3-8.fc6
  - --disable-libfam and --enable-inotify to get inotify support
    and to disable gamin/fam usage
  - add .el5.centos to Release:


author: Than Ngo <than@redhat.com> 6:3.5.3-8
changelog:
  - upstream patches,
      kde#130605 - konqueror crash
      kde#129187 - konqueror crash when modifying address bar address


author: Than Ngo <than@redhat.com> 6:3.5.3-7
changelog:
  - apply upstream patches,
      kde#123307 - Find previous does nothing sometimes
      kde#106795 - konqueror crash


author: Than Ngo <than@redhat.com> 6:3.5.3-5
changelog:
  - fix #196013, mark kde.sh/kde.csh as config file
  - fix #178323 #196225, typo in kde.sh
  - apply upstream patches


author: Than Ngo <than@redhat.com> 6:3.5.3-4
changelog:
  - enable --enable-new-ldflags again since ld bug fixed
  - move only *.so symlinks to -devel subpackage


author: Than Ngo <than@redhat.com> 6:3.5.2-3
changelog:
  - fix #173235, disable kmail debug info #173235
  - use XDG_CONFIG_DIRS for kde menu #178320
  - don't use private API with newer CUPS >=1.2


author: Than Ngo <than@redhat.com> 6:3.5.1-2.3
changelog:
  - apply patch to fix missing icons in KDE main menu
  - requires redhat-artwork >= 0.239-2
  - don't own /usr/share/icons/hicolor #178319
  - remove broken links #154093


author: Than Ngo <than@redhat.com> 6:3.5.0-5
changelog:
  - apply patch to fix a printing problem
  - add subpackage kdelibs-docs
  - enable --enable-new-ldflags #161074


author: Than Ngo <than@redhat.com> 6:3.5.0-0.1.rc1
changelog:
  - update 3.5.0 rc1
  - remove unneeded lnusertemp workaround
  - remove references to optional libraries in .la files #170602


author: Than Ngo <than@redhat.com> 6:3.4.0-5
changelog:
  - more fixes from CVS stable branch
  - fix kbuildsycoca crashes with signal 11 on kde startup #154246


author: Than Ngo <than@redhat.com> 6:3.3.2-0.5
changelog:
  - use mkstemp instead of mktemp
  - fix knotify crash after applying sound system change
  - add steve cleanup patch


author: Than Ngo <than@redhat.com> 6:3.3.2-0.3
changelog:
  - apply the patch to fix Konqueror Window Injection Vulnerability #142510
    CAN-2004-1158,  Thanks to KDE security team
  - Security Advisory: plain text password exposure, #142487
    thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.2.3-4
changelog:
  - built with libpcre support, it's needed for using regular expressions in Javascript code bug #125264


author: Warren Togami <wtogami@redhat.com> 3.2.2-2
changelog:
  - #120265 #119642 -devel req alsa-lib-devel esound-devel fam-devel
                               glib2-devel libart_lgpl-devel
  - #88853 BR autoconf automake libpng-devel libvorbis-devel
              glib2-devel libtiff-devel
  - cups-libs explicit epoch, some cleanups


author: Than Ngo <than@redhat.com> 6:3.1.93-0.1
changelog:
  - 3.2 Beta 1
  - remove many patches, which are now in upstream
  - adjust many redhat specific patch files
  - cleanup rpm file list


author: Than Ngo <than@redhat.com> 6:3.1.1-2
changelog:
  - add patch file from CVS to fix: https authentication through proxy fails
  - add patch file from CVS to fix: KZip fails for some .zip archives


author: Than Ngo <than@redhat.com> 6:3.1-3
changelog:
  - add patch to set correct default encoding, bug #82539
  - don't overwrite defaultstyle, bug #74795, #80103


author: Than Ngo <than@redhat.com> 3.0.4-1
changelog:
  - 3.0.4
  - Added 2 patch files for built-in tests from AndreyPozdeev@rambler.ru (bug #75003)
  - Added KDE Url (bug #54592)


author: Than Ngo <than@redhat.com> 3.0.3-10
changelog:
  - Added fix to get correct Lib directory name on 64bit machine
  - New fix to handle desktop file renames (bug #74071)


author: Than Ngo <than@redhat.com> 3.0.2-4
changelog:
  - Added system tray dock patch from Harald Hoyer
  - Added Buildrequires audiofile-devel (bug #69983)
  - Added Buildrequires openssl-devel (bug #64858)
  - Rebuild against qt 3.0.5 (bug #70379)
  - Added patch to remove "about KDE" menu item from help menu (bug #67287)
  - Fixed dependencies bug by update (bug #69798)
  - Added some bugfixes from 3.0.2 stable branches


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-10
changelog:
  - Change sonames to something indicating the compiler version if a compiler
    < gcc 3.1 is used
  - Add compat symlinks for binary compatibility with other distributions


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-7
changelog:
  - Merge the following fixes from KDE_3_0_BRANCH:
    - RFC 2818 compliance for KSSL
    - Detect premature loss of connection in http ioslave (this may have
      been the cause of the bugzilla CGI.pl:1444 issue)
    - Don't send SIGHUP to kdesu child applications
    - Fix KHTML form rendering problems


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-2
changelog:
  - Add a khtml fix from KDE_3_0_BRANCH, prevents form content from
    being submitted twice, which probably caused the CGI.pl:1444 bug
    some people have noted with Bugzilla.


author: Than Ngo <than@redhat.com> 3.0.0-0.cvs20020326.2
changelog:
  - scale down icons for submenus pointing to legacy
    applications rather than keeping them at 32x32 (bug #61506)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020107.1
changelog:
  - arts-devel provides kdelibs-sound-devel for backwards compatibility
  - Update, rebuild with gcc 3.1-0.15


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020104.1
changelog:
  - Update
  - Make sure we aren't built with gcc 3.1 prior to -0.14
  - Remove -O0 hack, no longer needed with gcc 3.1-0.14
  - Adapt spec file to base changes (good-bye, libkfile, libkssl and libksycoca!)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20011214.1
changelog:
  - Update
  - Update Japanese patches
  - Temporarily exclude alpha (compiler bugs)
  - Add workaround for gcc bug #57502


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-5
changelog:
  - Merge fixes from current KDE_2_1_BRANCH - fixes 2 memory leaks and
    makes kio_http more tolerant to broken Auth requests sent by some
    servers
  - Add missing mcop{class,type} files in arts package
  - Handle PATH changes in kdesu, some KControl modules need /sbin in the
    PATH... (#34209)
  - Add KDE2PORTING.html file in /usr/share/docs/kdelibs-devel-3.5.4,
    it's quite useful...


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-3
changelog:
  - Fix up kded to watch directories we can't write to
  - Use mkstemp() rather than tmpfile() for xauth file generation
    in kdesu


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Fix up cookie escaping (this should finally fix bugzilla for good)
  - Security: cookies shouldn't be world readable, some websites store
    login information


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Don't crash in KProcess if getpwuid() returns NULL, happens with
    LDAP authentication
  - Require qt >= 2.3.0 (#31770)
  - Fix crash in KURLCompletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Add some more fixes and <layer> support from KDE_2_1_BRANCH
  - Patch KService to not add K menu entries if the desktop files
    aren't readable by the user we're running at (removes bogus
    timetool, control-panel etc. entries; I'd still prefer running
    those through consolehelper over hiding them from users...)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Revert to putting config files in /usr/share/config
  - Fix up cookie handling when combined with JavaScript (#30577)
  - Add some html rendering fixes from KDE_2_1_BRANCH


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add khtml+DOM fixes from KDE_2_1_BRANCH
  - BuildPrereq docbook stuff so we don't get broken kdb2html stuff


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix klauncher escape sequence handling (#25307, Patch from Tim Waugh)
  - Fix krun escape sequence handling (#25134, Patch from Tim Waugh)
  - Make /usr/share/doc/HTML/en/kspell/common symlink relative (#24793)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply patch from CVS to fix up Cookie handling in Konqueror.
    Finally Bugzilla works perfectly in Konqueror.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdelibs-sound-devel requires audiofile-devel, kdelibs-sound doesn't.
  - Update, fixes various HTML rendering bugs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - remove the Java hacks; KDE now requires a Java 2 compliant
    environment, so there's no chance to get any of it to run
    with current kaffe.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move libkmedia2_idl to arts; it's needed there
  - Fix up the Java stuff. The new stuff is ugly, but seems to work
  - Get rid of the compiler bug workaround: the ICE was triggered by
    unclean code
  - Change the description of the arts package for translation purposes


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around compiler bugs (sigh)
  - Fix specfile (added files)
  - Split arts into a separate package; it's required by SDL,
    and depending on kdelibs-sound (which requires kdelibs)
    is overkill


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS - security fix in Java/Javascript code.
    There seems to be some conspiracy going on - "commit important
    fixes right after Red Hat built new RPMs" or the likes. :>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - update to current KDE_2_0_BRANCH, now that most of the ".0 release"
    bugs are fixed
  - fix typo in specfile: it's mitshm, not libshm
  - Add ksendbugmail, required for the "Report Bug" feature to work


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move back to /usr
  - New CVS snapshot
  - Clean up specfile
  - Use %defines so we can build CVS snapshots and releases from the same
    specfile


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot, new Qt
  - various fixes to spec file
  - get rid of -O0, no longer required with gcc 2.96-41 (except on alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - split: move sound support to a separate package, suggestion from
    David Faure <david@linux-mandrake.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move programming docs to /usr/share/doc/kdelibs-devel-3.5.4-29.el5.centos
    and to kdelibs-devel package
  - new snapshot


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add qt version number in Requires, add kdoc HTML help
    (patch from David Faure <david@mandrakesoft.com>)
  - Actually use the %clean section


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - 2.0 snapshots
  - Change prefix to respect %{prefix} so we can coexist with KDE 1.x
  - kdelibs-devel requires kdelibs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove linking to qimgio from kdecore, moved to kpanel/kfm directly
  - renamed "lowcolor" directory to "locolor"


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added lowcolor icons directory and /usr/share/pixmaps to icon search path
  - hacking to recognize .desktop files as application/x-kdelnk


author: Preston Brown <pbrown@redhat.com>
changelog:
  - updated to KDE 1.1.2.
  - use /usr/lib/qt-1.44 as qt root.
  - separate devel subpackages; include documentation and kdoc.
  - added KDE icon.
  - relocated includes to /usr/include/kde


author: Pavel Raiskup <praiskup@redhat.com> - 8.1.23-9
changelog:
  - fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
    CVE-2014-0065
  - better incorporate strlcpy function (upstream git diff c92f7e..062421)


author: Tom Lane <tgl@redhat.com> 8.1.23-1
changelog:
  - Update to PostgreSQL 8.1.23, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    This is the last upstream release in the 8.1.x series.
  - Ensure we don't package any .gitignore files from the source tarball
  - Back-port upstream fix for CVE-2010-4015
  Resolves: #672633


author: Tom Lane <tgl@redhat.com> 8.1.22-1
changelog:
  - Update to PostgreSQL 8.1.22, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    including the fix for CVE-2010-3433
  Resolves: #639932


author: Tom Lane <tgl@redhat.com> 8.1.21-1
changelog:
  - Update to PostgreSQL 8.1.21 to fix CVE-2010-1169, CVE-2010-1170,
    CVE-2009-4136, CVE-2010-0733, CVE-2010-0442, and assorted other bugs
    described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #586059


author: Tom Lane <tgl@redhat.com> 8.1.18-1
changelog:
  - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230,
    and assorted other bugs described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #525285


author: Tom Lane <tgl@redhat.com> 8.1.11-1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427138
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: Tom Lane <tgl@redhat.com> 8.1.7-1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225496
  - Sync init script and Makefile.regress with current Fedora scripts


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-3
changelog:
  - Fix 16T boundary conditions in resize2fs (#707314)
  - Create ext4 fs by default from mke4fs (#785200)


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-1
changelog:
  - Update to e4fsprogs-1.41.9 (#528055)
  - Add ext4-capable, renamed libraries & headers for pygrub (#524611)


author: Eric Sandeen <esandeen@redhat.com> 1.40.8-2
changelog:
  - Update ext2fs_swap_inode_full() fix to match upstream
  - Check more of swapv1 header in blkid detection (#442937)


author: Eric Sandeen <esandeen@redhat.com> 1.40.7-1
changelog:
  - New upstream version, special leap-day edition
  - Fix resize2fs losing inline xattrs when shrinking (#434893)
    and add patch to fix swap_inode_full in this case
  - Allow mke2fs & tune2fs to manipulate large_file feature (#258381)
  - Handle lvm error conditions in libblkid (#433857)
  - Allow tune2fs to clear the resize_inode feature (#167816)
  - Teach blkid to detect LVM2 physical volumes (#409321)
  - Show "mostly printable" xattrs as text in debugfs (#430621)
  - Trimmed pre-1.38 rpm changelog entries


author: Eric Sandeen <sandeen@redhat.com> 1.40.4-7
changelog:
  - Fix sb flag comparisons properly this time (#428893)
  - Make 256-byte inodes for the [default] mkfs case.
    This will facilitate upgrades to ext4 later, and help xattr perf.


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-15
changelog:
  - Drop resize_inode removal patch from tune2fs; ostensibly was
    for old kernels which could not mount, but seems to be fine.
  - Drop pottcdate removal patch, and don't rebuild .po files,
    causes multilib problems and we generally shouldn't rebuild.
  - Drop multilib patch; wrapper header should take care of this now.
  - Drop ->open rename, Fedora seems ok with this now.


author: Stepan Kasal <skasal@redhat.com> 1.40.2-13
changelog:
  - The -devel package now requires device-mapper-devel, to match
    the dependency in blkid.pc (#410791)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-12
changelog:
  - Use upstream patch for blkid fat detection, avoids div-by-zero
    when encountering some BSD partitions (#398281)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-10
changelog:
  - Make (more) file timestamps match those in tarball for multilib tidiness 
  - Fix e2fsprogs-libs summary (shared libs not static)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-3
changelog:
  - Update license tags
  - Fix one open-create caller with no mode
  - Protect ->open ops from glibc open-create-mode-checker
  - Fix source URL
  - Add gawk to BuildRequires


author: Eric Sandeen <esandeen@redhat.com> 1.39-14
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Thomas Woerner <twoerner@redhat.com> - 1.39-1
changelog:
  - new version 1.39
  - dropped ext2online, because resize2fs is now able to do online resize
  - spec file cleanup
  - enabled checks for build


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Martin Stransky <stransky@redhat.com> - 3.0.1-2
changelog:
  - Fixed #447535 - RHEL 5.2 beta / upstream Firefox 3 beta 5
    autoConfig broken
  - Fixed #445304 - HTML/index.html always redirects to en-US/index.html


author: Martin Stransky <stransky@redhat.com> - 3.0-0.beta2.9
changelog:
  - added pathes for Mozilla bugs 311008, 410852, 411037, 412519
  - fixed bookmarks
  - fixed homepage
  - disabled startup notification


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-4
changelog:
  - added patches for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942


author: Kai Engert <kengert@redhat.com> - 1.5.0.12-2
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-10
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-6
changelog:
  - Extract the source into a versioned directory to help with
    parallel compiles and -debuginfo packages


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-2
changelog:
  - Updated pango patches from behdad
  - Fix a leak in liveconnect
  - Fix a potential crash in CSS
  - Let Firefox handle gcc warnings; it weeds out frequent offenders.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.7-5
changelog:
  - Fix crash when changing gtk key theme
  - Fix gtkmozembed window visibility
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-10
changelog:
  - Enable GCC visibility
  - export XLIB_SKIP_ARGB_VISUALS=1 as a temporary workaround to prevent
    a broken Adobe/Macromedia Flash Player plugin taking the X server.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-4
changelog:
  - Update NSS requires to workaround a bug introduced by NSS changes.
    https://bugzilla.mozilla.org/show_bug.cgi?id=294542
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=201922


author: Behdad Esfahbod <besfahbo@redhat.com>
changelog:
  - Add a better nopangoxft patch that doesn't depend on pangocairo
  - Add firefox-1.5-pango-mathml.patch (bug 150393)


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.4-4
changelog:
  - Ugh:
    - Mozilla the platform is deprecated
    - XULrunner has been promised for a while but is still not 1.0
    - Ship a firefox-devel for now as we need a devel platform.
    - The plan is to kill firefox-devel when xulrunner 1.0 ships. 
  - Clean up the files list a little bit.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.1-9
changelog:
  - Add a notice to the about dialog denoting this is a pango enabled build.
  - Tweak the user agent denoting this is a pango enabled build.


author: Christopher Aillon <caillon@redhat.com> - 1.5-3
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.0.beta1
changelog:
  - Update to 1.5 beta 1.
  - Add patch to svg rendering to adjust for cairo behavior.
  - Happy birthday, dad!


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.5.deerpark.alpha2
changelog:
  - Re-enable ppc now that its binutils are fixed.
  - Disable SVG and canvas again.  The in-tree copy does not build against new pango.
  - When clicking a link and going back via history, don't keep the link focused.


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.4.deerpark.alpha2
changelog:
  - Add patch from Christian Persch to make the file chooser modal
  - Change default behavior of opening links from external apps to: New Tab
  - New build options:
    --enable-svg
    --enable-canvas


author: Christopher Aillon <caillon@redhat.com> 1.1-0.0.1.deerpark.alpha2
changelog:
  - Update to Deer Park Alpha 2
    - STILL TODO:
      - This build is not localized yet.
      - Theme issues not yet resolved.
      - Building on ppc platforms is busted, disable them for now.
      - Forward port all remaining patches.


author: Kristian Høgsberg <krh@redhat.com> 0:1.0.4-5
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.
  - Copy over changes from FC4 branch.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-4
changelog:
  - Only install searchplugins for en-US, since there isn't any way
    to dynamically select searchplugins per locale yet.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-3
changelog:
  - Add support for locales:
      af-ZA, ast-ES, ca-AD, cs-CZ, cy-GB, da-DK, de-DE, el-GR,
      en-GB  es-AR, es-ES, eu-ES, fi-FI, fr-FR, ga-IE, he-IL,
      hu-HU, it-IT, ko-KR, ja-JP, ja-JPM, mk-MK, nb-NO, nl-NL,
      pa-IN, pl-PL, pt-BR, pt-PT, ro-RO, ru-RU, sk-SK, sl-SI,
      sq-AL, sv-SE, tr-TR, zh-CN, zh-TW


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-5
changelog:
  - Correctly position the IM candidate window for most locales
    Note: it is still incorrectly positioned for zh_TW after this fix
  - Add temporary workaround to not create files in the user's $HOME (#149664)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-3
changelog:
  - Firefox script fixes to support multilib installs.
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications


author: Christopher Aillon <caillon@redhat.com> 0:1.0.2-3
changelog:
  - Updated firefox icon (https://bugzilla.mozilla.org/show_bug.cgi?id=261679)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-6
changelog:
  - Add patch to fix italic rendering errors with certain fonts (e.g. Tahoma)
  - Re-enable jsd since there is now a venkman version that works with Firefox.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-3
changelog:
  - Remerge firefox-1.0-pango-selection.patch
  - Add execshield patches for ia64 and ppc
  - BuildRequires libgnome-devel, libgnomeui-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-2
changelog:
  - Add upstream fix to reduce round trips to xserver during remote control
  - Add upstream fix to call g_set_application_name


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-1
changelog:
  - Update to 1.0.1 fixing several security flaws.
  - Temporarily disable langpacks to workaround startup issues (#145806)
  - Request the correct system colors from gtk (#143423)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-7
changelog:
  - Make sure we get a URL passed in to firefox (#138861)
  - Mark some generated files as ghost (#136015)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-6
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Add RPM version to the useragent
  - BuildRequires pango-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0-5
changelog:
  - Fix spacing in textareas when using pango for rendering
  - Enable pango rendering by default.
  - Enable smooth scrolling by default


author: Christopher Aillon <caillon@redhat.com> 0:1.0-4
changelog:
  - Add StartupWMClass patch from Damian Christey (#135830)
  - Use system colors by default (#137810)
  - Re-add s390(x)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.20
changelog:
  - More file chooser fixes:
      Pop up a confirmation dialog before overwriting files (#134648)
      Allow saving as complete once again
  - Fix for upstream 263263.


author: Christopher Blizzard <blizzard@redhat.com> 0:0.10.1-1.0PR1.15
changelog:
  - Fix problem where default apps aren't showing up in the download
    dialog (#136261)
  - Fix default height being larger than the available area, cherry picked
    from upstream


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.12
changelog:
  - Disable the default application checks. (#133713)
  - Disable the software update feature. (#136017)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.9
changelog:
  - Fix compile issues (#134914)
  - Add patch to fix button focus issues (#133507)
  - Add patches to fix tab focus stealing issue (b.m.o #124750)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.2
changelog:
  - Change the vendor to mozilla not fedora
  - Build with --disable-strip so debuginfo packages work (#133738)
  - Add pkgconfig patch (bmo #261090)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.1
changelog:
  - Add a BR for desktop-file-utils
  - Update default configuration options to use the firefox mozconfig (#132916)
  - Use Red Hat bookmarks (#133262)
  - Update default homepage (#132721)
  - Fix JS math on AMD64 (#133226)
  - Build with MOZILLA_OFICIAL (#132917)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.0
changelog:
  - Update to 1.0PR1
  - Update man page references to say Firefox instead of Firebird
  - Remove gcc34 and extensions patch; they are now upstream
  - Update desktop database
  - Minor tweaks to the .desktop file


author: Christopher Aillon <caillon@redhat.com> 0:0.9.3-8
changelog:
  - Fixup .desktop entry Name, GenericName, and Comment (#131602)
  - Add MimeType desktop entry (patch from jrb@redhat.com)
  - Build with --disable-xprint


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.5
changelog:
  - remove ldconfig from scriptlets (bug #1846 comment #40)
  - reenabled mng support (bug #1971)
  - removed --enable-strip to let rpm to the stripping (bug #1971)
  - honor system settings in firefox.sh (bug #1971)
  - setting umask 022 in scriptlets (bug #1962)


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.1
changelog:
  - updated to 0.9.3
  - removed following from .mozconfig:
      ac_add_options --with-system-mng
      ac_add_options --enable-xprint
      ac_add_options --disable-dtd-debug
      ac_add_options --disable-freetype2
      ac_add_options --enable-strip-libs
      ac_add_options --enable-reorder
      ac_add_options --enable-mathml
      ac_add_options --without-system-nspr


author: Adrian Reber <adrian@lisas.de> 0:0.9.2-0.fdr.5
changelog:
  - applied parts of the patch from Matthias Saou (bug #1846)
  - delete empty directories in %{ffdir}/chrome
  - more cosmetic changes to the spec file


author: Adrian Reber <adrian@lisas.de> 0:0.9-0.fdr.4
changelog:
  - remove extensions patch
  - add post hack to create extensions
  - enable negotiateauth extension
  - copy icon to browser/app/default.xpm
  - --enable-official-branding


author: Gene Czarcinski <gene@czarc.net>
changelog:
  - more x86_64 fixes
  - fix firefix-xremote-client for x86_64 (similar to what is done for
    firefox.sh.in)


author: Warren Togami <wtogami@redhat.com> 0:0.8-0.fdr.9
changelog:
  - xremote patch for thunderbird integration #1113
  - back out ugly hack from /usr/bin/firefox
  - correct default bookmarks


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.2
changelog:
  - s/0.6.1/0.7/
  - changed user-app-dir back to .phoenix as .mozilla-firebird
    is not working as expected
  - manpage now also available as MozillaFirebird.1


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.1
changelog:
  - updated to 0.7
  - provides webclient
  - run regxpcom and regchrome after installation and removal
  - added a man page from the debian package
  - changed user-app-dir from .phoenix to .mozilla-firebird


author: Adrian Reber <adrian@lisas.de> - 0:0.6.1-0.fdr.1
changelog:
  - updated to 0.6.1
  - changed buildrequires for XFree86-devel from 0:4.3.0 to 0:4.2.1 
    it should now also build on RH80


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.4.rh90
changelog:
  - renamed it again back to MozillaFirbird
  - added libmng-devel to BuildRequires
  - startup homepage is now www.fedora.us
  - improved the startup script to use the unix remote protocol 
    to open a new window


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.3.rh90
changelog:
  - new icon from http://iconpacks.mozdev.org/phoenix/iconshots/flame48true.png
  - now using gtk2 as toolkit
  - renamed again back to mozilla-firebird (I like it better)
  - Provides: MozillaFirebird for compatibility with previous releases
  - changed default bookmarks.html to contain links to www.fedora.us


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.2.rh90
changelog:
  - renamed package to MozillaFirebird and all files with the old name
  - enabled mng, mathml, xinerama support
  - now honouring RPM_OPT_FLAGS


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.3.cvs20030402.rh90
changelog:
  - Changed Prereq to Requires.
  - Changed BuildRequires to gtk+-devel (instead of file).
  - Recompressed source with bzip2.
  - Removed post.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.2.cvs20030402.rh90
changelog:
  - Added desktop-file-utils to BuildRequires.
  - Changed category to X-Fedora-Extra.
  - Updated to CVS.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030326.rh90
changelog:
  - Updated to latest CVS.
  - Changed release to 9 vs 8.1.
  - Added cvs script.
  - added encoding to desktop file.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030323.rh81
changelog:
  - Updated to latest CVS.
  - added release specification XFree86-devel Build Requirement.
  - changed chmod to %attr


author: Peter Hatina <phatina@redhat.com> 1.0.15-6
changelog:
  - security patches
  - Resolves: CVE-2012-6056
              CVE-2012-6060
              CVE-2012-6061
              CVE-2012-6062
              CVE-2013-3557
              CVE-2013-3559
              CVE-2013-4081
              CVE-2013-4083
              CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-5721
              CVE-2013-7112
              CVE-2014-2281
              CVE-2014-2299


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-3
changelog:
  - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
    CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
    CVE-2012-0067


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-2
changelog:
  - fixed tshark -s option (#580513)
  - fixed tshark exit code when dumpcap fails (#580510)
  - fixed editing of columns in Wireshark preferences (#493693)
  - added netdump protocol dissector (#484999)
  - fixed tshark / Wireshark automatic filter when started in ssh connection
    over IPv6 (#438473)


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1.4
changelog:
  - fix few security issues
  - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140
    CVE-2011-1141 CVE-2011-1143 #612240


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612239


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Marek Grac <mgrac@redhat.com> - 2.0.115-115
changelog:
  - fencing: fence_ipmilan does not return correct code when used with 'cycle'
    Resolves: rhbz#961119


author: Marek Grac <mgrac@redhat.com> - 2.0.115-113
changelog:
  - fencing: Add suport for APC with firmware 5.x
    Resolves: rhbz#886612
  - fencing: Solve regression with Dell DRAC 5/CMC due to invalid EOL
    Resolves: rhbz#904195


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-112
changelog:
  - cman|fenced: Fix node killing in case of a 2node cluster that
    suffers brief network outage
    Resolves: rhbz#876731


author: Jan Pokorny <jpokorny@redhat.com> - 2.0.115-111
changelog:
  - ccs_tool: Fix several segfaults
    Resolves: rhbz#714042
  - Install man pages with mode 0644
    Resolves: rhbz#883816
  - fenced: Prevent a rare but possible spinning in poll on the cman fd
    Resolves: rhbz#856214
  - fenced: reconnect to ccs if connection times out
    Resolves: rhbz#881217


author: Marek Grac <mgrac@redhat.com> - 2.0.115-108
changelog:
  - fence_vmware_soap: Speed up fencing process and do not crash on VM without valid UUID
    Resolves: rhbz#836654


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-103
changelog:
  - fenced: increase MAX_DEVICES to 8
    Resolves: rhbz#821857
  - fenced: fix double free when second method has no devices
    Resolves: rhbz#809390
  - cman init: allow dlm hash table sizes to be tunable at startup
    Resolves: rhbz#836963


author: Marek Grac <mgrac@redhat.com> - 2.0.115-101
changelog:
  - new fence agent for IBM iPDU (SNMP)
    Resolves: rhbz#741985
  - fence agent can fail to login if eol is not set properly
    Resolves: rhbz#810949


author: Ryan O'Hara <rohara@redhat.com> - Version: 2.0.115-100
changelog:
  - fence_scsi: fix typos in debug messages
    Resolves: rhbz#674497
  - fence_scsi: remove limitations section from man page
    Resolves: rhbz#753839


author: Ryan O'Hara <rohara@redhat.com> - 2.0.115-98
changelog:
  - fence_scsi_test: add option for strict verification
    Resolves: rhbz#782919
  - fence_scsi_test: increment error count when reservation fails
    Resolves: rhbz#809481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-97
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#786485


author: Marek Grac <mgrac@redhat.com> - 2.0.115-95
changelog:
  - fence_vmware_soap -o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#715107


author: Marek Grac <mgrac@redhat.com> - 2.0.115-94
changelog:
  - fence_ipmilan will not parse args with passwd_script option in cluster.conf
    Resolves: rhbz#732773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-93
changelog:
  - cman: Clean shutdown_con if the controlling process is killed.
    Resolves: rhbz#590101
  - qdisk: Fix man page example
    Resolves: rhbz#745536
  - cman: fix building of debuginfo package (enable -g)
    Resolves: rhbz#746599


author: Marek Grac <mgrac@redhat.com> - 2.0.115-90
changelog:
  - fence_rhevm needs to change "UP" status to "up" state as the REST-API has changed
    Resolves: rhbz#731167
  - fence_ipmilan should honor ipmilan's -L option
    Resolves: rhbz#726731


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-89
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#727492
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#704243


author: Marek Grac <mgrac@redhat.com> - 2.0.115-88
changelog:
  - fence_bladecenter: Reboot operation did not work correctly with --missing-as-off
    Resolves: rhbz#689851
  - fence_drac5: Fix list support for Dell DRAC CMC
    Resolves: rhbz#718194
  - fence_drac5: drac5 firmware does not close ssh session correctly
    Resolves: rhbz#730634


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-86
changelog:
  - cman: do not free shutdown connection untill the very end to prevent
    spurious messages to be written to syslog
    Resolves: rhbz#727215


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85
changelog:
  - fence_vmware_soap: Fix RHEL5-specific path issue
    (fence_vmware_soap_fix_rhel5_specific_path_issue.patch)
    Resolves: rhbz#717372


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-82
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Ancillary fix for 678061
    Resolves: rhbz#678061


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-81
changelog:
  - cman: Don't increment on LEAVING->MEMBER transition
    (don_t_increment_on_leaving_>member_transition.patch)
    Resolves: rhbz#649533
  - cman: Clarify 'expected' option
    (clarify_expected_option.patch)
    Resolves: rhbz#688701


author: Marek Grac <mgrac@redhat.com> - 2.0.115-80
changelog:
  - fence agents: Fix problems with SSL support 
    (fence_cisco_ucs-fence_rhevm-Problems-with-SSL-support.patch)
    Resolves: rhbz#693395

  - fence_ipmilan: Operation monitor should return correct exit code
    (fence_ipmilan-returns-incorrect-status-on-monitor-op.patch)
    Resolves: rhbz#693427

  - fence_vmware_soap: New fence agent for VMWare using SOAP API
    (Add-support-for-UUID.patch)
    (fence_vmware_soap-New-fence-agent-for-VMWare-using-SOAP.patch)
    Resolves: rhbz#634567


author: Marek Grac <mgrac@redhat.com> - 2.0.115-79
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Marek Grac <mgrac@redhat.com> - 2.0.115-77
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-76
changelog:
  - fence-agents: Fence_rhevm needs to change "RUNNING" status to "UP" status as the REST-API has changed.
    (fence_rhevm_needs_to_change_running_status_to_up_status_as_the_rest_api_has_changed.patch)
    Resolves: rhbz#681670
  - fence_rhevm: Update URL to RHEV-M REST API
    (fence_rhevm_update_url_to_rhev_m_rest_api.patch)
    Resolves: rhbz#681676


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-75
changelog:
  - fence_ipmilan: Fix manual page to describe usage with HP iLO 3
    (fence_ipmilan_fix_manual_page_to_describe_usage_with_hp_ilo_3.patch)
    Resolves: rhbz#671089
  - qdiskd: Fix bad timer check - RHEL5
    (qdiskd_fix_bad_timer_check_rhel5.patch)
    Resolves: rhbz#679274


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-74
changelog:
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into_part2.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-73
changelog:
  - Add "diag" option to fence_ipmilan
    (fence_ipmilan-Add-diag-option-to-support-ipmitool.patch)
    Resolves: rhbz#678061
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-72
changelog:
  - Improve error handling in RSA fence agent
    (fence_rsa-Better-error-handling.patch)
    Resolves: rhbz#678018
  - Automatic generation of manual pages
    (fence-agents-Automatic-generation-of-manual-pages.patch)
    (fence-agents-add-XSLT-template.patch)
    (library-Metadata-are-not-correct-if-agent-does-not-s.patch)
    Resolves: rhbz#488959


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-71
changelog:
  - Display the node's votes in cman_tool status
    (display_the_node_s_votes_in_cman_tool_status.patch)
    Resolves: rhbz#653508
  - cman: Fix cman_tool reporting with quorum disk
    (cman_fix_cman_tool_reporting_with_quorum_disk.patch)
    Resolves: rhbz#654894


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-70
changelog:
  - ccs: Allow ccs_tool to use alternate base ports
    (ccs_allow_ccs_tool_to_use_alternate_base_ports.patch)
    ccs: Update manual page for ccs_tool
    (ccs_update_manual_page_for_ccs_tool.patch)
    Resolves: rhbz#656427


author: Lon Hohberger <lhh@redhat.com> 2.0.115-69
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#663808


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-64
changelog:
  - cman: Fix fail_recv_const length calculation
    (fix_fail_recv_const_length_calculation.patch)
    Resolves: rhbz#587080
  - Replace incorrect patch for "ccsd: Add error when bind fails" 
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996


author: Lon Hohberger <lhh@redhat.com> 2.0.115-63
changelog:
  - Updated patch for mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246


author: Lon Hohberger <lhh@redhat.com> 2.0.115-62
changelog:
  - fence_scsi_test: Add man page to Makefile.
    (fence_scsi_test_add_man_page_to_makefile.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-59
changelog:
  - fence_scsi_test: rewrite to more accurately test
    (fence_scsi_test_rewrite_to_more_accurately_test.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-58
changelog:
  - Disable fence_cisco_ucs & fence_rhevm since they depend
    on a package which is not available at this point.
    Related: rhbz#595385 rhbz#579859


author: Marek Grac <mgrac@redhat.com> - 2.0.115-56
changelog:
  - fence agents: fix build system for fence_rhevm
    (fence_rhevm-fix_build_system.patch)
    Resolves: rhbz#595385
  - fence agents: fix path to library
    (fence_cisco_ucs-library_path.patch)
    Resolves: rhbz#579859
  - fence agents: new fence agent for IF-MIB
    (fence_ifmib.patch)
    Resolves: rhbz#572863


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-55
changelog:
  - GFS2 mount fails incorrectly after correctly failed second-mount attempt
    (gfs2_mount_fails_incorrectly_after_correctly_failed_second_mount_attempt.patch)
    Resolves: rhbz#559735
  - cman: Make qdiskd heuristics time out
    (make_qdiskd_heuristics_time_out.patch)
    Resolves: rhbz#589266


author: Marek Grac <mgrac@redhat.com> - 2.0.115-54
changelog:
  - fence agents: New fence agent for RHEV-M REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595385
  - fence agents: New fence agent for Cisco UCS
    (fence_cisco_ucs.patch)
    Resolves: rhbz#579859
  - New dependency added: python-pycurl


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-53
changelog:
  - Fence agents: Rename power-wait to power_wait and add
    help information, replacing previous patch.
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-52
changelog:
  - Fence agents: add power-wait to fence_ipmilan for iLO3 devices
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: David Teigland <teigland@redhat.com> - 2.0.115-51
changelog:
  - fenced: use post_join_delay after cluster join
    (fenced-use-post_join_delay-after-cluster-join.patch)
    Resolves: rhbz#575952
  - gfs_controld: fix plock owner syncing
    (gfs_controld-fix-plock-owner-syncing.patch)
    Resolves: rhbz#624156
  - gfs_controld: fix plock owner in unmount
    (gfs_controld-fix-plock-owner-in-unmount.patch)
    Resolves: rhbz#624554


author: David Teigland <teigland@redhat.com> - 2.0.115-50
changelog:
  - group_tool: list more than 64 groups
    (group_tool-list-more-than-64-groups.patch)
    Resolves: rhbz#561509


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-49
changelog:
  - cman: Change flags to be values instead of bitmasks
    (cman_change_flags_to_be_values_instead_of_bitmasks.patch)
    Resolves: rhbz#595394


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-48
changelog:
  - gfs_controld: set last_plock_time for ownership operations
    (gfs_controld_set_last_plock_time_for_ownership_operations.patch)
    Resolves: rhbz#578632


author: Marek Grac <mgrac@redhat.com> - 2.0.115-47
changelog:
  - Method to cause one node to delay fencing in a cluster
    (fencing-delay_1.patch)
    (fencing-delay_2.patch)
    (fencing-delay_3.patch)
    (fencing-delay_4.patch)
    Resolves: rhbz#613064


author: Marek Grac <mgrac@redhat.com> - 2.0.115-46
changelog:
  - Not all parameters appear in metadata
    (fencing_Not_all_parameters_in_metadata.patch)
    Resolves: rhbz#619034
  - make "port" a synonym of "module_name" for drac5 
    (fence_drac5-synonym-for_modulename.patch)
    Resolves: rhbz#619776
  - Return codes of fencing agent 
    (fence_correct_return_codes.patch)
    (fence_correct_return_codes-ipmilan.patch)
    Resolves: rhbz#583034


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-45
changelog:
  - qdisk: mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246
  - ccsd: Add error when bind fails
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996
  - fence-agents: Update fence_ack_manual man page
    (update_fence_ack_manual_man_page.patch)
    Resolves: rhbz#578604


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-44
changelog:
  - reorder patches
  - gfs_controld: Add extended information to 'group_tool dump plocks' (gfs)
    (add_extended_information_to_group_tool_dump_plocks_gfs.patch)
    Resolves: rhbz#514264
  - cman: make libcman /dev/zero fd close-on-exec
    (cman_make_libcman_dev_zero_fd_close_on_exec.patch)
    Resolves: rhbz#585218
  - cman: set fail_recv_const to 2500
    (cman_set_fail_recv_const_to_2500.patch)
    Resolves: rhbz#587080
  - cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#611391


author: Marek Grac <mgrac@redhat.com> 2.0.115-42
changelog:
  - fence_egenera: possible symlink vulnerability
  - fencing: Some fencing agents do not support login using keys
  - Resolves: rhbz#519682 rhbz#582334


author: Marek Grac <mgrac@redhat.com> 2.0.115-41
changelog:
  - fence_ilo: will throw exception if user does not 
    have power priviledges
  - Resolves: rhbz#576176


author: Marek Grac <mgrac@redhat.com> 2.0.115-40
changelog:
  - fence_rsb: force stdout close for fence_rsb
  - fence_rackswitch: fix warnings in build process
  - fence_rackswitch: should accept unknown parameters
  - fence_wti: add direct support for WTI VMR
  - fence_apc: fails for some port numbers 
  - Resolves: rhbz#583045 rhbz#578615 rhbz#606315 rhbz#607265


author: Marek Grac <mgrac@redhat.com> 2.0.115-39
changelog:
  - fence_vmware: fix building for fence_vmware_helper.pl
  - fence_wti: support non-default TCP ports for telnet/ssh
  - Resolves: rhbz#590304 rhbz#572996


author: Marek Grac <mgrac@redhat.com>
changelog:
  - fence_ipmilan: correct return codes + manual page info
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-37
changelog:
  - fencing: work around bad nss/nspr headers which contain
    non-ANSI prototypes
  - Resolves: rhbz#575157


author: Marek Grac <mgrac@redhat.com> - 2.0.115-36
changelog:
  - fencing: correct return codes (perl + python based agents)
  - fence_ilo: remove import of openSSL into fence agent
  - fencing: preliminary support for generating manual pages
  - Resolves: rhbz#583049 rhbz#583053
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Jeremy Katz <katzj@redhat.com> - 1:0.8-1
changelog:
  - Use sendmail (Pierre Ossman, #397711)
  - Don't wake up as often (#391571)
  - Improve mail output (Pierre Ossman, #387181)
  - Fix some tracebacks (#387051, #374801)


author: Jeremy Katz <katzj@redhat.com> - 1:0.5-1
changelog:
  - add option for configurable SMTP server
  - fix email sending (Rich Fearn, #251196)
  - make updates checking in the presence of NetworkManager smarter (#213732)
  - ensure group info gets updated
  - work with yum 3.0.x (jantill)
  - don't poll gamin


author: Johnny Hughes <johnny@centos.org> 1.1.1-48.101.0.1.el5.centos.2
changelog:
  - Roll in CentOS Branding
  - must increment the 101 in version as 1.1.1-48.101.el5_10.1 is newer than 1.1.1-48.101.el5.centos.2


author: Soren Sandmann <ssp@redhat.com> 1.2.2-1.0.5.el5
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Nils Philippsen <nils@redhat.com> - 2:2.2.13-2.0.9.el5_10
changelog:
  - fix overflows in PSD plugin (CVE-2009-3909, CVE-2012-3402)
  - fix heap corruption and overflow in GIF plug-in (CVE-2011-2896)
  - fix overflow in CEL plug-in (CVE-2012-3403)


author: Nils Philippsen <nils@redhat.com> - 2:2.2.13-2.0.7.el5_10.2
changelog:
  - fix various overflows (#537356, #666793, #689831, #703403, #703405, #703407,
    - unfuzz gimphelpmissing, icontheme patches


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.6
changelog:
  - replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
    don't crash but gracefully exit when encountering error conditions
  - fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
    loops when loading images
  - fix endianness issues in the PCX plugin which cause it to not detect corrupt
    images


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.5
changelog:
  - add safeguard to avoid crashes while loading corrupt PSD images (#247573,
    patch by Raphaël Quinet)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.4
changelog:
  - don't divide by zero when loading a layer or mask with zero width or height
    when loading PSD images (#247573, patch by Sven Neumann)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2.0.3
changelog:
  - add ChangeLog entry to psd-invalid-dimensions patch (#247573)
  - validate size values read from files before using them to allocate memory in
    various file plugins (#247573, patch by Mukund Sivaraman and Raphaël Quinet)
  - detect invalid image data when reading files in several plugins (#247573,
    patch by Sven Neumann and Raphaël Quinet)
  - validate size values read from files before using them to allocate memory in
    the PSD and sunras plugins (#247573, patch by Mukund Sivaraman)
  - don't let gimp-plugin-mgr --uninstall fail %post scriptlet
  - convert spec file to UTF-8


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-2
changelog:
  - avoid buffer overflow in sunras plugin (#238420)
  - don't erroneously delete symlinks to external plugins when updating (#238993)
  - own used directories in gimp-devel
  - s/%redhat/%rhel/g


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Mark McLoughlin <markmc@redhat.com> 2.12.0-2
changelog:
  - Add patch from Alexandre Oliva <oliva@lsd.ic.unicamp.br> to fix
    more keyboard brokeness (#158713)


author: Mark McLoughlin <markmc@redhat.com> 2.10.0-4
changelog:
  - Fix various keyboarding handling issues:
     + bug #142974: caps lock not working
     + bug #140515: shift not working with some keys
     + bug #134451: over-eager key repeating


author: Mark McLoughlin <markmc@redhat.com> 2.8.0.1-1.1
changelog:
  - Don't hang with metacity's "reduced resources" mode (#134240) 
  - Improve the key repeat rate situation a good deal (#134451)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-23
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Joe Orton <jorton@redhat.com> - 1.6.11-8
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783 (#709219)
  - add fix for svnadmin hotcopy (#669535)
  - add security fix for CVE-2011-0715 (#681172)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672677)


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-46
changelog:
  - rgmanager: Fix improper use of xmlCleanupParser()
    rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#968322


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-43
changelog:
  - Med: Don't preserve SELinux context when copying files to /var/lib/nfs/sm
    Resolves: rhbz#907898
  - HA LVM should only remove missing PVs on stop when they belong to mirrors
    Resolves: rhbz#962376


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-39
changelog:
  - rgmanager: Update status after resource recovery
    Resolves: rhbz#879029
  - rgmanager: Clean up comments in ASEHAagent.sh
    Resolves: rhbz#841142
  - rgmanager: Install man pages with mode 0644
    Resolves: rhbz#883860
  - rgmanager: Don't duplicate configuration change events
    Related: rhbz#889098


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-32
changelog:
  - Bring HA LVM inline with upstream to collect the fixes
    Resolves: rhbz#693855 rhbz#756180
  - rgmanager: Fix orainstance.sh error checking
    Resolves: rhbz#723819
  - rgmanager: Don't exit uncleanly when cman asks us to shut down.
    Resolves: rhbz#769730
  - Fix 773372: Any change to lvm.conf causes HA LVM to
    Resolves: rhbz#773372
  - rgmanager: Don't immediately stop services that have started sucessfully
    rgmanager: Fix return code when relocation fails and svc is running on original node
    Resolves: rhbz#789366
  - rgmanager: Fix for unmount of full filesystems
    Resolves: rhbz#819595
  - rgmanager: Fix for services stuck in recovery
    Resolves: rhbz#834459


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-28
changelog:
  - Fix for rhbz769731 - HA LVM failure to remove tag thwarts service relocation
    Resolves: rhbz#769731


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-26
changelog:
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743214


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-23
changelog:
  - resource-agents: nfsclient: fix wildcard status checks
    Resolves: rhbz#700103
  - rgmanager: Mark services on dead nodes as stopped
    rgmanager: Send events on service stop & preserve frozen flag
    Resolves: rhbz#722230
  - resource-agents: Handle TREX and Webdispatcher in SAPInstance
    Resolves: rhbz#746992


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-22
changelog:
  - rgmanager: Fix ASEHAagent to allow for multiple ASEHA resources on one machine.
    rgmanager: Fix ASEHAagent to make server_name unique
    Resolves: rhbz#690265
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#713243
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#715052
  - rgmanager: Fix dependency restart bug
    rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#743442
  - resource-agents: orainstance.sh: Fix temporary variables
    Resolves: rhbz#744283


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-21
changelog:
  - rgmanager: Fix bad passing of SFL_FAILURE up
    (fix_bad_passing_of_sfl_failure_up.patch)
    Resolves: rhbz#711521


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-20
changelog:
  - resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
    Resolves: rhbz#710637


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-19
changelog:
  - Fix changelog format
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#692771


author: Marek Grac <mgrac@redhat.com> - 2.0.52-18
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Fix_pid_files.patch)
    Resolves: rhbz#663827


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-16
changelog:
  - rgmanager: Allow non-root clustat
    (allow_non_root_clustat.patch)
    Resolves: rhbz#510300
  - rgmanager: Initial commit of central proc + migration support
    (central_proc_+_migration_support.patch)
    Resolves: rhbz#525271
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#592613
  - resource-agents: Trim trailing slash for nfs clients
    (trim_trailing_slash_for_nfs_clients.patch)
    Resolves: rhbz#592624
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#610483
  - rgmanager: Pause during exit if we stopped services
    (pause_during_exit_if_we_stopped_services.patch)
    Resolves: rhbz#619468
  - rgmanager: Fix quotaoff handling
    (fix_quotaoff_handling.patch)
    Resolves: rhbz#637678
  - resource-agents: Try force-unmount before fuser for netfs.sh
    (try_force_unmount_before_fuser_for_netfs_sh.patch)
    Resolves: rhbz#678494
  - rgmanager: Improve rgmanager's exclusive prioritization handling
    (improve_rgmanager_s_exclusive_prioritization_handling.patch)
    Resolves: rhbz#680256


author: Marek Grac <mgrac@redhat.com> - 2.0.52-15
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Do-not-send-TERM-signal-when-killing-post.patch)
    (postgres-8-Improve-testing-if-postgres-started-succe.patch)
    Resolves: rhbz#663827


author: Marek Grac <mgrac@redhat.com> - 2.0.52-14
changelog:
  - resource-agents: Fix problems when generating XML configuration file
    (rgmanager-Fix-problems-in-generated-XML-config-file.patch)
    Resolves: rhbz#637802


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-13
changelog:
  - resource-agents: Use literal quotes for tr calls
    (resource_agents_use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#637154


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-12
changelog:
  - resource-agents: Use shutdown immediate in oracledb.sh
    (use_shutdown_immediate_in_oracledb_sh.patch)
    Resolves: rhbz#633992
  - rgmanager: Add path to rhev-check.sh
    (add_path_to_rhev_check_sh.patch)
    Resolves: rhbz#634225
  - rgmanager: Make clustat report correct version
    (make_clustat_report_correct_version.patch)
    Resolves: rhbz#654160


author: Marek Grac <mgrac@redhat.com> - 2.0.52-11
changelog:
  - resource-agents: Listen line in generated httpd.conf incorrect
    (resource-agents-Remove-netmask-from-IP-address-when.patch)
    Resolves: rhbz#675739
  - resource-agents: Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#620700


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-10.1
changelog:
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#669440


author: Marek Grac <mgrac@redhat.com> - 2.0.52-10
changelog:
  - resource-agents: Problem with whitespace in mysql resource name
    (resource_agents_fix_whitespace_in_names.patch)
    Resolves: rhbz#632704


author: Lon Hohberger <lhh@redhat.com> - Version: 2.0.52-9
changelog:
  - resource-agents: Fix migrateuriopt setting
    (resource_agents_fix_migrateuriopt_setting.patch)
    Resolves: rhbz#659477


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-8
changelog:
  - rgmanager: Do hard shut down if CMAN dies
    (do_hard_shut_down_if_cman_dies.patch)
    rgmanager: Work around lockspace release hang
    (work_around_lockspace_release_hang.patch)
    Resolves: rhbz#639961
  - rgmanager: Fix CIFS mount handling in netfs.sh
    (fix_cifs_mount_handling_in_netfs_sh.patch)
    Resolves: rhbz#640676


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-7
changelog:
  - rgmanager: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629208


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.18
changelog:
  - rgmanager: tomcat-5 can't start properly
    (tomcat_5_can_t_start_properly.patch)
    Resolves: rhbz#591003


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.17
changelog:
  - halvm: lvm agent incorrectly reports vg is in volume_list
    (lvm_agent_incorrectly_reports_vg_is_in_volume_list.patch)
    Resolves: rhbz#506587
  - rgmanager: Add non-critical flag to resources
    (rgmanager_add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (rgmanager_add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (rgmanager_header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (rgmanager_use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (rgmanager_present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (rgmanager_mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (rgmanager_add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (rgmanager_allow_restart,disable_recovery_policy.patch)
    rgmanager: Fix handling of independent subtrees
    (rgmanager_fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (rgmanager_do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Support convalesce w/ central_processing
    (rgmanager_support_convalesce_w_central_processing.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (rgmanager_add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (rgmanager_add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (rgmanager_clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (rgmanager_fix_corner_case_in_critical_non_critical_handling.patch)
    Resolves: rhbz#605733
  - resource-agents: Support ext4 in fs.sh
    (support_ext4_in_fs_sh.patch)
    Resolves: rhbz#636550


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.16
changelog:
  - rgmanager: Retry when config is out of sync
    (retry_when_config_is_out_of_sync.patch)
    Resolves: rhbz#568126


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.15
changelog:
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#592380
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#620730


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.13
changelog:
  - resource-agents: Fix samba netbios name
    (fix_samba_netbios_name.patch)
    Resolves: rhbz#531098
  - resource-agents: Fix vxfs support
    (fix_vxfs_support.patch)
    Resolves: rhbz#531843
  - rgmanager: Allow exit while waiting for cman
    (allow_exit_while_waiting_for_cman.patch)
    Resolves: rhbz#545229
  - rgmanager: Document failover domains
    (document_failover_domains.patch)
    Resolves: rhbz#557562
  - resource-agents: SAPDatabase: remove $TEMPFILE
    (sapdatabase_remove_tempfile.patch)
    Resolves: rhbz#565363
  - rgmanager: Kill processes correctly w/ force_unmount
    (kill_processes_correctly_w_force_unmount.patch)
    Resolves: rhbz#573705
  - HA LVM: Use CLVM with local machine kernel targets
    (use_clvm_with_local_machine_kernel_targets_bz_585229.patch)
    Resolves: rhbz#585229 rhbz#509368 rhbz#583769 rhbz#572311
  - resource-agents: Remove nfs service temp directories
    (remove_nfs_service_temp_directories.patch)
    Resolves: rhbz#595455
  - resource-agents: Fix migration mapping behavior w/ virsh
    (fix_migration_mapping_behavior_w_virsh.patch)
    Resolves: rhbz#596016


author: Marek Grac <mgrac@redhat.com> - 2.0.52-6.11
changelog:
  - postgres-8 will fail to stop gracefully if there are active
    clients connected
  - Resource agent for psql does not work correctly with netmask
  - Resolves: rhbz#587735 rhbz#614456


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.10
changelog:
  - Fix start timeout if status_program takes a long time
  - Use sysrq-b to reboot to work around a failed reboot() syscall
  - Resolves: rhbz#583788 rhbz#608397


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.2
changelog:
  - Add status_program attribute to vm.sh
  - Make status check tolerances user configurable and timing work
    correctly
  - Resolves: rhbz#583788


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-5
changelog:
  - Make relocate-to-offline host consistent with other relocation
    behaviors
  - Add isAlive error reporting for file system agents
  - Resolves: rhbz#562237 rhbz#536157


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.33
changelog:
  - Make VF timeouts scale with totem token timeout
  - Revert requires: line for installation in virtual machines.
  - Resolves: rhbz#548133 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.31
changelog:
  - Fix fs.sh bind mount handling
  - Add missing requires: line for libvirt 0.6.3
  - Resolves: rhbz#526286 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.27
changelog:
  - Add debugging information to dumps generated by rgmanager
  - Fix migration failure handling
  - Resolves: rhbz#512052 rhbz#499835


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.21
changelog:
  - Fix problem in ip.sh where it was not honoring monitor_link
    during startup
  - Resolves: rhbz#532756


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.15
changelog:
  - Fix problem causing rgmanager to stick after a node dies
    and rejoins, blocking configuration updates and other events
  - Resolves: rhbz#527777


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.14
changelog:
  - Fix problem causing service to get stuck in 'recovering' state
    when using central_processing
  - Resolves: rhbz#530409


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.1
changelog:
  - Fix issue causing unmounting of cluster file systems while in 
  use during a configuration change.
  - Resolves: rhbz#506094


author: Chris Feist <cfeist@redhat.com> - 2.0.52-1
changelog:
  - When vm.sh does a status check and gets 'no state' it is now treated as a
    running state.
  - Resolves: rhb#514044


author: Chris Feist <cfeist@redhat.com> - 2.0.51-1
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505340


author: Chris Feist <cfeist@redhat.com> - 2.0.50-1
changelog:
  - Extra checks from the oracle agents have been removed.
  - Several fixes to prevent DOS attacks through insecure use of /tmp/ files have
    been implemented.
  - vm.sh now uses libvirt
  - Users can now define an explicit service processing order when
    central_processing is enabled
  - Resolves: rhbz#470917 rhbz#412911 rhbz#468691 rhbz#492828


author: Chris Feist <cfeist@redhat.com> - 2.0.49-1
changelog:
  - Rgmanger now checks to see if it has been killed by the OOM killer and if
    so, reboots the node.
  - Resolves: rhbz#488072


author: Chris Feist <cfeist@redhat.com> - 2.0.48-1
changelog:
  - clulog now accepts '-' as the first character in messages.
  - If expire_time is 0 max_restarts is no longer ignored.
  - SAP scripts have been updated.
  - Empty PID files no longer cause resource start failures.
  - Recovery policy of type restart now works properly when using a resource
    based on ra-skelet.sh
  - startup_wait option has been added to the mysql resource agent.
  - samba.sh now kills the pid listed in the proper pid file.
  - Handling of '-F' has been improved to fix issues with rgmanager crashing if
    no members of a restricted failover domain are online and rgmanager failing
    to correctly restart service is they fail on the first node.
  - Enabled ability to prioritize services.
  - It is now possible to cap the number of simultaneious status checks to
    prevent load spikes.
  - Enabling a frozen service no longer fails and leaves the service in a failed
    state.
  - Forking and cloning during status checks has been optimized to reduce load
    spikes.
  - rg_test no longers hangs when running against a cluster due to the removal
    of an 8MB memory cap.
  - Resolves: rhbz#471431 rhbz#475826 rhbz#474444 rhbz#449394 rhbz#481058 rhbz#483093 rhbz#486711 rhbz#486717 rhbz#482858 rhbz#487598 rhbz#488714 rhbz#250718 rhbz#490455


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1
changelog:
  - postgres-8.sh now uses 'su' instead of 'sudo' allowing the resource agent to
    run in the background.
  - Resolves: rhbz#462910


author: Chris Feist <cfeist@redhat.com> - 2.0.42-1
changelog:
  - rgmanager can now resolve hostnames to IP addresses and back when checking
    NFS clients.
  - Caching has been added in services to increase performance with a large
    number of individual mounters.
  - Resolves: rhbz#455324


author: Chris Feist <cfeist@redhat.com> - 2.0.40-1
changelog:
  - Parameter added for mapping cluster node name to xen migration
    target hostname.
  - Add support for service freeze/unfreeze.
  - rgmanager now detects restricted failover domain crashes.
  - Fix bugs when using rgmanager with IPv6.
  - rgmanager now waits for fence domain join to complete on startup.
  - clusvcadm man page fixes.
  - Resolves: rhbz#453429 rhbz#448046 rhbz#435466 rhbz#459582 rhbz#460032 rhbz#459754


author: Chris Feist <cfeist@redhat.com> - 2.0.39-1
changelog:
  - rgmanager no longer erroneously removes the wrong address when the IP
    address matches the broadcast address of the interface.
  - rgmanager now properly checks pbond links (used with Xen).
  - Resources with names that include spaces are now properly handled.
  - HA LVM now works properly on ia64 architectures.
  - Symlinks in mount points no longer cause failures.
  - rgmanager now properly sets the close on exec bit for its sockets (fixes
    SELinux issues)
  - Non-ethernet bonding slaves now work properly.
  - The LVM script now provides sufficient parameter descriptions.
  - Machines can now fence themselves if they cannot deactivate their logical
    volumes.
  - The LVM script no longer removes tags from all VGs.
  - Resolves: rhbz#453000 rhbz#451654 rhbz#445662 rhbz#446260 rhbz#441582 rhbz#433313 rhbz#331661 rhbz#443660 rhbz#431713 rhbz#242798 rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.38-1
changelog:
  - Leaving out the VG name paramater to 'vgchange --deltag' no longer
    causes the tag to be removed from all VGs.
  - Resolves: rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.37-1
changelog:
  - A bug was fixed which caused incorrect return codes during service stop
    operations.
  - Resolves: rhbz#432998


author: Chris Feist <cfeist@redhat.com> - 2.0.34-1
changelog:
  - Extraneous errors in during HA lvm operations have been fixed
  - Oracle 10g Release 2 resource agent is now included
  - Resolves: rhbz#428346 rhbz#349571


author: Chris Feist <cfeist@redhat.com> - 2.0.33-1
changelog:
  - Samba shares may now be mounted from the netfs resource agent
  - clulog now honors rgmanager log levels
  - Fixed a crash on restart bug
  - Default migration policy is now live (from paused)
  - Restart counters have been implemented
  - Stopping a service using a shared GFS resource no longer umounts GFS if
    other services are using it
  - HA LVM now allows multiple LVs/VGs as long as they move together
  - Resolves: rhbz#289501 rhbz#303981 rhbz#345871 rhbz#247139 rhbz#254111 rhbz#427378 rhbz#428448


author: Chris Feist <cfeist@redhat.com> - 2.0.32-1
changelog:
  - Mounting samba shares are now supported.
  - clulog now honors cluster configuration specification of log levels in
    all cases.
  - clusvcadm man page has been updated
  - Default virtual machine migration is now live (-l)
  - It is now possible to fail over a service have a specified number of restarts
  - rgmanager no longer umounts shared gfs partitions when it is used by other
    services
  - Resolves: rhbz#250681 rhbz#289501 rhbz#303981 rhbz#324151 rhbz#345871 rhbz#400211 rhbz#254111


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


author: Petr Hracek <phracek@redhat.com> - 3.8.2-19
changelog:
  - Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885309


author: Tom Lane <tgl@redhat.com> 3.8.2-13
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688828
  - Add fix for CVE-2011-1167
  Resolves: #688745


author: Tom Lane <tgl@redhat.com> 3.8.2-9
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507726
  - Update upstream URL


author: Tom Lane <tgl@redhat.com>
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458813
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460034


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-71.el5_10.1
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#1089732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-68.el5
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time, revised
    (#701444, RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-67.el5
changelog:
  - add backported patch by way of jbarbuc to free subkeys created by the
    KDC while processing TGS requests (#708516)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-66.el5
changelog:
  - add backported patch by way of several people to better avoid false
    detection of replay attacks when talking to systems with coarse time
    resolution (#713500)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-65.el5
changelog:
  - ftpd: add backported patch to check for errors when calling setegid
    (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-63.el5
changelog:
  - unbreak processing of multi-line macros (#735363,#736132), broken by the
    original fix for #665833


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-62.el5
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#712453)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-60.el5
changelog:
  - don't bail halfway through an unlock operation when the result will
    be discarded and the end-result not cleaned up (Martin Osvald, #586032)
  - add a versioned dependency between krb5-server-ldap and krb5-libs (internal
    tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-59.el5
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-58.el5
changelog:
  - ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
    lines in /etc/ftpusers (#644215, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-57.el5
changelog:
  - ftp: add modified patch from Rogan Kyuseok Lee to report the number of
    bytes transferred correctly when transferring large files on 32-bit
    systems (#648404)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
    backend (CVE-2011-0281, CVE-2011-0282, #671097)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5
changelog:
  - incorporate upstream patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-52.el5
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#611713)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-49.el5
changelog:
  - ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
    accept GSSAPI auth to any service for which we have a matching key (#538075)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-47.el5
changelog:
  - pull in fix for RT#5551 to treat the referral realm when seen in a ticket
    as though it were the local realm (#498554, also very likely #450122)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-46.el5
changelog:
  - add aes256-cts:normal and aes128-cts:normal to the list of keysalts
    in the default kdc.conf (part of #565941)
  - add a note to kdc.conf(5) pointing to the admin guide for the list of
    recognized key and salt types (the rest of #565941)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-44.el5
changelog:
  - libgssapi: backport patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605367,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-42.el5
changelog:
  - stop caring about the endianness of stash files (#514741), which will be
    replaced by proper keytab files in later releases
  - don't crash in krb5_get_init_creds_password() if the passed-in options
    struct is NULL and the client's keys have expired (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-41.el5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#540769 and #596887, respectively)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add candidate patch to correct libgssapi null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583704)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-40.el5
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-39.el5
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578186)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-38.el5
changelog:
  - merge patch to correct KDC integer overflows which could be triggered by
    malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-37.el5
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#546538)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-33.el5
changelog:
  - kdb5_util: when renaming a database, if the new name's associated lock
    files don't exist, go ahead and create them (#442879)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: perform PAM account and session management for the target user;
    authentication is still performed as before (#477033)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix typo in ksu's reporting of errors getting credentials (#462890)
  - kadmind.init: stop setting up a keytab, as kadmind's been able to use
    the database directly for a while now (#473151)
  - pull up patch to set PAM_RHOST (James Leddy, #479071)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490636, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491036, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-32.el5
changelog:
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461902)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-28.el5
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)
  - telnet: remove the proviso in the man page which says that the "z" command
    only works in csh, as this is only true on systems where other shells don't
    implement job control (#433947)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442716)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24.el5
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23.el5
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22.el5
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21.el5
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20.el5
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19.el5
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18.el5
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Fix changelog comments
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Remove an unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Roman Rakus <rrakus@redhat.com> - 3.2-33
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964753


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Fix the memory leak in read builtin
    Resolves: #618393
  - Don't append slash to non-directories
    Resolves: #583919


author: Roman Rakus <rrakus@redhat.com> - 3.2-27
changelog:
  - Test .dynamic section if has PROGBITS or NOBITS
    Resolves: #484809
  - Better random number generator
    Resolves: #492908
  - Allow to source scripts with embeded NULL chars
    Resolves: #503701


author: Roman Rakus <rrakus@redhat.com> - 3.2-26
changelog:
  - vi mode redo insert fixed
    Resolves: #575076
  - Don't show broken pipe messages for builtins
    Resolves: #546529
  - Don't include loadables in doc dir
    Resolves: #663656
  - Enable system-wide .bash_logout for login shells
    Resolves: #592979


author: Roman Rakus <rrakus@redhat.com> - 3.2-25
changelog:
  - Don't abort source builtin
    Resolves: #448508
  - Correctly place cursor
    Resolves: #463880
  - Minor man page clarification for trap builtin
    Resolves: #504904


author: Roman Rakus <rrakus@redhat.com> - 3.2-22
changelog:
  - backported patch 029 - #453123
  - update in fc builtin - #438841
  - changes in manpage for
      continue - #442018
      suspend  - #445692
      fg       - #446625


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Define RECYCLES_PIDS on Linux as well, solving the #419831 regression
  - document special builtin differences in posix mode (#245641)
  - document alias expansion in non-interactive shells (#253673)
  - readline auditing support (#235021)


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115865


author: Deepak Bhole <dbhole@redhat.com> 1.2.9-4jpp.7
changelog:
  - Resolves: rhbz#1092457
  - CVE-2014-0114: Fixed ClassLoader manipulation vulnerability
  - Added dist tag to release


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.9-3jpp.1
changelog:
  - Merge with upstream for upgrade to 1.2.9
  - Use symlinks instead of actual files in WEB-INF/lib folders
  - Add conditional native compilation


author: Fernando Nasser <fnasser@redhat.com> - 0:1.2.9-3jpp
changelog:
  - Remove duplicate macros
  - Fix removal of old struts-el documentation link
  - Create coreonly option


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:1.1-2jpp
changelog:
  - Fixed runtime requires
  - Fix examples by making symlinks work in their respective (sub-)directories,
    the template comes for tomcat4 from Source #2 and for tomcat5 from Source #3


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:1.1-1jpp
changelog:
  - Updated to 1.1
  - Use tomcat4 real webapps dir instead of -compat provided app dir
  - To compile against < JDK 1.4 jdkmajorver needs to be set to 1.3


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0.2-1jpp
changelog:
  - 1.0.2
  - generic servlet support
  - distinct webapps for tomcat3 and tomcat4
  - no duplicate files for webapps
  - correct file ownership for webapps


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - section macro
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependencies for webapp package
  - requires tomcat3
  - no more requires servlet3 as tomcat3 requires it
  - requires and buildrequires xalan-j2 >= 2.2.0
  - adaptation to new servlet3 package
  - adaptation to new xalan-j2 package
  - adapation to new tomcat3 package
  - uncompressed webapps


author: Deepak Bhole <dbhole@redhat.com> - 1:3.0-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - Disable certain ssl related tests that are known to fail with libgcj.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc2.1jpp
changelog:
  - Update to 2.0rc2.
  - Manual subpackage.
  - Crosslink with local J2SE javadocs.
  - Own unversioned javadoc dir symlink.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc1.1jpp
changelog:
  - Update to 2.0rc1.
  - Include "jakarta-"-less jar symlinks for consistency with other packages.
  - Exclude example and contrib sources from main package, they're in -demo.


author: Ville Skyttä <ville.skytta at iki.fi> 2.0-0.20020909alpha1.1jpp
changelog:
  - 2.0alpha1 snapshot 20020909.
  - Use sed instead of bash extensions when symlinking jars during build.
  - Add distribution tag.
  - Require commons-logging instead of log4j.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - renamed to jakarta-commons-httpclient
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped j2ee package
  - adapted to new jsse package
  - section macro


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-25
changelog:
  - Resolves: #739223 - ipvsadm errors should not be fatal
  - Resolves: #786364 - reread config can cause lvsd to segfault


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-23
changelog:
  - Resolves: #708035 - too many VIPs can causes HTTP 414 error
  - Resolves: #698505 - add CIDR /23 netmask to drop-down menus


author: Marek Grac <mgrac@redhat.com> 0.8.4-19
changelog:
  - Resolves: #550126 - fails to parse load average with ruptime
  - Resolves: #453451 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Lon Hohberger <lhh@redhat.com> 0.8.4-11
changelog:
  - Resolves: #238498  - need fallback service
  - Resolves: #243908  - nanny blocks signals in child processes


author: Marek Grac <mgrac@redhata.com>
changelog:
  - Resolves: #446802 - segfault if syslog message is longer 
                        than 80 characters


author: Marek Grac <mgrac@redhat.com> 0.8.4-8
changelog:
  - Resolves: #243278 - Fixes wrong init scripts
  - Resolves: #249312 - VIP doesn't go down
  - Resolves: #245788 - send_arp & incorrectly-formed ARP
  - Resolves: #338101 - php errors in piranha-gui


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-4
changelog:
  - Removed /etc/sysconfig/ha/example_script, as equal example is
     already in /usr/share/doc/piranha/docs/script_templates/* 
  - Update apache's modules, use libphp5 (instead of libphp4)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-3
changelog:
  - Removed .htaccess file, as equal configuration 
     already in /etc/sysconfig/ha/conf/httpd.conf
  - Added logrotate conf file


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.3-1
changelog:
  - Document send_program in lvs.cf manpage (bz190022)
  - Fix lvsd where it segfaults when nanny dies (bz176913)


author: Lon Hohberger <lhh@redhat.com> 0.8.0-1
changelog:
  - Build for RHCS-4
  - Lots of php warning cleanups
  - rename lvs to lvsd so as not to conflict with 'lvs' command


author: Lon Hohberger <lhh@redhat.com> 0.7.9-1
changelog:
  - Force sending of last heartbeat before shutdown of backup
  so that the master re-arps the VIPs (#134007)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed up piranha-passwd (#60440)
  - Updated the LVS-HOWTO docs (#60204)
  - fixed the silly misname of a directory in the httpd.conf (#60529)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - pulled in Wensong's memory leak patchs
  - Dropped the shared scsi portion in the web interface
    Note: FOS will vanish in piranha 0.7.0's interface, in
    theory that functionality will be taken over by clumanager
    which is part of the advanced server offering.
    In the future clumanager/piranha will merge (so I'm told)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - send_arp,c, changed the
    sock=socket(AF_INET,SOCK_RAW,htons(ETH_P_RARP));
    back to
    sock=socket(AF_INET,SOCK_PACKET,htons(ETH_P_RARP));
    as I got reports that this wasn't working.
    It will work fine, just there will be noise that it's
    an obsolete interface


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Finally someone spotted the reason why the children don't die
    much happiness spread by Sebastien <sebastien.bonnet@experian.fr>
  - Added in additional patch from Sebastien for bugzilla #57654
    which I think is also a solution for #15911


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a patch I got from pzb for to be a good deal more sensible
    about how we detect if we're using FOS mode or LVS mode other than looking
    for a start or stop script (shudder)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in Wensongs quiesce server patch for nanny
  - Updated the web interface to also know about the quiesce option


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in a patch for nanny.c from Wensong <wensong@gnuchina.org>
    which cleans up the run() function by splitting out two new
    funcions, adjustWeight(), and checkState().
  - I thought I'd removed the portion in the Makefile that tweaks with
    /etc/httpd/conf/httpd.conf but it was still there when I looked.
    Removed it.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - control.php3 has for ages been calling /usr/sbin/ipvsadm.
    Unfortunately that changed to /sbin and was not updated
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56497
  - In the pulse.c code, too few elements were allocated
    for the arguments causeing an occasional segv.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a switchover for fos (virt/real address swapover
    to prevent the fos call to nanny checking the real IP
    instead of the VIP


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Bundled in some very simple template scripts with the
    documentation. Dropped in an example_script with the
    main dist. Bumped the version number (0.6.0-10)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Removed nasty httpd.conf modifications in the
    rpm spec file. (An artifact of the old install
    system)
  - Dropped in an example script for use with the
    send_program function. Probably need to spend a
    week cooking up a library of 'common' scripts
    for use.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed parse.php3 so that it wouldn't issue the persistance option
    twice in the lvs.cf configuration file


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Various tidyups/rpm fiddling in an effort to allow for building standalone
    outside of the buildsystem.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Humm, killed off the piranha.desktop file as the GUI is web based not X11
    and this makes no sense to try and start from a menu item. A bookmark maybe.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Directives from der Boss, we must be able to run rpm -V successfully
  - Collapsed piranha piranha-gui piranha-docs into a single rpm


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Made fast changes to the hard coded /usr/sbin/ipvsadm
    to be /sbin/ipvsadm. This should be in a define in a header file
    however because of time pressure I'm doing it this way first and
    fix it up next week.


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected netmask logic so it does not ref gethost call and is only
    used when value is non-zero.
  - Added netmask error code and return string
  - Fixed pulse's use of netmasks in ifconfig and sendarp calls
  - Put missing "if debug" blocks around debug output
  - If using FOS, assume active if no backup node specified in lvs.cf
  - Correct inconsistent use of --test-start, --nofork, --nodaemon, and
    --norun between pulse, nanny, fos, and lvs. Updated man pages too.
  - Removed ipvsadm build from Makefile
  - piranha requires ipvsadm 1.17+
  - parser now handles trailing \r chars (customer problem)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed piranha-gui startup script and piranha spec file
  - Fixed gui error screen to report correct file permission & ownership


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Removed ipvsadm inclusion in piranha RPM
  - Changed version to exceed last experiemental release
  - Corrected web reference in spec file
  - Cleaned up 7.x installationin spec and makefile
  - Bumped version (multiple times)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Merged Bryce's ipvsadm changes
  - Changed nobody to apache (if apache user apache exists)
  - Migrate existing lvs.cf file if appropriate
  - bumped version


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Backed out some patches to pulse.c, fos.c, lvs.c, and nanny.c
  - Updated documentation
  - Changed "take control" heartbeat


author: Philip Copeland <copeland@redhat.com>
changelog:
  - removed the 'accept' input button in control.php3 to
    better fit the documentation
  - Updated the lvserror.php3 to reflect another not so uncommon
    fault that may prevent correct running of the GUI
  - Tidied up some eyecandy


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Fixed an incorrect pag redirection in the failover pages
  - added two missing subnet masks to the peristance netmask field


author: Philip Copeland <copeland@redhat.com>
changelog:
  - modified the piranha.spec.in file and Makefile to allow for
    release number updates (from editing the Makefile)
  - fixed a bug in redundancy.php3 which occurs when no lvs.cf file
    is present
  - made ipvsadm popt change (minor patch which shouldn't affect
    native redhat installed systems)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - core item ipvsadm has been updated to use ipvs-0.9.12-2.2.14
  - Minor tweeking of directory scruture
  - gui files no longer included in rpm builds
  - added a load of patches from the bugzilla archives
  - made kernel diffs
  - made sure the rpms built and installed correctly


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - changed the password updating/setting policy.  Made all password actions
    root operations via a root owned shell tool (piranha-passwd)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Security exposure raised by ISS regarding the passwd.php3
    file fixed by replacing the external call to htpasswd with
    php3s own crypt function (see parse.php3 change_password)
  - Rebuilt packages and generated errata.


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed killapache
  - changed sample httpd shutdown to use proper init scripts
  - Keith fixed MORONIC spelling error in pulse.c :)
  - moved the GUI README into the %doc list


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Improved take control heartbeat login in pulse
  - Enhanced old GUI README to notify user of special conditions
  - Bumped version


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added fos to file list
  - moved apache & php requires to gui package
  - reordered the install of killapache to make strip not puke


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected signaling, heartbeat, and failover in pulse
  - Bumped version to reflect a stable release
  - Note: pulse USR1/2 disabled in this checkin


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected memory errors in parser
  - Updated fos
  - Improved (but have not finished) pulse changes
  - Bumped version to reflect parser change


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added password services to web control
  - Altered pulse to provide a signal escalator between nobody root
    as we now have a "use a uid/gid < 100" limitation that
    apache's suexec doesn't cater for
  - Added default password to web (null)
  - minor spec file changes


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - New version of pulse with enhanced signals
  - New service = xxx parameter in config system
  - New man pages and doc updates


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - *NO* "echo's" in spec files!
  - made /etc/lvs.cf a %config so it'll get backed up on upgrades
  - cleaned up some useradd/groupadd errors


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed passthrough of routing type options
  - Fixed man pages to reflect routing type options
  - Changed formatting of sample.cf file and included comments
  - Bumped version number


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed segfault problem in nanny
  - Minor changes reporting the phase out of the old GUI
  - Bumped version number
  - Changed spec file to include web in GUI RPM


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Bumped version to reflect Bryce's changes to install scripts
  - Added persistent netmask to lvsconfig and lvs and sample.cf


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Added send/expect parsing to lvs, lvsconfig, and nanny.
  - Updated nanny man page and sample.cf file


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added NAT/direct routing/tunneling to the web interface
  - fixed up the web documents to tell the web browsers that
    caching them would be a BAD idea
  - Added some prettify stuff


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Changed pulse call to send_arp to /usr/sbin
  - Suppress sock error on unconfigured tunl device
  - Bumped version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that RPM_BUILD_ROOT != / when installing
  - handle case if httpd not installed during %install
  - handle gzipped man pages


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Minor updates to doc files and man pages.
  - Added headers and history to some source files
  - Created nanny.h file


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added a send_arp tool to the package
  - removed the /etc/lvs.cf entry (it was dumb here)
  - strip all binaries too
  - added nanny to package


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - restructured the package to come from CVS
  - renamed it
  - added oot's lvs daemon
  - added the perl client_monitor tool from Lars Marowsky-Bree
  - put stubs in for the GUI
  - buffed up the Makefile


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4 (#444803)
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions
  - hobble the library to drop the ECC support
  - add hmac FIPS integrity verification check


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.22-4
changelog:
  - Add Telsa Gwynne's procmailrc as a doc file - it's
    excellently commented, and is a great example


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Change to "License: GPL or artistic" from "Copyright: distributable"
  - Fix man page (#35825)
  - 3.15.1
  - redo config patch


author: Tomas Mraz <tmraz@redhat.com> - 2.0.10-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Peter Vrabec <pvrabec@redhat.com> - 2.0.8-3
changelog:
  - fix Requires(postun), postun -> preun
  - compile with $RPM_OPT_FLAGS
  - remove Requires(hint) dirmngr, not available in RHEL
  - remove kde-filesystem requires, not available in RHEL


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: Permaine Cheung <pcheung@redhat.com> - 0:1.2.1-2jpp.7
changelog:
  - Add missing connection hostname check against X.509 certificate name
  - Resolves: CVE-2012-5784
  - Add patches to build with java 1.6


author: Archit Shah <ashah@redhat.com> 0:1.2.1-2jpp_1fc
changelog:
  - remove unnecessary build dependencies on jacorb and jonathan-rmi
  - include fix to Axis bug 2142
  - merge from upstream 2jpp


author: Gary Benson <gbenson@redhat.com>
changelog:
  - Add DOM3 stubs to classes that need them (#152255).
  - Avoid some API holes in libgcj's ImageIO implementation.
  - Pick up CORBA and javax.rmi classes from jacorb and jonathan-rmi.


author: Nicolas Mailhot <Nicolas.Mailhot at laPoste.net> 0:1.1-1jpp
changelog:
  - Initial packaging
  - no xml security for now since xml-security is not packaged yet
  - functional tests not executed yet - seems they need some setup and do not
    run out of the box
  - no webapp right now - file layout is too messy if hidden into a war file
    since jpp installs webapps expanded, this matters


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9.el5_10.1
changelog:
  - Verify clvmd message validity before processing and log error if incorrect.
  - Ensure clvmd mesage is always NUL-terminated after read.
  - Limit the max size of processed clvmd message to ~8KB.
  - Do not send uninitialised bytes in cluster error reply messages.
  - Fix clvmd processing of invalid request on local socket.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9
changelog:
  - Fix alloc cling to cling to PVs already found with contiguous policy.
  - Fix cling policy not to behave like normal policy if no previous LV seg.
  - Fix allocation loop not to use later policies when --alloc cling without tags.
  - Append _TO_LVSEG to names of internal A_CONTIGUOUS and A_CLING flags.
    Resolves: #821013


author: Milan Broz <mbroz@redhat.com> - 2.02.88-8
changelog:
  - Do not print warning for pv_min_size set in range between 512KB and 2MB.
  - Fix division by zero if PV with zero PE count is used during vgcfgrestore.
    Related: #786009 #820237 #824813


author: Milan Broz <mbroz@redhat.com> - 2.02.88-6
changelog:
  - Fix lvm1 format snapshot handling.
  - Make memory lock error message clearer.
    Related: #758833 #769053


author: Milan Broz <mbroz@redhat.com> - 2.02.88-5
changelog:
  - Fix mirror log conversion and vgsplit for mirrored logs.
  - Fix dmeventd automatic snapshot extension.
    Related: #754598 #755762 #754198


author: Milan Broz <mbroz@redhat.com> - 2.02.88-4
changelog:
  - Avoid scan of device if it is part of active multipath.
  - Fix mirrored log creation and log size calculation.
  - Fix split mirror in cluster.
    Resolves: #597010 #749359 #750882 #750613


author: Milan Broz <mbroz@redhat.com> - 2.02.88-3
changelog:
  - Add ability to extend mirrors with '--nosync' option.
  - Fix extent-count divisibility requirements for striped mirrors.
    Related: #537369 #749650


author: Milan Broz <mbroz@redhat.com> - 2.02.88-2
changelog:
  - Fix redundant dmevent snapshot monitoring messages.
  - Fix lvextend and fsadm ext4 resize.
    Related: #746302 #707056 #708444 #720971


author: Milan Broz <mbroz@redhat.com> - 2.02.88-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #746687


author: Milan Broz <mbroz@redhat.com> - 2.02.84-2
changelog:
  - Allow to specify PV minimal size.
  - Fix return code for unknown option in clvmd.
    Resolves: #644578 #666991


author: Milan Broz <mbroz@redhat.com> - 2.02.84-1
changelog:
  - Update to latest upstream release, see WHATS_NEW for detailed changelog.
    Related: #680961
    Resolves: #673615 #667517


author: Milan Broz <mbroz@redhat.com> - 2.02.74-4
changelog:
  - Always use O_DIRECT when opening block devices in filters.
    Resolves: #673615
    Related: #673083 #672816


author: Milan Broz <mbroz@redhat.com> - 2.02.74-3
changelog:
  - Align code to changes in lvm2 and device-mapper library.
    Related: #486994 #643365 #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 2.02.73-1
changelog:
  - Update to latest upstream release, see WHATS_NEW for detailed changelog.
  - CVE-2010-2526: Fix insecurity when communicating between lvm2 and clvmd.
  - Fix conflict when both lvm and lvm2-cluster debuginfo installed.
  - Add lvmconf man page.
    Resolves: #627541 #616047 #586980 #622755 #498436


author: Milan Broz <mbroz@redhat.com> - 2.02.56-10
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Fix thread race in clvmd.
    Related: #580486 #575173 #571963
    Resolves: #561226


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Related: #528208 #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.56-4
changelog:
  - Fix precommitted metadata cache handling on remote nodes.
  - Fix mirror repair policies and automatic missing PV removal.
  - Fix possible stack overflow in persistent filter dump.
    Resolves: #538571 #538620 #547891 #547842 #552723


author: Milan Broz <mbroz@redhat.com> - 2.02.56-2
changelog:
  - Fix problems with mirror repair handling.
  - Fix cluster locking flags.
    Related: #536817
    Resolves: #543146


author: Milan Broz <mbroz@redhat.com> - 2.02.55-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Related: #536817


author: Milan Broz <mbroz@redhat.com> - 2.02.54-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #536817 #528208 #517900


author: Milan Broz <mbroz@redhat.com> - 2.02.46-9
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Resolves: #515232 #516773


author: Milan Broz <mbroz@redhat.com> - 2.02.46-6
changelog:
  - Fix partial activation and lvconvert --repair on clusters.
    Resolves: #505141
    Related:  #505143


author: Milan Broz <mbroz@redhat.com> - 2.02.46-4
changelog:
  - Fix virtual origin snapshot manipulation.
  - Implement mirror repair policies.
    Related: #249478 #503708


author: Milan Broz <mbroz@redhat.com> - 2.02.46-3
changelog:
  - Fix crash when calculating readahead on missing device in vgreduce.
  - Fix mirror log allocation when smallest PV has only 1 extent.
    Related: #502899 #502671


author: Milan Broz <mbroz@redhat.com> - 2.02.40-6
changelog:
  - Avoid overwriting in-use on-disk text metadata.
  - Fix mirror upconvert for active mirrors.
    Resolves: #467435 #455670


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-2
changelog:
  - Adjust some alignments for ia64. 
  - Fix VG clustered read locks to use PR not CR. 
  - Add startup timeout to clvmd startup script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-4
changelog:
  - Make spec file closer to lvm2.spec for easier maintenance.
  - Use the built-in cluster support (locking_type 3) by default,
    replacing the shared library, removing ldconfig and updating
    the lvmconf script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-1.0
changelog:
  - Change package suffix to use dist variable.
  - Fall back to internal locking if external locking lib is missing or fails.


author: Alasdair Kergon <agk@redhat.com> - 2.02.11-1.0
changelog:
  - lvmconf --enable-cluster no longer requires locking library post-installation
  - clvmd accepts -R to instruct a running daemon to reload its internal cache
  - Remote error messages are transmitted back across the cluster.
  - Fix bug that caused clvmd to die if node with a long name crashed.
  - Fix vgsplit to retain clustered VG attribute.


author: Alasdair Kergon <agk@redhat.com> - 2.02.06-4.0
changelog:
  - Avoid clvm 'unaligned access' error on some archs. (194626, lost)
  - Rebuild after recent lvm2 patches.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.1
changelog:
  - Switch from 'ExcludeArch: s390 s390x ppc' to 
    'ExclusiveArch: i386 ia64 x86_64' to match dlm dependency.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.0
changelog:
  - clvmd: Don't allow user operations to start until lvm thread is fully up.
  - clvmd-gulm: Set KEEPALIVE on sockets.


author: Alasdair Kergon <agk@redhat.com> - 2.01.07-1.0
changelog:
  - clvmd FDs close-on-exec
  - unlock gulm VG & orphan locks at startup in case they are stale
  - unlock gulm VG & orphan locks if client dies.


author: Tomas Mraz <tmraz@redhat.com> - 1.4.5-17
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14
changelog:
  - add patch from David Shaw to fix incorrectly detecting multiple plaintexts
    when processing multiple input files (#442815)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13
changelog:
  - incorporate patch from Werner to work around clients which
    can't tell that multiple plain messages have been processed (#230457)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-10
changelog:
  - incorporate patch from Werner to fix use of stack variable after it goes
    out of scope (CVE-2006-6235, #218483)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-9
changelog:
  - rebuild
  - give configure a --with-termlib option which can be used to force the
    selection of libtermcap or libncurses, but don't flip the switch yet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-1
changelog:
  - update to 1.4.5, fixing additional size overflows in packet parsing (#200904,
    CVE-2006-3746)
  - temporarily disable curl support again


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.4.90-1
changelog:
  - update to 1.4.5rc1 to check for build problems, but mark it as 1.4.4.90
    to avoid looking "newer" than the eventual 1.4.5
  - because we call aclocal, buildrequire gettext-devel to get AM_GNU_GETTEXT


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.4-6
changelog:
  - fix a cast in gpgkeys_hkp to avoid tripping stack smashing or buffer overflow
    detection (#198612)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.3-2
changelog:
  - apply patch from David Shaw to try multiple defaults if the the photo-viewer
    option isn't set (fixes #187880)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.2.1-3
changelog:
  - add patch from David Shaw to fix error reading keyrings created with older
    versions of GnuPG (Enrico Scholz, #182163)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change %post to check if the info files are there before attempting to
    add or remove them from the info index (#91641)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-2
changelog:
  - add -Wa,--noexecstack back to CFLAGS when invoking configure, the
    --enable-noexecstack flag only seems to affect asm modules


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.0-1
changelog:
  - comment out libusb-devel req for now so that we can build
  - build the mpi asm modules with gcc, not a cpp/as setup so that we don't end
    up with text relocations in the resulting binaries (#145836)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-2
changelog:
  - incorporate patch from gnupg-announce which removes the ability to create
    ElGamal encrypt+sign keys or to sign messages with such keys


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.1-3
changelog:
  - modify g10defs to look for helpers in libexecdir, because that's where they
    get installed, per gnupg-users
  - actually drop updates for 1.0.7 which are no longer needed for 1.2.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.0-1
changelog:
  - update to 1.2.0
  - stop stripping files manually, let the buildroot policies handle it
  - add translations updates ca and fr


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.7-4
changelog:
  - add and install info pages (#67931)
  - don't include two copies of the faq, add new doc files (#67931)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.6-3
changelog:
  - set message output encoding to match the message encoding, based on a
    patch by goeran@uddeborg.pp.se (#49182)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a security patch for a problem with detached signature verification...
    might hold off for an impending 1.0.5, though


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - rebuild to get compressed man pages
  - fix description
  - some minor tweaks to the spec file
  - add docs
  - fix build on alpha (alphaev6 stuff)


author: Uri Lublin <uril@redhat.com> - 0.3.0-56.el5
changelog:
  - Fix unsafe accesses
    + spice: drop libpng from windows components (537849)
    + libspice: fix unsafe guest data accessing
  Resolves: #568720
    + fix unsafe free() call.
  Resolves: #568724
    + spice server: fix unsafe cursor items handling.
  Resolves: #568720


author: Uri Lublin <uril@redhat.com> - 0.3.0-51.el5
changelog:
  - spice: server: add red_pipe_clear_device_resources() calls into
     RED_WORKER_MESSAGE_DETACH
  Resolves: #551580


author: Uri Lublin <uril@redhat.com> - 0.3.0-47.el5
changelog:
  - spice: server: heuristic for distinguishing between "real" videos 
     and textual streams
  Resolves: #493375


author: Uri Lublin <uril@redhat.com> - 0.3.0-40.el5
changelog:
  - spice: server: improve video stream detection
  Resolves: #518193 - Error in detecting the video stream on some web sites
  - spice: server: improve video streaming in low network bandwidth condition
  Resolves: #518388 - Video frames drop in low network bandwidth condition


author: Uri Lublin <uril@redhat.com> - 0.3.0-39.el5
changelog:
  - spice: server: improve channel connect/disconnect robustness
  Resolves: #508544 - Crash of a VM due to SPICE: ring_remove: ASSERT


author: Uri Lublin <uril@redhat.com> - 0.3.0-38.el5
changelog:
  - adjust package description and summary to fit the drop of client
    subpackages in release -34 #507718
  Resolves: #507718 - Remove qspice-mozilla subpackage and spicec cli


author: Uri Lublin <uril@redhat.com> - 0.3.0-37.el5
changelog:
  - spice: server: fix is_same_geometry() #508133
  Resolves: #508133 - Wrong path geometry comparison result with bad rendering


author: Yuval Kashtan <kashtan@redhat.com> - 0.3.0-36.el5
changelog:
  - add 'Requires: libXext-devel' to workaround bug #494249 (#503203)
  Resolves: #503203 - qspice-libs-devel doesn't pull libXrandr-devel


author: Yuval Kashtan <ykashtan@redhat.com> - 0.1.0-29.el5
changelog:
  - Compile qspice for 64bit only (#498872)
  Resolves: #498872 - qspice server is being compiled for 32bit machines


author: Yuval Kashtan <ykashtan@redhat.com> - 0.1.0-28.el5
changelog:
  - First RHEL-5 release (#488580)
  - Fix all rpmlint issues (#488580)
  Resolves: #488580 - Add qspice package


author: Dan Kenigsberg <danken@redhat.com> - 0.1.0-25.git4b474d
changelog:
  - fix bad hash key in spice client cache templates #494638
  - fix bug 492322 - client stuck after connection is lost.
  - fix bug 492885 - Fix wrong free memory that own by cache.
  - add insoftware fast stretching #481891
  - add x shared memory support - fix bug 482281 (video in linux is slower)
  - fix unsupported vdagent messages handling #494577
  - fix window messages handling #494367


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Gary Benson <gbenson at redhat.com> 0:2.6.0-3jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles xsltc and samples).


author: Gary Benson <gbenson@redhat.com> 0:2.6.0-2jpp_3fc
changelog:
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.2-1jpp
changelog:
  - Update to 2.5.2.
  - Re-enable javadocs, new style versionless symlink handling, crosslink
    with local J2SE javadocs.
  - Spec cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.1-1jpp
changelog:
  - Update to 2.5.1.
  - Fix jpackage-utils version in BuildRequires, add xerces-j2.
  - Non-versioned javadoc symlinking.
  - Add one missing epoch.
  - Clean up manifests from Class-Path's and other stuff we don't include.
  - xsltc no longer provides a jaxp_transform_impl because of huge classpath
    and general unsuitablity for production-use, system-installed transformer.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.
  - Disable javadoc subpackage for now:
    <http://issues.apache.org/bugzilla/show_bug.cgi?id=20572>


author: Ville Skyttä <ville.skytta at iki.fi> - 2.4.1-2jpp
changelog:
  - bsf -> oldbsf.
  - Use non-versioned jar in alternative, don't remove it on upgrade.
  - Remove hardcoded packager tag.


author: Ville Skyttä <ville.skytta at iki.fi> 2.4-0.D1.2jpp
changelog:
  - Remove xerces-j1 runtime dependency.
  - Add bcel, jlex, regexp to xsltc runtime requirements:
    <http://xml.apache.org/xalan-j/xsltc_usage.html>
  - Build with -Dbuild.compiler=modern (IBM 1.3.1) to avoid stylebook errors.
  - XSLTC now provides jaxp_transform_impl too.
  - Earlier changes by Henri, from unreleased 2.4-D1.1jpp:
      Mon Jul 15 2002 Henri Gomez <hgomez@users.sourceforge.net> 2.4-D1.1jpp
    - 2.4D1
    - use the jlex 1.2.5-5jpp (patched by Xalan/XSLTC team) rpm
    - use the stylebook-1.0-b3_xalan-2.jar included in source file till it will
      be packaged in jpackage
    - use jaxp_parser_impl (possibly xerces-j2) instead of xerces-j1 for docs
      generation, since it's tuned for stylebook-1.0-b3_xalan-2.jar
    - build and provide xsltc in a separate rpm


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - provides jaxp_transform_impl
  - requires jaxp_parser_impl
  - stylebook already requires xml-commons-apis
  - jaxp_parser_impl already requires xml-commons-apis
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Henri Gomez <hgomez@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - fix built classpath (bsf, bcel are existing jpackage rpms),
  - add buildrequires for javacup and JLex


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.0-1jpp
changelog:
  - 2.2.0 final
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for compat and demo packages
  - fixed package confusion
  - adaptation for new servlet3 package
  - requires xerces-j1 instead of jaxp_parser
  - xml-apis jar now in required xml-commons-apis external package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D14-1jpp
changelog:
  - 2.2.D14
  - javadoc into javadoc package
  - compat.jar into compat package
  - compat javadoc into compat-javadoc package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D10-1mdk
changelog:
  - cvs references
  - splitted demo package
  - moved demo files to /usr/share/xalan-j2
  - only manual package requires stylebook-1.0b3
  - only demo package requires servletapi3


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify 
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-13
changelog:
  - do not crash when using a lot of file descriptors (#958195)
  - fix errors in man page (#891503)
  - fix for command substitutions caused regressions, use different fix (#912443)
  - pipe used in command substitution could affect return codes (#892206)
  - prevent fork bomb trigered by SIGSTP (#910923)
  - fix handling of SIGTTOU signal (#888749)
  - fix memory leak when using arrays in functions (#921138)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-9
changelog:
  - fix exporting of l/r-justified variable (#827522)
  - do not crash when using a lot of file descriptors (#827613)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - fix file descriptor leak (#812930)
  - flush output before forking (#811318)
  - do not create extra process when it's not needed (#804925)
  - assigning a right justified typedef'd variable to a smaller one 
    could corrupt the result (#771188)


author: Michal Hlavinka <mhlavink@redhat.com> 20100621-1
changelog:
  - restore tty settings after timed out read (#573936)
  - fix stdin for double command substitution (#584704)
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - ksh did not wait for pipeline to complete when pipefail option was used (#640379)
  - fix bug when here document got sometimes truncated (#644362)
  - completion used after an environment variable reported bad susbstituion error (#647524)
  - do not forget to restore file handles after execution of sourced script (#650998)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - do not change $0 in posix function (#691933)
  - fix man page information about default value for PATH variable (#699641)
  - ksh child exit code not preserved correctly (#699823)
  - ulimit -v limits cpu instead of virtual memory (#712349)
  - wait was returning incorrect value (#726199)
  - fix crash when unsetting IFS inside a function (2nd reproducer) (#727891)
  - Apparent race condition when using pipes in KSH scripts (#736195)
  - lower resolution of file time comparison (#736462)
  - do not create extra process when calling function defined with function
    keyword (#739664)


author: Michal Hlaivnka <mhlavink@redhat.com> 20100202-5
changelog:
  - fix crash when unsetting IFS inside a function
  - don't forget to close files including auto loaded function definition
  - fix file io race condition when file was created, but still does not exist


author: Michal Hlavinka <mhlavink@redhat.com> 20100202-4
changelog:
  - fix crash when ksh get SIGPIPE while already executing signal handler
  - fix wrong output redirection in SIGPIPE trap
  - fix wrong typeset handling of arrays that could caused a crash


author: Michal Hlavinka <mhlavink@redhat.com> 20091206-1
changelog:
  - updated to 20091211
  - fix looped job list (#435159)
  - fix error code when unsetting a variable that was already unset (#508869)
  - restore shell state when return was used in .profile (#506790)
  - wait for output of background process after foreground's completed (#509326)
  - fix parser failure when alias nested in emacs mode (#513967)
  - don't mention unavailable commands in man pages (#514485)
  - ship RELEASE in doc as change log (#541654)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-15
changelog:
  - fix wrong array size caused by typeset (#538857)
  - fix pids of forked commands (#520383)
  - fix memcmp-memcpy typo causing syntax error (#538655)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-12
changelog:
  - make braces non-optional for ${a[i]} inside [[...]] in the case
    where the argument can be a pattern.


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-11
changelog:
  - prevent rpmbuild creating debuginfo for %ghost files (#488798)
  - don't segfault for inaccessible history file (#494363)
  - add COMPATIBILITY file to the %doc (#494534)
  - use old language catalog, because the new one is broken (#493570)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-7
changelog:
  - fix unexpected behaviour of typeset [options] name=value
  - resolves: #489516
  - fix alternatives for ksh update, when there wasn't alternatives yet


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-5
changelog:
  - fix #488798 - use 'alternatives' for ksh switching
  - fix #485030 - Umask value not restored when returning from a subshell
  - fix #488934 - ksh does not declare shell variables with hyphen


author: Tomas Smetana <tsmetana@redhat.com> 20080202-2
changelog:
  - fix #459228 - option -R not clear
  - fix #459566 - segfault on set -o vi
  - fix #456652 - exit shifts vi to background


author: Tomas Smetana <tsmetana@redhat.com> 20080202-1
changelog:
  - rebase to the new version
  - fix #371441 - can't display international characters
  - fix #429488 - ksh -R can cause segmentation fault
  - fix #435159 - scripts failing under ksh
  - fix #441557 - the -m option removed from the manual page


author: Tomas Smetana <tsmetana@redhat.com> 20060214-1.5
changelog:
  - fix #242879 - memory leak
  - fix #232627 - call to exit(0) returns a status 19 
    to the calling shell script
  - fix #242878 - spins in stopped state
  - fix #243776 - ERR trap causes recursion
  - fix #219420 - unaligned access messages
  - fix #242877 - filesystem acl defaults are ignored
  - fix #278781 - fix handling of sigttou
  - fix #250362 - update manpage about subscript of index array


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-9
changelog:
  - Missed some changes in spec file, and because of that, changes
    for the bz 584987 did not get enabled. Rechecking correct spec
    file.
  Resolves: #584987


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-6
changelog:
  - Addresses bzs 524189 and 524191
  - Addresses key zeroization
  - Updates package description 
  Resolves: #524191


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Added support for using PSK with NSS (rhbz 507844)
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)
  Resolves: CVE-2009-2185
  Resolves: #507844


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-3
changelog:
  - Revised patch to support fips integrity check functionality
  Resolves: #469763 FIPS-140: Add integrity checking


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - Upstream release
  - Major patches for support of NSS and fipscheck libraries
  Resolves: #444801 FIPS-140-2: Meet certification requirements for pluto
  Resolves: #469763 FIPS-140: Add integrity checking
  Resolves: #438998 Openswan's 'cannot route...' problem
  Resolves: #449725 Openswan seg fault using manual keying.
  Resolves: #463931 /etc/ipsec.conf includes /etc/ipsec.d/*.conf which is missing
  Resolves: #466861 avc: denied { write } for pid=2193 comm="ip" path="/var/run/pluto/ipsec_setup.out"
  Resolves: #487708 Misleading package description


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14rc7-1
changelog:
  - new upstream release
  Resolves: #439771 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #441383 openswan should negotiate CCM algorithm
  Resolves: #442955 openswan doesn't accept null esp auth alg
  Resolves: #442956 openswan logging segfault when phase2alg=null
  Resolves: #444166 openswan IKEv2 crashes when interoperating with racoon2


author: Steve Grubb <sgrubb@redhat.com> - 2.6.12-1
changelog:
  - new upstream release
  Resolves: #432821 left/rightsourceip tags not working
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024
  Resolves: #441588 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #442333 AVC denials on start of openswan host-to-host tunnel


author: Steve Grubb <sgrubb@redhat.com> - 2.6.11-1
changelog:
  - new upstream release
  Resolves: #438826 openswan IKEv2 hangs between intel and ppc64 machines
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024


author: Steve Conklin <sconklin@redhat.com> - 2.6.09-1
changelog:
  Resolves: rhbz#432315
  Resolves: rhbz#432805
  Resolves: rhbz#432821
  - Moved to latest upstream
  - removed init script patch and will use upstream
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Steve Conklin <sconklin@redhat.com> - 2.6.05-1
changelog:
  - Latest upstream
  - remove selinux test and message from verify script
  - forgot the following bz earlier
  Resolves: rhbz#253052 Request for IPSec IKEv2


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-9
changelog:
  - cleanup some init problems
  Resolves: rhbz#430149 openswan init script errors
  Resolves: rhbz#430150 openswan emits spurious warnings


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-6
changelog:
  - Moved everything else out of /usr/lib
  - Added tmraz's patch to remove extra slashes in makefile
  - Removed macros from changelog entries


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-4
changelog:
  - Removed use of xmlto and the BuildRequires
  - moved scripts from /usr/lib to /usr/libexec
  - removed man3 pages for libopenswan functions (we don't deliver)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-3
changelog:
  - Removed _smp_mflags macro from from the spec file build section
  - Added BuildRequires for xmlto
  - Changed License from GPL to GPL+
  - removed klips ifdefs from spec file
  - Added patch to move example configs to doc dir
  - Added a patch to make the link to init script relative, 
    for chroot environments


author: Harald Hoyer <harald@redhat.com> - 2.4.4-1.1
changelog:
  - version 2.4.4
  - fixes NISCC Vulnerability Advisory 273756/NISCC/ISAKMP
  - fixes NISCC Advisory 3756/NISCC/ISAKMP


author: Harald Hoyer <harald@redhat.com> - 2.3.1-3
changelog:
  - added openswan-2.3.1-nat_t_aggr.patch
  - added openswan-2.3.1-iproute2.patch
  - added openswan-2.3.1-cisco.patch
  - NAT-T/XAUTH/AGGR-MODE is now possible with a Cisco VPN 3000


author: Harald Hoyer <harald@redhat.com> - 2.3.0-1
changelog:
  - version 2.3.0
  - reimported specfile
  - PIEd openswan
  - cleaned up initial config files and added include directives
    for easy config drop in


author: Harald Hoyer <harald@redhat.com> - 2.1.5-1
changelog:
  - added selinux patch from Daniel Walsh
  - initscript now uses translated strings
  - version 2.1.5 with minor fixes


author: Bill Nottingham <notting@redhat.com> - 2.1.4-6
changelog:
  - don't run by default
  - don't create/chmod directories in %post, just include them with the
    right perms
  - fix debuginfo
  - fix docs


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-8
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #989724 - mod_nss does not respect `NSSVerifyClient` in
    Directory [rhel-5.10.z]


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-7
changelog:
  - Fix 'Bugzilla Bug #749405 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #784548 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Bugzilla Bug #749401 - https://server.testrelm/ipa/xml: Bad Request
    intermittent errors
  - Bugzilla Bug #749402 - may be possible to spoof mod_nss FakeBasicAuth
  - Bugzilla Bug #749405 - mod_nss fails debug assertion
  - Bugzilla Bug #749406 - Add 'libnssckbi.so' runtime dependency . .


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Bugzilla Bug #692868 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Bugzilla Bug #677698 - Lack of interlock between nss processes to pcache
    causes httpd failure
  - Bugzilla Bug #714255 - overrunning array when executing nss_pcache


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-2
changelog:
  - Don't call PK11_ListCerts for every server (#635324)
  - Fix hang when handling large POST under some conditions (#634685)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-1
changelog:
  - Rebase to upstream mod_nss 1.0.8 (#588858)
  - Use remote hostname set by mod_proxy to compare to CN in peer cert (#591901)
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Use _sysconfdir macro instead of /etc
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Václav Pavlín <vpavlin@redhat.com> - 0.97-13.11.1
changelog:
  - grub-install: fix regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1034595


author: Peter Jones <pjones@redhat.com> - 0.97-13.8.el5
changelog:
  - Update documentation for "savedefault" grub-shell command
    Resolves: rhbz#212649
  - Support more than 10 devices
    Resolves: rhbz#829228


author: Peter Jones <pjones@redhat.com> - 0.97-13.6
changelog:
  - Copy the kernel and initrd using a smaller buffer to avoid using memory
    we can't correctly map
    Resolves: rhbz#464178


author: Peter Jones <pjones@redhat.com> - 0.97-13.1
changelog:
  - Fix handling of CCISS devices when installing to the MBR.
    Resolves: rhbz#429187
  - Allow longer kernel command lines
    Resolves: rhbz#336341


author: Peter Jones <pjones@redhat.com> - 0.97-5
changelog:
  - Fix merge error for "bootonce" patch (broken in 0.95->0.97 update)
  - Get rid of the 0.97 "default" stuff, since it conflicts with our working
    method.


author: Peter Jones <pjones@redhat.com> - 0.97-4
changelog:
  - Fix running "install" multiple times on the same fs in the same invocation
    of grub.  (bz #158426 , patch from lxo@redhat.com)


author: Peter Jones <pjones@redhat.com> - 0.95-17
changelog:
  - fix configure conftest.c bugs
  - add -Wno-unused to defeat gcc41 "unused" checking when there are aliases.


author: Peter Jones <pjones@redhat.com> 0.95-15
changelog:
  - Make "grub-install --recheck" warn the user about how bad it is,
    and keep a backup file, which it reverts to upon detecting some errors.


author: Peter Jones <pjones@redhat.com> 0.95-13
changelog:
  - Make the spec work with gcc3 and gcc4, so people can test on existing
    installations.
  - don't treat i2o like a cciss device, since its partition names aren't done
    that way. (#158158)


author: Peter Jones <pjones@redhat.com> 0.95-7
changelog:
  - Make grub ignore everything before the XPM header in the splash image,
    fixing #143879
  - If the boot splash image is missing, use console mode instead 
    of graphics mode.
  - Don't print out errors using the graphics terminal code if we're not
    actually in graphics mode.


author: Peter Jones <pjones@redhat.com> 0.95-6
changelog:
  - reworked much of how the RAID1 support in grub-install works.  This version
    does not require all the devices in the raid to be listed in device.map,
    as long as you specify a physical device or partition rather than an md
    device.  It should also work with a windows dual-boot on the first partition.


author: Peter Jones <pjones@redhat.com> 0.95-5
changelog:
  - added support for RAID1 devices to grub-install, partly based on a
    patch from David Knierim. (#114690)


author: Jeremy Katz <katzj@redhat.com> 0.95-4
changelog:
  - add patch from upstream CVS to handle sparse files on ext[23]
  - make geometry detection a little bit more robust/correct
  - use O_DIRECT when reading/writing from devices.  use aligned buffers as 
    needed for read/write (#125808)
  - actually apply the i2o patch
  - detect cciss/cpqarray devices better (#123249)


author: Jeremy Katz <katzj@redhat.com> - 0.95-2
changelog:
  - add patch from Nicholas Miell to make hiddenmenu work more 
    nicely with splashimage mode (#126764)


author: Jeremy Katz <katzj@redhat.com> - 0.95-1
changelog:
  - update to 0.95
  - drop emd patch, E-MD isn't making forward progress upstream
  - fix static build for x86_64 (#121095)


author: Jeremy Katz <katzj@redhat.com> - 0.94-4
changelog:
  - read geometry off of the disk since HDIO_GETGEO doesn't actually 
    return correct data with a 2.6 kernel


author: Jeremy Katz <katzj@redhat.com> 0.93-3
changelog:
  - add patch from HJ Lu to support large disks (#80980, #63848)
  - add patch to make message when ending edit clearer (#53846)


author: Jeremy Katz <katzj@redhat.com> 0.93-2
changelog:
  - add a patch to reset the terminal type to console before doing 'boot' from
    the command line (#61069)


author: Jeremy Katz <katzj@redhat.com> 0.93-1
changelog:
  - update to 0.93
  - update configfile patch
  - graphics patch rework to fit in as a terminal type as present in 0.93
  - use CFLAGS="-Os -g"
  - patch configure.in to allow building if host_cpu=x86_64, include -m32 in
    CFLAGS if building on x86_64
  - link glibc static on x86_64 to not require glibc32
  - include multiboot info pages
  - drop obsolete patches, reorder remaining patches into some semblance of order


author: Jeremy Katz <katzj@redhat.com> 0.92-1
changelog:
  - update to 0.92
  - back to autoreconf
  - make it work with automake 1.6/autoconf 2.53
  - use "-falign-jumps=1 -falign-loops=1 -falign-functions=1" instead of
    "-malign-jumps=1 -malign-loops=1 -malign-functions=1"	to not use 
    deprecated gcc options


